Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: NIWsAY5OyEVzg26vKxMOllX3hA5DYTiJ3LBwRAfV4as=
Subject key identifier: B5:DD:B3:24:6E:A6:3A:58:13:8A:03:A9:0B:1D:B7:14:C0:20:BC:14
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 01974A7ADECACA29018448CE54D035BDA0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0968
Signing time: Sat 07 Jun 2025 13:00:55 +0000
Manifest this update: Sat 07 Jun 2025 13:00:55 +0000
Manifest next update: Sun 08 Jun 2025 13:00:55 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: tV0w6YidshggwlxcE0hqXizYKJnucrVpESjtIqVHE08=)
2: tX_eiSv6b9gWuAzQ90obdliFuqM.roa (hash: ZiFHzPJvZH9N84EKs/55J2Q6VVzMS4porN9rlx3w+2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:de:ca:ca:29:01:84:48:ce:54:d0:35:bd:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Jun 7 13:00:55 2025 GMT
Not After : Jun 8 13:00:55 2025 GMT
Subject: CN=b5ddb3246ea63a58138a03a90b1db714c020bc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:c1:84:2c:45:18:59:35:13:a3:6c:32:05:
08:25:07:32:31:60:cd:b2:f8:82:ff:01:f7:4e:4c:
b4:45:2c:1b:98:47:75:93:b9:47:7b:13:07:3b:1d:
8d:d9:81:6d:2c:af:10:79:4d:4a:20:ba:35:5c:c9:
ac:f4:3a:29:cd:32:f5:f7:21:52:7e:d0:42:9e:cd:
33:46:ee:fc:06:0b:90:2b:4a:12:1c:87:f6:23:51:
85:72:b9:2f:48:71:be:d4:08:39:be:e3:89:ae:b5:
41:87:8f:92:f9:a5:cb:fe:fb:47:05:ce:07:fd:10:
a8:92:5a:61:78:ed:97:ce:7f:4f:fb:c4:ef:8d:14:
4b:ca:dd:08:a6:ad:fa:8b:ca:b1:c9:2e:7b:f7:02:
77:6d:df:dd:ae:00:55:c8:c2:0b:0e:e5:96:1d:a6:
a3:0d:fe:d6:d1:99:6c:45:6d:69:2c:de:1b:fd:d0:
dc:00:f8:78:51:c4:d6:50:96:74:28:a5:18:6b:a6:
05:06:ba:fb:d4:c2:66:f5:31:35:b8:3a:df:0a:29:
d6:1c:d1:1c:83:c7:43:d8:6f:01:2d:1d:b5:3e:9f:
76:b4:2d:62:63:6b:aa:8c:79:cb:ec:59:a6:99:67:
4c:13:fe:27:6e:84:93:b2:9b:56:cc:9f:f6:0d:11:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:B3:24:6E:A6:3A:58:13:8A:03:A9:0B:1D:B7:14:C0:20:BC:14
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:2e:e3:4e:9f:52:a7:97:99:c3:b4:35:ad:86:32:d1:43:
02:fe:de:02:2c:eb:4b:24:ec:fa:c8:01:49:23:57:8f:a6:72:
9c:27:c5:f6:14:7e:d2:fc:1a:29:66:39:44:c2:7a:db:eb:95:
32:7c:2a:5d:2c:5e:33:fc:fa:a2:dd:47:9d:76:dd:69:b2:9a:
4a:8d:25:be:b6:81:66:58:f4:e3:06:10:e1:95:39:d9:d3:49:
17:7f:54:d7:73:f4:9c:c2:a2:13:41:36:d7:66:b6:02:67:00:
91:de:a2:9d:4d:3b:ec:26:60:7c:b2:5a:65:5e:79:15:7e:9e:
4d:35:9e:3b:42:54:bf:3a:51:88:0a:69:85:0a:ad:f7:f7:16:
88:4a:5e:63:04:a1:af:06:ed:e4:d4:e8:95:55:30:ce:1f:8c:
39:38:60:f4:50:ae:92:7a:6c:ec:58:73:c8:96:99:cf:c1:f5:
8d:4b:a3:e1:13:2d:37:2a:24:ec:31:72:8e:7b:b3:4d:a3:e8:
e1:f4:a4:58:9f:d7:44:b0:85:3a:eb:cb:91:ea:a3:46:8a:ae:
d3:aa:9d:aa:15:b0:61:01:4d:f8:6b:d7:ac:41:62:aa:5b:8f:
c5:71:8b:dc:07:f2:4f:e2:ec:b0:2f:0a:0e:18:ee:b1:b5:c5:
a9:d6:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:45 2025 by rpki-client