Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: Vvl79ItLK+8h8EsC9jlcIYaB4rPStYZuIdnII5RB104=
Subject key identifier: 2C:49:C7:C7:DE:CC:2B:4C:11:57:A6:24:AE:AF:3A:5F:07:38:05:74
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 01977B3095A2DC44B8E0DC447E27486C2D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 11ED
Signing time: Tue 17 Jun 2025 00:01:10 +0000
Manifest this update: Tue 17 Jun 2025 00:01:10 +0000
Manifest next update: Wed 18 Jun 2025 00:01:10 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: KjN6KNDOr3w2PbXV5XAnOEtK0alucnTgoUt9IlaUsp8=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:95:a2:dc:44:b8:e0:dc:44:7e:27:48:6c:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jun 17 00:01:10 2025 GMT
Not After : Jun 18 00:01:10 2025 GMT
Subject: CN=2c49c7c7decc2b4c1157a624aeaf3a5f07380574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:2f:2b:28:59:85:15:e6:fa:1a:aa:46:1d:
f5:74:a8:a5:62:f2:3c:62:20:2c:e0:71:4b:75:bb:
59:ee:43:cd:2b:bb:a2:34:5c:7a:4d:f4:46:49:85:
1f:12:12:be:28:29:b8:90:10:07:52:c6:47:58:d0:
91:5d:f2:c7:6b:db:3a:c2:7d:0e:2c:93:a6:df:ae:
44:19:c3:48:8d:d2:42:69:83:a0:60:7e:a6:c6:cc:
6b:74:9c:31:39:bc:85:74:92:0e:52:b4:9b:d4:89:
b9:bc:08:7c:d4:7f:a8:e6:e5:b0:87:a6:f8:98:61:
bf:f0:35:a5:2d:85:b3:5b:5d:9f:90:02:2c:7b:c0:
c6:1c:e6:5f:60:c8:92:07:40:87:71:cf:2a:3d:df:
be:03:e1:fe:7f:cb:fe:b2:02:31:68:31:6e:7c:6b:
4d:59:43:90:d1:a9:d2:82:78:3c:25:6a:e3:5f:c9:
9b:d6:1e:d3:18:51:e7:eb:51:7e:5e:d4:c7:6c:fd:
a6:4c:3c:f7:8e:14:28:85:bd:f1:5a:df:20:02:f5:
a0:02:28:a0:41:6c:71:21:cc:7a:0d:bf:d7:19:93:
0c:e7:41:d6:29:ae:50:9c:d5:a3:4f:79:1d:48:89:
dd:cc:62:db:c4:25:e3:48:2d:3f:98:c6:9d:28:93:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:C7:C7:DE:CC:2B:4C:11:57:A6:24:AE:AF:3A:5F:07:38:05:74
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:0e:c9:1c:3a:11:ae:a7:e8:a2:07:dd:e9:af:a2:02:c9:
af:31:fa:cb:03:e4:bd:05:40:59:bb:49:2d:85:d2:3e:7c:47:
a4:24:b6:44:ce:0b:b8:ac:94:3b:27:4e:7f:03:9e:31:0f:ef:
75:a0:80:77:ac:13:be:92:a2:1f:2f:06:16:be:d3:91:af:dd:
3e:b7:55:fb:9c:8e:35:f1:0d:3b:d7:0f:21:fc:e4:fc:8c:ca:
ac:b8:37:4f:19:82:f0:ae:4e:24:05:ab:80:07:f3:85:26:98:
8f:ac:92:ef:bc:b1:c1:10:23:14:b1:ac:75:2c:78:ab:dd:2e:
4e:db:97:d2:b9:e3:31:53:59:75:c0:69:d0:41:9d:c2:4f:75:
89:6a:f0:c5:96:fa:eb:c4:2f:d8:58:80:b9:0c:05:b6:73:54:
29:d6:75:67:55:7c:ec:ab:5d:9e:2d:76:d4:0b:ce:b3:ab:ce:
28:06:b8:3c:cb:da:df:87:3b:b8:8e:a9:90:9f:a6:e1:e9:03:
d1:e8:e0:8d:bd:35:3f:e8:82:48:0c:02:14:bf:b1:5a:25:24:
28:53:ad:d2:ad:64:c2:62:0e:06:72:51:a9:11:89:ee:5d:da:
ee:18:47:12:b4:69:c5:fd:05:2f:72:3c:bd:6d:fc:13:fe:23:
88:e3:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:40:08 2025 by rpki-client