Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: t0C67EzN7MqwIc+hBeWH6lQylw4Xjb82B+Ja3nHyxYc=
Subject key identifier: FA:7A:A6:A5:6D:1B:75:90:86:20:3E:4D:A5:C5:39:1D:0F:A1:83:80
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 0197838E59A07FEFEB186B2EAD2632DFFDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 064C
Signing time: Wed 18 Jun 2025 15:00:33 +0000
Manifest this update: Wed 18 Jun 2025 15:00:33 +0000
Manifest next update: Thu 19 Jun 2025 15:00:33 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: oDmmIMQpFNIiIfG4wvnKX7fVHhxfgfuOdeKQEfPmv/w=)
2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:59:a0:7f:ef:eb:18:6b:2e:ad:26:32:df:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jun 18 15:00:33 2025 GMT
Not After : Jun 19 15:00:33 2025 GMT
Subject: CN=fa7aa6a56d1b759086203e4da5c5391d0fa18380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:5b:9e:9a:d4:83:85:33:2e:27:f8:ad:05:
a6:e0:59:dc:b4:db:18:2e:7a:3b:bf:12:94:8d:c9:
93:44:f4:f7:7f:cb:cc:60:64:f0:61:d9:6e:94:68:
f0:56:0a:92:a1:95:9f:bb:7a:b1:e6:42:40:10:55:
41:87:e4:88:6e:da:45:82:84:09:fc:1f:39:1e:59:
59:a7:61:cd:12:5a:29:57:a2:cd:c9:57:d6:46:e8:
c2:4e:0b:9c:7c:02:5f:53:c2:dd:c9:fb:f9:99:3e:
c4:b9:59:82:ef:19:d4:c2:13:e4:ed:77:7c:1c:af:
79:cc:24:1b:d2:6b:a8:8e:49:e1:3a:69:78:de:82:
a3:47:39:d5:d5:ed:9c:12:a4:3c:1a:70:7f:a7:02:
75:18:db:6c:2b:29:4c:6c:ce:ca:06:6d:fe:b5:78:
d4:bd:9a:76:09:ad:e5:60:73:dd:28:90:0d:89:cb:
6c:11:c8:4a:c6:ef:10:0b:e0:07:61:3c:db:69:d9:
40:7a:77:31:70:ed:5d:33:50:d4:9f:74:db:e1:3b:
84:ab:2e:a9:62:48:b6:11:8d:1e:c6:4b:ce:ef:11:
d3:24:1b:bf:9a:55:f3:88:38:31:df:f7:8d:1b:49:
a3:85:b1:bf:8a:4c:c3:40:63:0f:b2:ca:96:82:f9:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7A:A6:A5:6D:1B:75:90:86:20:3E:4D:A5:C5:39:1D:0F:A1:83:80
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dd:bc:c7:50:60:38:d6:7b:b9:a6:1e:64:b1:ed:94:9f:88:
45:0e:97:2c:35:06:6c:60:f1:3f:42:35:e4:b2:40:c5:29:70:
43:c7:0a:83:95:4e:79:32:40:0c:25:68:06:02:16:a4:ca:8b:
75:b2:e2:d0:1a:76:e1:5c:1e:ff:69:f4:ff:11:48:3d:ef:fd:
13:a5:39:0d:ad:7d:88:51:a4:a8:05:76:a6:f3:0c:40:59:ae:
8c:0e:a0:6b:8b:48:c3:87:cf:aa:67:a8:50:bf:13:8a:c3:3c:
65:65:72:b1:b5:0a:0d:c5:41:34:ec:d5:e9:07:e4:65:3f:60:
78:9a:a7:e5:5e:46:7c:f0:ad:d8:97:82:6e:cd:c7:e7:cb:6a:
8c:c9:d5:11:11:4e:6f:c5:c4:a6:7f:a3:1f:a7:7b:b1:0d:8d:
90:c5:fd:f4:29:9a:50:8a:57:4d:cb:79:9f:d0:76:2f:8d:65:
75:26:f2:ac:63:cf:19:13:91:8c:a8:f1:68:bb:e4:95:3e:2b:
87:76:7a:25:39:2a:dc:27:f0:e6:c8:de:e2:61:95:4c:cf:1c:
48:69:5e:27:1e:3f:27:50:54:8f:2d:bb:23:f6:da:fc:26:0c:
ce:33:a4:df:63:30:7d:0b:33:76:8f:91:46:65:5d:59:64:6e:
83:23:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:12:23 2025 by rpki-client