Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: VILxpZPMKCFeWJo7Ln4d0g5KpAlzdR3Xvu2wU0niA0E=
Subject key identifier: 80:BA:8F:75:89:89:96:6E:12:52:2C:DB:0A:38:2A:2B:2E:2A:51:6E
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 0197470BF8B3381203C2E61BC82AA0AD7734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 150D
Signing time: Fri 06 Jun 2025 21:00:56 +0000
Manifest this update: Fri 06 Jun 2025 21:00:56 +0000
Manifest next update: Sat 07 Jun 2025 21:00:56 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: kF3mam5AJnZ7O/I8oBCM9XPsqfhmfSG9jm2IBM0e504=)
2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:f8:b3:38:12:03:c2:e6:1b:c8:2a:a0:ad:77:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Jun 6 21:00:56 2025 GMT
Not After : Jun 7 21:00:56 2025 GMT
Subject: CN=80ba8f758989966e12522cdb0a382a2b2e2a516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:90:ce:aa:d2:60:01:b2:0d:85:3b:0e:53:
5c:1c:96:a4:e4:0d:a2:b4:84:aa:12:d6:c9:8a:ff:
03:4e:b4:87:28:e4:77:d5:3f:67:76:ad:fa:9c:6a:
46:d9:97:d1:9e:3d:31:e4:4d:98:86:3c:4c:00:ce:
b2:18:a5:bb:a7:cc:83:be:9f:2a:79:df:06:bc:0d:
ff:e6:33:60:41:a5:63:5a:0a:d3:5c:0b:2a:68:59:
a3:40:c9:d7:65:9c:37:b3:c8:90:90:a8:01:89:78:
d9:b6:03:f4:2f:0a:bf:1e:64:fd:84:0a:1d:02:18:
a6:d2:2a:66:01:bf:89:ff:f1:50:d2:10:16:6e:9a:
8c:59:0b:91:60:8a:66:7a:71:ad:06:20:64:91:64:
b9:ba:be:a1:2b:66:26:dc:67:b1:1e:fb:38:0f:4c:
da:8b:57:47:0f:8a:8a:3e:cb:fd:c6:dc:d6:55:21:
03:a7:bb:7f:fe:ba:87:80:f9:ac:a1:2d:da:8d:6a:
44:8b:27:d3:10:f7:68:4a:18:c0:16:5d:5f:91:7a:
c4:dc:06:04:bb:d4:2c:fb:22:8e:56:65:f0:c3:cf:
9d:ad:62:04:fa:03:1e:68:fc:d1:eb:87:0d:90:55:
81:ad:f1:91:b1:bf:03:ea:3d:2e:37:f6:e8:f0:f9:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:8F:75:89:89:96:6E:12:52:2C:DB:0A:38:2A:2B:2E:2A:51:6E
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:1f:30:67:46:b8:9a:4e:17:a2:80:e0:5a:a8:62:91:67:
a0:e1:4a:89:c1:84:f6:27:cc:58:bd:c0:95:6f:38:23:f0:36:
4c:0d:ca:63:3b:26:41:0f:df:33:5b:5b:a6:2c:f9:b3:e9:4d:
fb:ba:79:98:25:52:a0:90:07:60:85:cd:64:33:f8:60:d2:20:
48:a1:ca:bb:36:0f:49:80:01:7a:0f:a8:16:6c:d4:b7:7e:83:
29:1c:15:43:bc:96:62:30:18:90:95:46:a3:ee:49:9b:19:f6:
1c:41:b7:da:75:06:a7:74:04:48:3e:c7:37:07:e2:dd:79:18:
e7:3c:55:00:ea:ce:89:48:e8:ee:14:38:74:b3:39:c9:54:bc:
0d:f6:a2:30:b5:38:05:c7:b9:94:12:f5:90:16:f7:a6:22:77:
26:a9:ec:e9:05:ea:24:70:4d:ce:5e:2d:d5:9d:7d:b5:b5:60:
47:dd:a4:8a:ca:8c:a4:22:ae:79:4c:bf:06:7b:72:9f:f4:49:
e8:60:be:8d:69:4e:c8:c0:67:8a:29:1e:c0:6e:4e:1d:f5:17:
2d:11:d2:69:de:c8:93:2f:09:63:96:7c:4c:f5:4f:0c:5b:b2:
8d:e5:da:ff:19:e5:5b:cf:47:ac:cf:33:05:85:28:99:a4:74:
8a:04:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:56 2025 by rpki-client