Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: RPj9efJMUhy6kynqtoI1Tldw6esVRDprqjFHVw38nsI=
Subject key identifier: D4:0F:75:9A:F9:B5:75:D9:C2:A5:51:EA:AE:6C:3D:0B:81:72:B6:C9
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 0197707545E5D7F5E1DA26124B0B8E9AF606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 22:00:23 +0000
Manifest this update: Sat 14 Jun 2025 22:00:23 +0000
Manifest next update: Sun 15 Jun 2025 22:00:23 +0000
Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: AYkiuzJq2SdpyDoZnKCgSNOM01eDqkqVGmF+3paez68=)
2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=)
3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:45:e5:d7:f5:e1:da:26:12:4b:0b:8e:9a:f6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jun 14 22:00:23 2025 GMT
Not After : Jun 15 22:00:23 2025 GMT
Subject: CN=d40f759af9b575d9c2a551eaae6c3d0b8172b6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:fc:06:7f:bd:66:2f:3f:e8:0c:ed:49:00:
f1:8a:e8:3d:e2:78:05:c5:29:e9:be:0c:30:12:75:
1d:88:6f:b6:44:86:3b:79:32:7a:3d:a8:cf:f4:16:
1a:42:41:ed:c1:49:68:a1:e5:86:1d:52:5a:6f:7c:
2e:a6:b4:e8:89:de:58:cd:83:ba:66:7e:7f:17:dd:
17:1c:36:b2:1c:2d:fb:1f:20:66:0b:b7:de:32:46:
26:6a:72:7a:2b:1b:af:6a:d3:23:e0:41:54:86:80:
ae:fb:a5:a6:74:e0:7e:0f:da:32:35:11:22:7f:0b:
ea:5b:1d:7c:83:7f:67:45:02:87:8a:3a:77:7e:e9:
90:b5:17:2d:83:fd:80:90:e2:88:a3:2e:f8:5b:91:
1d:ea:b5:b7:12:bf:4d:99:2c:6e:cc:a9:b4:62:1a:
df:ae:75:2c:de:9f:e3:15:15:55:e7:af:a7:8a:3f:
f5:9a:d7:b8:5a:6a:98:c4:96:77:26:cd:57:55:e4:
01:e9:3f:89:2c:97:79:00:9a:68:77:a4:93:86:05:
94:54:53:d7:03:e3:53:f7:6f:f0:d6:02:c0:87:d6:
09:06:e5:51:68:bd:4a:99:4f:ed:55:70:0c:6b:cf:
72:66:7b:88:c0:59:33:96:f7:d0:ca:e1:67:b4:e6:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:75:9A:F9:B5:75:D9:C2:A5:51:EA:AE:6C:3D:0B:81:72:B6:C9
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f0:77:a1:f6:f0:48:12:c4:70:25:86:cd:95:2e:96:b5:b7:
79:e2:4e:52:c3:85:e3:6e:de:68:8b:0f:00:98:17:99:b7:90:
2e:03:c8:81:12:85:8f:34:84:22:9d:e8:e9:59:6f:67:7d:f3:
96:54:94:b6:bc:6f:5c:f3:5b:71:91:af:ad:75:51:be:75:42:
33:3f:cd:90:d0:93:81:b1:7c:77:cd:39:1c:85:7e:ee:0e:03:
14:b8:f9:49:c8:d5:d5:fc:d4:f9:15:41:d9:ce:b5:4f:87:44:
62:97:91:62:ac:5b:fb:24:8f:bf:71:a9:7e:32:28:31:57:8f:
96:0b:ca:57:ce:48:14:04:f1:bc:f8:8e:4b:b0:d3:19:7a:50:
ca:1f:31:a2:19:c4:01:d2:02:51:81:e4:5c:f6:f8:e7:2a:d9:
a3:c5:ce:55:85:10:75:3a:2f:d2:5e:b4:b1:3c:ba:85:a9:80:
8b:78:34:c7:e6:6a:4b:25:10:8a:0b:24:96:ec:79:25:42:29:
1b:69:36:10:af:e3:02:bc:0c:1a:92:af:cf:ae:e3:b2:4d:43:
26:29:2e:2b:52:9e:d4:c0:22:08:80:e2:44:f9:f9:f7:68:16:
b8:ca:00:39:c4:f0:fc:d4:70:59:e2:f9:59:25:25:91:70:fe:
3c:4f:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:50 2025 by rpki-client