Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: +dPvB7VPtTDAbJaz87Rm79hiEERAPygKU/0kq8/tvu0=
Subject key identifier: 46:46:D7:58:F8:E2:52:59:67:FF:8C:AA:F9:FD:2A:50:0B:14:8B:5F
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01976EBE1B0A3AC2EFB449B1DC7729D1E434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 02CE
Signing time: Sat 14 Jun 2025 14:00:41 +0000
Manifest this update: Sat 14 Jun 2025 14:00:41 +0000
Manifest next update: Sun 15 Jun 2025 14:00:41 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: rKU8eS+dKCg5JdrbMBwZ3Zr4QlUr61cwBEz8EVxVhc0=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:1b:0a:3a:c2:ef:b4:49:b1:dc:77:29:d1:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jun 14 14:00:41 2025 GMT
Not After : Jun 15 14:00:41 2025 GMT
Subject: CN=4646d758f8e2525967ff8caaf9fd2a500b148b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:17:d7:c0:a5:43:29:58:e4:01:a9:fb:a9:
d6:bd:a6:0f:59:5c:3c:91:49:7b:1b:44:a3:7a:c0:
f5:83:58:fa:45:66:e8:d7:a2:96:76:e0:0e:06:4c:
9c:15:1c:31:92:43:1c:39:69:84:b0:1a:6e:88:09:
60:c8:fb:5f:ef:79:dd:d8:93:a2:96:76:39:c6:3c:
7e:e7:b5:af:9f:d2:bd:ba:14:7e:16:fe:f3:3a:8c:
62:b3:44:1a:59:26:aa:6d:4e:7a:90:c0:d1:da:08:
4a:0f:b3:70:1a:34:12:f7:fb:86:3f:e1:26:31:a1:
2c:51:5b:c9:d5:3f:bc:a3:fe:dc:20:7a:fb:eb:4e:
49:9f:d2:74:1b:81:5e:12:49:74:24:9f:e2:0f:d2:
38:48:35:13:f8:be:b6:4d:d0:fe:6f:69:b7:cd:f0:
b6:3b:56:23:84:e9:1e:81:93:f5:dd:55:ac:ec:39:
d4:6a:b4:aa:87:ab:d2:6f:f0:83:b5:25:ef:ba:9c:
e9:3e:d0:3e:f3:93:c2:c9:26:d1:ff:b4:cc:47:d3:
f2:34:e3:78:9c:2c:b9:e7:58:01:ef:9c:62:86:30:
65:f8:ba:10:d6:89:fe:40:20:70:b6:a7:9d:40:71:
94:af:3e:51:32:01:8c:04:56:f9:22:e9:c9:cc:a9:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:D7:58:F8:E2:52:59:67:FF:8C:AA:F9:FD:2A:50:0B:14:8B:5F
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7c:27:1c:96:68:4b:f7:c6:3d:e5:c2:3f:39:b9:77:ec:75:
d3:44:e8:3d:55:2e:20:15:bf:88:1e:d5:af:ad:bf:a3:8c:a8:
2f:d5:5a:5a:d5:37:b8:ae:d5:1f:68:52:4c:8c:b2:73:02:02:
2d:b5:e2:76:73:00:89:db:b8:03:2c:bc:75:70:3d:9b:98:85:
4a:f1:0c:a5:77:fb:e0:87:cf:91:b5:06:0e:8c:d9:89:84:f0:
d7:d3:c5:86:db:93:58:8a:f2:9d:2d:4f:b2:05:dd:8f:58:ca:
ee:09:ce:83:e5:84:75:b5:8c:c7:3f:45:d4:a3:b0:de:63:0d:
38:ca:54:d3:69:55:f1:4b:5f:55:46:83:1b:59:dc:85:71:73:
18:29:87:e3:35:a3:ec:94:53:a7:63:bf:bc:a8:c1:b4:60:59:
34:9f:27:ef:c5:32:60:35:39:9c:01:6e:13:14:50:44:e6:8c:
2f:ab:46:d5:ae:78:fc:c9:c9:41:54:9f:6e:ad:3e:66:75:71:
23:02:12:e8:54:42:d6:a8:7d:ee:40:6d:92:99:45:10:ea:f3:
dd:b7:49:69:dd:eb:87:28:c3:ce:c1:60:b9:ab:1e:4e:36:6e:
38:56:bb:72:f1:60:55:af:07:2f:2d:7c:34:85:46:f1:c7:0b:
3d:54:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:02:24 2025 by rpki-client