Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: /Hot3GxnUnGHbff7ETcbHhKBTAyhJvBqWV1kiAh5dmU=
Subject key identifier: B0:5D:F9:5A:3E:97:CD:58:B5:8B:03:4F:B3:92:0E:45:A0:84:B2:79
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 01974C9FE2348645C5B10FB512DCE5FA7D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 0FF6
Signing time: Sat 07 Jun 2025 23:00:35 +0000
Manifest this update: Sat 07 Jun 2025 23:00:35 +0000
Manifest next update: Sun 08 Jun 2025 23:00:35 +0000
Files and hashes: 1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=)
2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: KSse+tsH7iYdIjIbX30FKzKnty5GyOzb7pAR/FHOcB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:e2:34:86:45:c5:b1:0f:b5:12:dc:e5:fa:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Jun 7 23:00:35 2025 GMT
Not After : Jun 8 23:00:35 2025 GMT
Subject: CN=b05df95a3e97cd58b58b034fb3920e45a084b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:77:fe:48:78:d9:ec:11:eb:84:b2:5a:e1:
de:8c:e6:fb:c7:9d:f1:5f:e8:90:3c:aa:53:e5:43:
13:62:fc:52:aa:b0:58:38:95:10:42:00:a3:23:ec:
6c:bf:50:bc:5e:56:d2:5a:f5:ad:9f:b5:cd:0f:2a:
80:28:35:c2:88:50:cb:c2:16:4f:85:e8:94:98:18:
a4:29:7a:51:35:f9:42:6d:0b:6d:8f:49:12:29:f7:
e7:53:cf:19:66:93:0b:11:86:de:c4:b0:88:19:dd:
b8:68:ad:81:82:34:2c:69:9a:b6:07:63:df:b6:e9:
4a:8a:a3:c1:3e:ca:6e:58:ec:97:40:92:95:36:5c:
13:5b:58:4e:c0:2b:ee:98:f9:56:0b:9b:a8:8f:f8:
67:c0:70:09:4b:fc:22:de:3e:48:13:5b:d5:b6:a8:
61:c3:41:37:aa:bc:fd:d8:7b:e1:f2:74:e0:b9:1c:
be:9c:7f:92:87:b4:fb:e7:85:c7:4f:da:01:d4:a6:
cf:7a:be:43:af:02:9c:c4:e5:13:e0:23:cb:48:61:
01:92:c0:30:3e:85:10:45:02:9d:96:3a:05:40:d3:
a7:10:30:18:9d:b6:81:2c:a5:5f:ac:67:3f:3d:07:
11:74:3a:85:25:3b:71:55:f4:61:64:95:f6:dd:ea:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:F9:5A:3E:97:CD:58:B5:8B:03:4F:B3:92:0E:45:A0:84:B2:79
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:94:0f:a9:d3:f8:02:a7:71:77:21:87:f3:04:d3:87:55:
ae:50:33:ec:30:92:5a:f0:ca:e9:8d:08:8b:bd:e2:ca:14:c7:
d7:09:67:ad:32:4b:07:5c:73:ab:e3:fd:c1:f6:1d:31:29:a0:
75:a7:40:82:76:cb:68:84:00:f7:48:d5:08:33:c3:35:84:79:
00:d9:d6:c0:1b:12:62:52:fc:25:11:31:05:44:72:f6:62:4e:
78:af:af:5a:d5:f8:e6:b8:98:17:86:3d:f9:97:25:07:de:c0:
87:de:4e:4e:f4:75:8b:62:a3:7b:4f:55:bb:7b:29:78:9d:97:
b8:19:c5:df:d7:b7:4c:f5:ca:9a:3a:20:1d:52:f4:10:47:93:
dc:37:cb:82:51:9e:e0:fd:ea:d1:bf:d6:45:c8:28:4d:a6:bc:
85:68:59:bd:78:fa:b6:0d:aa:8e:67:f4:78:8d:8f:f9:bc:ac:
b8:c1:80:7c:d1:4d:17:50:68:90:cc:d0:36:98:13:2a:97:28:
93:ca:0c:f9:15:ca:3d:09:26:6e:86:4d:bb:b6:62:f9:20:ba:
08:31:be:63:47:da:06:95:2e:64:a7:c3:57:bb:15:40:49:c3:
4d:46:82:df:6c:9f:b5:d2:5f:6a:3b:9e:59:40:c9:b0:13:02:
2a:49:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:36 2025 by rpki-client