Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: KNYX4ynOYbRGW7nG7BINFuyAPHj3bm4e+ADextkoF8k=
Subject key identifier: AA:2B:07:34:A2:FB:25:4E:60:95:D1:0B:5D:BA:4A:D2:0A:6C:39:D4
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 019751FD29902841CF83A61D00856FD0DA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 1F
Signing time: Mon 09 Jun 2025 00:00:35 +0000
Manifest this update: Mon 09 Jun 2025 00:00:35 +0000
Manifest next update: Tue 10 Jun 2025 00:00:35 +0000
Files and hashes: 1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: K1lsA9mBQp6WNjOdUxPDC6eD7epIuci4FtRGe6Evk8c=)
2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:29:90:28:41:cf:83:a6:1d:00:85:6f:d0:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Jun 9 00:00:35 2025 GMT
Not After : Jun 10 00:00:35 2025 GMT
Subject: CN=aa2b0734a2fb254e6095d10b5dba4ad20a6c39d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:8f:b1:99:21:9b:c1:94:1b:d0:af:af:50:
db:67:01:81:a7:c7:d5:50:d5:c7:f7:1d:16:56:b4:
39:65:27:9b:d9:e9:ac:f7:9e:13:c8:26:8d:8e:7c:
49:a6:b3:cd:ca:3c:ea:d9:fd:78:06:0a:95:c3:f0:
fb:a9:ed:91:17:93:f1:50:4f:a7:5a:8d:cb:14:a9:
a2:f9:8f:d8:45:9b:7b:a7:bf:56:64:e9:61:7a:88:
bd:40:03:36:a3:02:e3:d7:a5:4b:84:e9:02:3b:1d:
31:b9:ba:25:30:ba:d6:eb:49:89:68:13:89:40:42:
69:f5:fe:b2:35:0a:3f:65:69:4c:a6:95:a3:37:d6:
37:e3:52:0a:5c:f6:3d:e2:f9:5d:55:f7:29:44:46:
17:d3:c8:7f:5f:86:23:60:84:b6:a3:f9:71:53:1e:
68:60:e5:75:74:55:90:8b:75:e4:42:20:9f:f9:7a:
4d:cf:26:46:8c:19:0c:0b:f9:da:a9:be:6c:76:98:
c8:ab:ca:d5:1e:d9:41:ed:b4:0d:45:21:3d:47:79:
70:3e:1c:b2:21:7c:0a:f7:41:7e:fc:ab:9f:e9:c1:
4e:b2:f2:35:e1:a0:11:82:71:af:25:68:73:62:a5:
66:18:27:b4:f9:9f:ea:72:e2:7f:f4:c1:0f:7c:87:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:07:34:A2:FB:25:4E:60:95:D1:0B:5D:BA:4A:D2:0A:6C:39:D4
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:8e:74:d7:56:6d:d2:14:34:63:0a:f1:7c:f6:7e:04:e7:
5d:3b:cf:22:ce:79:5f:44:03:74:ee:3e:2f:9a:1b:5a:fb:46:
3f:f8:ba:cd:fd:fe:b7:44:16:bf:d9:84:c0:a9:93:51:4f:d5:
a3:c3:10:04:0e:b0:37:58:8d:b3:8c:f2:1a:11:18:5e:23:81:
c4:40:61:4b:b4:3e:46:e1:af:07:b0:ad:84:ba:08:27:1e:2d:
37:db:89:3c:9e:87:47:e1:35:93:cd:60:e4:4d:2b:a5:e5:c4:
5f:52:4b:9c:90:6b:64:1a:7a:0a:c0:58:e9:72:cb:52:d2:40:
1a:af:83:52:8a:97:2e:6d:8d:0d:1b:91:f4:ba:fc:fd:55:7b:
44:58:db:25:9f:d3:73:db:e6:21:03:9e:f9:5a:5b:07:31:0c:
3a:86:d0:64:e8:c7:75:25:b1:59:75:07:12:56:10:04:bf:7a:
2e:ea:e1:a3:9d:2e:ca:40:05:2a:1a:a1:25:9c:5e:56:c3:84:
d1:72:8c:dc:b2:6d:23:04:ee:80:d6:0b:d8:0b:66:06:31:2b:
8d:f5:01:96:f3:83:1c:d0:ed:e1:eb:52:6a:8f:5c:bc:db:b5:
a2:8d:18:90:46:9f:75:41:0a:32:83:5f:94:95:91:fb:cb:24:
8f:b6:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:02 2025 by rpki-client