Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: GSGTBz90X6VxTkFk2W+1n6BvbsyTLjXRAEtFEOsR3wk=
Subject key identifier: 62:25:7F:D6:66:49:F0:72:90:DC:73:C9:5E:BA:F6:86:8B:54:E6:5B
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0197857CA10FEFAB78C0220AEE9D5BFE37F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 09CA
Signing time: Thu 19 Jun 2025 00:00:26 +0000
Manifest this update: Thu 19 Jun 2025 00:00:26 +0000
Manifest next update: Fri 20 Jun 2025 00:00:26 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: +f0WOivIWFgK93IfO1sJ4ELvTeZVEKhtOwDBiL3udEI=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:7c:a1:0f:ef:ab:78:c0:22:0a:ee:9d:5b:fe:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jun 19 00:00:26 2025 GMT
Not After : Jun 20 00:00:26 2025 GMT
Subject: CN=62257fd66649f07290dc73c95ebaf6868b54e65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:f6:7e:58:79:be:19:09:72:3b:8a:a7:d0:
eb:1a:62:ce:af:ec:c1:2d:10:71:94:f3:2c:be:d8:
78:61:e0:b4:df:ef:b7:2a:5e:d3:a4:95:cd:72:02:
6f:5a:ac:46:56:81:0a:3e:ee:4c:e0:34:58:72:dc:
05:ae:53:26:d3:ae:bc:36:04:64:72:15:a0:94:30:
36:71:98:a0:30:55:93:cf:dd:9d:9d:0d:86:ab:2e:
64:87:18:b5:a4:f0:29:60:85:4f:2d:75:d2:90:ec:
37:4a:52:66:b7:7d:6c:a4:0b:28:2e:9c:84:43:81:
8a:60:7b:6d:50:69:8e:5f:42:71:e9:b5:65:17:be:
2e:4c:56:78:18:c8:d2:03:b5:9c:a8:83:f1:e0:81:
27:e1:73:65:ba:13:6e:31:60:42:72:16:79:cb:f6:
67:12:b3:69:d0:a8:67:d5:b6:82:f5:46:98:9f:06:
b0:59:94:6d:37:0e:a5:b9:6a:12:1f:ea:4e:8f:bf:
e8:6e:04:55:b4:00:65:4a:40:64:b8:eb:8b:06:f9:
34:76:a3:38:c6:97:c2:d2:d8:e7:62:18:90:72:42:
b4:d5:92:e2:70:bd:9c:f0:bf:88:7e:71:5e:0f:55:
b3:b2:f3:7b:d6:6a:de:66:26:8b:93:eb:92:b9:c2:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:7F:D6:66:49:F0:72:90:DC:73:C9:5E:BA:F6:86:8B:54:E6:5B
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:36:68:1b:91:11:88:58:5b:5b:26:b1:14:fc:43:cc:3b:52:
04:f7:1d:c5:97:51:4d:ea:24:e6:c3:9a:c5:d8:bd:2f:83:63:
a7:1a:e1:d3:b6:15:b8:24:b0:7d:6e:ff:ff:e7:31:48:a1:16:
0f:a2:4b:91:e5:f9:4a:5b:90:f3:b6:d6:42:50:03:e2:3c:2f:
5a:86:dd:18:7a:91:30:c5:0e:83:48:28:5d:87:07:24:60:f7:
dd:58:1a:b7:17:ef:f2:b2:eb:09:b6:f4:e3:a3:7e:fe:46:4a:
f6:8d:12:3b:90:c2:61:f6:ce:b4:22:74:00:8f:b6:66:9d:78:
0f:62:5f:3c:b2:28:7e:7e:8f:50:34:5e:a8:c8:ea:58:08:41:
a9:66:70:08:cb:96:a1:c5:ec:08:74:69:73:e1:8e:6c:17:c7:
5e:49:18:0b:2c:68:70:fd:4c:ff:81:f1:a8:96:55:b7:ae:71:
1a:df:73:5f:60:a4:80:e6:5b:7a:d0:c0:2f:55:50:d1:60:62:
44:f0:87:8a:f1:a0:b8:c3:02:d2:c8:7d:6e:0b:e0:bf:15:98:
f8:8a:9a:63:48:3f:9d:b2:5c:00:5a:32:4f:c5:3f:0e:0a:c4:
7f:0c:c8:e8:7c:92:99:b4:d6:6e:d0:8c:60:2d:78:49:d9:80:
c0:c1:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:08:03 2025 by rpki-client