Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: IgXcMyog7qmuFthPQ1hlLgDsfV40THx/bRl/z1yYUBI=
Subject key identifier: A9:43:E7:6E:40:0E:D2:7A:20:C9:3E:D1:81:1E:FE:D6:08:0C:20:2F
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019746303BBB120432E812409D6E317559FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0CC1
Signing time: Fri 06 Jun 2025 17:00:55 +0000
Manifest this update: Fri 06 Jun 2025 17:00:55 +0000
Manifest next update: Sat 07 Jun 2025 17:00:55 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: I94/F1gtUdnyjwNmYmKTm997PQMpu0/4BUTXbWeZkVI=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:3b:bb:12:04:32:e8:12:40:9d:6e:31:75:59:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jun 6 17:00:55 2025 GMT
Not After : Jun 7 17:00:55 2025 GMT
Subject: CN=a943e76e400ed27a20c93ed1811efed6080c202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:1d:3e:50:06:44:e2:d1:b5:88:f7:92:7f:
51:02:87:6f:6b:4d:eb:81:16:76:99:c3:11:a8:9f:
4a:36:66:79:d8:3d:c8:48:1b:b6:bf:55:2f:14:f1:
db:1d:b8:a9:99:b6:65:ff:0a:dd:93:47:46:8b:96:
02:9d:36:ca:63:4d:89:43:bf:6a:b4:85:c8:2d:cd:
26:45:db:76:a3:e6:67:5b:b9:e3:86:33:2e:12:0e:
48:04:e4:71:9a:01:88:b9:82:14:17:ee:1a:83:80:
3b:ae:16:ed:0e:8d:40:e4:4b:1d:f0:70:7b:64:08:
d7:8d:53:51:a2:24:55:ff:c5:34:9e:8e:6f:7e:a3:
e8:ab:be:ff:68:12:0b:d5:49:65:b2:6e:3a:b9:09:
ff:d8:bc:1c:62:72:1d:24:17:c0:25:e7:bf:5d:cc:
ad:d2:87:08:7f:f1:dd:1a:7a:e4:f3:ca:f3:bb:58:
83:39:87:43:c0:c3:00:c4:36:a0:54:bf:33:2e:0c:
c0:ec:d2:3b:1f:cf:8e:70:8d:fd:40:73:5d:50:2b:
ac:36:ec:fb:5c:be:36:85:c0:a2:1c:5e:3b:86:9c:
d7:68:d3:e5:fc:92:9e:16:4f:60:14:3f:64:ea:7d:
a8:a0:25:a1:7a:cc:44:10:bc:bd:c0:26:f7:a6:5e:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:E7:6E:40:0E:D2:7A:20:C9:3E:D1:81:1E:FE:D6:08:0C:20:2F
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:e6:9c:c7:77:cc:fd:fe:0f:65:2e:ad:00:64:d5:05:8e:
e4:80:5f:f8:de:c7:77:3e:55:90:26:3f:c9:cc:46:6b:95:be:
6e:70:1d:ae:1d:74:af:b9:d1:4b:5c:7e:e6:9f:14:37:f5:34:
4b:6f:d4:cb:69:d7:9c:dd:1e:24:e7:6d:cb:12:64:e6:dd:f1:
0c:29:a2:3f:c8:69:02:2b:17:69:a8:08:06:da:80:85:e4:33:
f1:85:26:8b:ca:58:11:96:44:cc:72:8b:8e:34:ac:27:11:9f:
ae:64:6a:5b:63:05:fb:da:a3:3e:53:22:58:79:20:37:63:ab:
61:78:5c:98:79:d3:6a:a4:ad:8a:3f:c1:0f:9c:d2:52:1a:ec:
96:3a:77:05:08:45:55:df:75:59:26:9c:d3:8e:27:66:5a:dd:
c8:d4:da:7a:66:c3:b3:30:74:ac:2d:40:e5:6c:52:c3:3d:cc:
b2:25:c7:cb:a7:87:ca:6e:c3:8b:00:ae:35:5a:de:0a:b5:aa:
5c:83:27:cd:77:1c:cf:72:1b:ee:01:80:35:20:6a:4c:b1:2a:
56:c9:fb:95:b5:95:fd:b7:b4:9f:b1:42:42:3b:57:49:ea:7b:
7c:b9:39:55:af:31:96:88:5f:8f:ca:0e:17:44:74:98:f3:31:
a0:ff:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:52:13 2025 by rpki-client