Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: hBLd5F4z7yIzPG2I2ArgsBLFhUF9svKfFPTxDtY2t7w=
Subject key identifier: 37:F2:B2:38:71:6F:A8:F1:53:A1:24:76:89:F4:E4:FE:C1:57:92:BE
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019745F950EC246E21FDB8BE0849E96D4ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0B6C
Signing time: Fri 06 Jun 2025 16:00:56 +0000
Manifest this update: Fri 06 Jun 2025 16:00:56 +0000
Manifest next update: Sat 07 Jun 2025 16:00:56 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: bRYs0lNtJ8RtokSgfIXy4gsqVIz55RzGRRs5YdWmMtU=)
2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=)
3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:50:ec:24:6e:21:fd:b8:be:08:49:e9:6d:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jun 6 16:00:56 2025 GMT
Not After : Jun 7 16:00:56 2025 GMT
Subject: CN=37f2b238716fa8f153a1247689f4e4fec15792be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:23:1d:3d:1e:d0:09:53:9c:10:f2:f1:8b:
95:d2:ce:de:ae:f8:d6:52:52:38:9e:7c:20:68:4a:
82:f6:a0:be:8d:be:e8:eb:50:3c:99:e3:7e:b0:36:
c8:f2:c0:b2:e0:43:34:1a:b8:2e:e0:f0:8d:36:a9:
9e:7e:ca:83:83:7f:b6:02:d8:41:0b:97:c9:dd:65:
2a:0d:79:a2:3d:6e:41:47:78:c6:f5:f1:c1:59:11:
cd:92:89:91:0b:84:91:eb:41:72:5b:d0:2b:28:3e:
45:7c:32:71:24:bd:a5:45:6b:7d:df:74:15:37:89:
af:5f:2d:b6:b0:bd:c0:9f:f1:c7:f1:2b:d0:64:2b:
ab:27:32:cd:0a:8f:0c:ec:fb:a3:93:de:e2:f9:71:
a3:2c:22:8e:34:00:29:e1:f8:96:5f:cd:de:aa:16:
b3:af:62:ac:7c:06:b6:f7:91:26:b5:b0:9e:e8:7f:
5a:7a:7b:d5:0d:1d:14:07:5d:13:e4:fa:fb:6e:d9:
86:08:bf:b1:f5:99:c3:9b:a2:5c:02:4f:30:84:a5:
56:d4:25:71:4b:8d:c4:12:39:b1:5b:d2:ed:cd:89:
df:fb:54:2b:ca:76:40:f7:d7:b5:5b:7f:0f:69:1c:
1a:fc:8c:4e:d4:c6:11:52:ed:e2:55:81:24:9c:ce:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:B2:38:71:6F:A8:F1:53:A1:24:76:89:F4:E4:FE:C1:57:92:BE
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:af:fd:ee:65:76:32:ac:dd:a4:f2:94:be:58:36:f9:54:8c:
85:9c:58:32:e4:f7:d6:92:20:fc:17:4b:3c:89:fb:85:af:0f:
d9:55:4f:01:fa:a2:6a:d5:97:96:06:77:cd:c0:4e:62:37:aa:
32:0b:fa:9d:b1:ea:8b:e5:38:b3:69:80:bd:30:b7:78:25:4b:
9d:d7:df:a6:1f:ac:8d:2b:ab:2a:97:45:90:ad:b7:9f:c9:7d:
0a:d8:3e:4b:11:04:18:a2:ae:f3:c1:f2:a6:32:c1:b5:8b:7e:
4f:4c:60:7b:67:60:05:25:a3:c8:9d:3a:7e:01:9f:08:5e:03:
ac:53:65:11:74:a9:b0:89:41:8b:1f:2c:57:35:e3:b4:a7:89:
1c:ba:e2:06:c5:40:c8:2a:93:2a:fa:cf:1e:9f:ad:8b:61:86:
d0:63:e6:87:0c:09:db:6d:59:70:ef:38:d1:d6:c2:a2:08:7b:
fc:68:37:e9:ca:ce:44:86:8c:86:d4:36:a6:68:75:0d:13:07:
a5:c7:0d:39:bd:4e:b4:ea:d2:ec:4c:5e:48:58:ad:d2:1b:fe:
ce:71:3b:cb:19:30:41:d0:6b:ca:5d:6f:e8:49:71:5d:25:93:
7f:09:f0:18:26:9d:9d:43:e8:3c:0a:2d:4c:01:e5:bc:8d:eb:
26:80:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:18:42 2025 by rpki-client