Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: D1bjObElhY8++4Q/OzLQssiOQWZTMA1LtwDEMHaKaZQ=
Subject key identifier: A8:63:72:31:16:26:C8:BF:7F:6A:35:3E:8D:D8:42:25:25:E1:F1:13
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 0197477A25A72FD8AED61E3ECF2C5CCDFE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 23:01:16 +0000
Manifest this update: Fri 06 Jun 2025 23:01:16 +0000
Manifest next update: Sat 07 Jun 2025 23:01:16 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: nZUqMcEvU83DsqPx0B+MmSa84TfDOwfIaYZRpOVtqCY=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:25:a7:2f:d8:ae:d6:1e:3e:cf:2c:5c:cd:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jun 6 23:01:16 2025 GMT
Not After : Jun 7 23:01:16 2025 GMT
Subject: CN=a86372311626c8bf7f6a353e8dd8422525e1f113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:eb:f7:e8:47:0a:87:c1:20:8c:ba:6e:0d:
8a:d7:68:df:45:d2:b2:46:d0:21:23:22:25:61:89:
6c:49:0f:d3:9c:79:1e:3f:41:a1:6a:5c:21:f8:a1:
65:21:4a:88:99:07:01:08:9b:2c:b2:3c:e9:3b:7b:
7e:a0:2a:7e:70:81:d1:c2:e6:45:6f:d0:7e:6f:83:
27:5b:9f:ce:b7:83:48:c3:bb:d1:35:c3:5b:78:ae:
04:bb:bd:ee:2e:54:fe:a6:c6:15:be:23:50:7b:86:
5a:f4:a4:17:f2:76:9c:bd:dd:53:bd:13:36:ad:4d:
79:26:55:e3:21:d0:bd:04:0e:5e:8c:76:be:79:dc:
7b:25:99:48:4d:71:53:ed:2c:a5:eb:6b:9e:78:ad:
29:97:10:bf:bd:30:28:a0:b3:58:f5:ed:68:3b:e8:
06:01:2a:0f:01:53:ca:6e:75:00:4f:6e:d6:e9:56:
e3:8f:d3:3e:1a:c9:35:51:08:9c:06:5c:85:08:a7:
06:6a:c2:31:92:f6:63:77:24:a6:92:01:76:04:6c:
59:38:56:b5:f9:5e:90:a9:a2:97:47:6a:8a:59:6e:
7c:3b:70:8e:43:50:62:65:81:64:a8:e7:bd:29:82:
e6:b8:9f:16:00:93:ad:c9:8e:6f:b6:08:f3:0b:70:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:72:31:16:26:C8:BF:7F:6A:35:3E:8D:D8:42:25:25:E1:F1:13
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7a:86:a7:7d:8e:bd:b4:15:e7:5f:64:ee:3a:d5:09:16:1e:
21:86:3d:f1:e4:e3:a0:76:62:cc:b3:88:ad:b8:8b:43:78:6f:
86:7a:d0:80:a7:ee:c1:92:b6:ba:ce:03:bb:84:5f:ee:39:a7:
3b:b2:00:30:ff:31:37:6c:12:68:61:56:ca:f1:c3:59:31:74:
49:31:bb:3e:b0:46:c2:e6:41:52:3a:33:63:84:79:f7:24:11:
de:c4:37:b3:4f:24:32:96:72:7f:b7:e0:d3:b1:8f:65:19:1f:
41:0b:fb:76:01:90:0c:b2:57:07:67:1b:5e:ba:ac:90:a0:c9:
f1:f5:03:80:a1:db:1f:2f:a7:75:ae:82:09:0f:6d:d2:09:12:
a5:43:42:24:b5:98:65:67:b5:6d:24:26:e3:73:ec:e4:72:57:
06:ee:45:cc:1f:56:22:b7:77:8d:ad:25:9a:b9:35:79:f0:86:
d2:ba:c6:bb:d6:4d:46:1d:6b:20:70:54:a1:64:54:6d:f5:64:
59:bf:52:77:b5:06:a9:2b:5d:96:2c:76:20:fd:a1:f1:3a:e4:
4e:ff:97:b1:5f:5d:00:3d:77:7a:55:e1:d5:7b:93:f1:07:51:
0c:ed:d6:d8:69:3b:12:20:36:0c:05:61:92:a7:64:0d:38:b3:
6e:a1:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:33 2025 by rpki-client