Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: 3jQPmU48yJZZKQ8RUL6dJ0aFJzFrPJA0K7/vJGFCyho=
Subject key identifier: 19:7E:A8:88:F5:CA:C6:62:15:1A:48:6C:48:FA:C3:4E:29:F7:EE:60
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 01975F4AE62E7BF856EE7D7EDB321A66634B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 072F
Signing time: Wed 11 Jun 2025 14:00:33 +0000
Manifest this update: Wed 11 Jun 2025 14:00:33 +0000
Manifest next update: Thu 12 Jun 2025 14:00:33 +0000
Files and hashes: 1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: iKhw4YY9V4EpczRMyf1mZpgZ60y5bCm7fZKzkkqccrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4a:e6:2e:7b:f8:56:ee:7d:7e:db:32:1a:66:63:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Jun 11 14:00:33 2025 GMT
Not After : Jun 12 14:00:33 2025 GMT
Subject: CN=197ea888f5cac662151a486c48fac34e29f7ee60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:3b:b5:f2:d6:fa:ce:35:67:b2:8c:f4:10:
d6:d0:fc:b3:c8:c4:17:9f:26:56:5e:50:5b:6a:d7:
ef:ae:95:d1:94:b8:8a:fb:ff:45:83:bb:29:b0:f6:
b4:ca:24:d4:5a:5b:a4:6f:53:3d:ef:df:f4:3f:3a:
3d:f1:b4:ce:5d:89:19:d9:65:a3:ae:ed:7a:91:23:
e7:92:84:2a:c8:f1:bf:09:c5:d1:35:bb:5f:09:37:
a2:5f:65:da:bf:44:94:a0:4d:c1:6e:71:cc:b3:e8:
2c:5e:79:da:b1:63:6f:0a:8b:4b:e9:e1:ee:b0:3f:
f5:f8:34:bb:e5:ee:39:fb:94:3c:9d:01:d4:79:71:
05:00:aa:31:b5:aa:79:4d:f5:20:18:03:56:25:68:
a6:a5:59:a0:4c:64:51:1c:bb:a1:a6:b4:5a:44:cc:
26:78:52:cd:14:be:cb:e7:8d:8e:c4:00:ac:b1:1d:
bb:64:37:4a:5a:a1:f0:3b:9b:79:35:d2:56:fc:37:
6f:07:96:b9:67:c3:8a:3b:e9:f6:8f:bb:71:e4:4c:
d6:10:73:84:45:c0:d3:bc:33:1a:94:76:95:77:76:
a9:1d:13:f3:53:4e:a4:e6:02:3c:2a:aa:dd:6e:47:
f4:6b:e9:1e:71:a0:bd:fc:67:e2:5e:c1:18:73:5c:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:A8:88:F5:CA:C6:62:15:1A:48:6C:48:FA:C3:4E:29:F7:EE:60
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cd:d5:f8:2d:ac:a3:32:df:f7:e9:ed:04:00:e4:a4:54:4e:
b0:28:03:59:24:c4:c6:9d:3d:c1:a5:aa:e9:b7:36:f7:ff:28:
1d:a6:06:73:a5:c1:6a:c0:7a:d2:ea:d4:03:37:40:6e:91:5e:
aa:5f:cc:1e:7f:c8:f9:ac:c9:9c:ea:eb:09:30:c6:21:59:ac:
74:28:7d:11:a9:79:11:69:4a:f3:09:5e:a7:02:6a:62:e9:45:
07:05:7e:fa:6d:8b:43:95:93:8c:da:06:fa:99:54:42:c9:a2:
4a:f4:b1:08:db:ba:c5:76:ef:2f:18:2a:95:be:fc:66:be:5a:
fa:45:3b:56:e6:1a:98:ae:46:3a:0c:06:d7:98:5a:fd:51:03:
5b:37:ff:4c:22:af:8a:76:71:3a:5b:26:ff:2a:64:96:82:18:
6a:b3:6e:29:c5:6f:f9:7d:43:19:e9:e2:d3:6f:5d:0e:50:c2:
6a:9d:1b:3a:30:59:d3:2c:26:b9:d0:10:00:85:21:14:a6:75:
16:71:07:35:0b:98:da:5c:76:83:8f:5f:d9:a6:a0:f6:ad:0c:
f7:66:60:e6:b2:41:48:fc:96:4f:dc:d5:5c:a8:c7:86:6c:b7:
f9:d8:3c:93:73:ba:de:b4:35:4a:ef:5c:86:19:9f:e8:cd:6d:
c2:12:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:56:35 2025 by rpki-client