Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: 0KxbuO6OEaFKM+CSWSuyAkA9hHzMgCNdkh79odKXXzM=
Subject key identifier: 9B:6A:91:48:6B:4D:D5:53:CB:D5:5D:33:5F:82:39:FA:A4:1B:B7:B2
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 01976E8767BC15216F568ADEE3D5CB432852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0A37
Signing time: Sat 14 Jun 2025 13:00:56 +0000
Manifest this update: Sat 14 Jun 2025 13:00:56 +0000
Manifest next update: Sun 15 Jun 2025 13:00:56 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 43n9gBp/35BVW8z3k1M7v/BL7VTdgtjHzIiYWT71P9k=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:67:bc:15:21:6f:56:8a:de:e3:d5:cb:43:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jun 14 13:00:56 2025 GMT
Not After : Jun 15 13:00:56 2025 GMT
Subject: CN=9b6a91486b4dd553cbd55d335f8239faa41bb7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:c1:1a:cf:98:cc:0f:5c:b3:13:63:38:cc:
ac:e5:9f:ac:10:16:d0:bc:0d:ce:32:37:c7:29:ea:
95:4d:e3:7d:fa:3e:05:9d:ea:84:e9:d9:e5:72:f2:
92:9d:0e:9e:26:7b:49:e4:66:4d:af:1a:b9:aa:e5:
5e:44:ed:e7:8a:90:1e:11:da:62:fc:e4:1c:26:10:
02:f3:9f:99:b0:59:fd:cd:99:3c:5b:6a:0c:0e:f9:
48:39:70:39:e4:fe:74:fc:69:96:38:95:e6:5c:5b:
36:11:a0:8f:cb:f0:92:68:3e:ec:ca:9d:b5:71:93:
01:47:63:c9:3d:93:f4:20:12:e9:43:93:df:e0:3d:
90:fb:de:73:b4:62:35:9c:d7:8a:a5:2e:c0:24:9c:
f0:2c:ca:ca:0b:27:b4:d8:97:21:98:7a:ef:6b:0d:
8e:ed:a8:94:b1:1f:7f:8b:19:db:69:2e:30:eb:b9:
90:3f:31:96:45:15:79:18:5a:8c:f0:a8:cd:98:59:
a8:51:fb:9c:15:88:94:c7:80:30:d7:43:51:e7:eb:
f8:42:b8:b1:76:7a:2a:90:0a:7f:49:dc:83:04:18:
ca:50:55:7b:c4:a7:cf:14:b8:7f:1a:22:1b:79:d2:
02:f6:04:44:8e:5e:4b:ab:be:41:96:78:22:b5:43:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:91:48:6B:4D:D5:53:CB:D5:5D:33:5F:82:39:FA:A4:1B:B7:B2
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:08:42:8f:f1:04:d3:87:d1:f6:91:db:71:69:1d:6c:85:
c4:69:03:53:0d:25:ca:10:55:3a:6e:ec:99:21:f8:58:33:8e:
e3:a9:f7:8e:db:df:12:5c:58:61:9b:f8:e5:01:12:d7:c8:ba:
a9:00:79:8c:78:93:56:03:33:cf:b9:eb:b6:69:17:17:cf:3c:
7c:9e:e3:e7:fb:b9:6b:f4:1e:c7:7e:02:32:dc:c1:ad:d9:2d:
1d:48:f3:de:78:5f:ca:f7:0d:67:f7:f5:f8:c8:64:85:a3:11:
b8:88:47:2c:d1:d2:d7:9e:c0:13:08:19:0b:84:85:dc:5b:8c:
18:e6:85:ea:1a:b0:9a:77:cd:b6:2e:d2:a7:9c:6a:e4:12:18:
ae:52:e9:1d:af:5d:7b:c8:3f:cb:c6:57:64:5a:56:3a:5c:92:
32:83:db:78:c1:5c:56:4e:11:d3:6d:04:37:83:5d:00:da:35:
68:ae:75:65:de:24:8e:3d:44:7c:5b:c9:e9:9f:65:84:d2:c2:
d0:c9:89:a1:1d:df:8f:8c:d1:bc:41:12:8a:aa:11:e9:0f:62:
3b:69:34:6b:85:fb:18:1a:43:11:0e:21:ff:90:b1:95:26:99:
30:e7:2c:fa:22:09:1a:a8:3f:38:b9:b1:1f:26:21:cd:65:fd:
e2:d9:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:47 2025 by rpki-client