Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: 1JaEwKQz11UjaL4TXmFluQAtrN+e7daIllsNl1mZgF4=
Subject key identifier: CF:8A:3D:E6:43:62:11:84:B2:35:CA:FF:6C:6F:5F:78:33:52:E8:65
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01976D06D2A321B0A18CAE566C0DACE2FBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0CD1
Signing time: Sat 14 Jun 2025 06:00:52 +0000
Manifest this update: Sat 14 Jun 2025 06:00:52 +0000
Manifest next update: Sun 15 Jun 2025 06:00:52 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: CRvZeE4vDwBtAajv/dsBezdUGnXeOILDW0OCiBzxNMw=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d2:a3:21:b0:a1:8c:ae:56:6c:0d:ac:e2:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jun 14 06:00:52 2025 GMT
Not After : Jun 15 06:00:52 2025 GMT
Subject: CN=cf8a3de643621184b235caff6c6f5f783352e865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:ec:51:9a:e7:11:99:a6:4d:7c:1f:07:ca:
f1:d9:87:07:f6:ad:d2:b9:4a:94:c2:d8:36:02:02:
18:5f:a6:d2:ea:e5:d9:d1:0f:3d:37:c4:b2:70:1d:
46:a3:e3:12:72:d9:ea:08:4f:4a:a9:59:ea:68:c4:
68:e5:0c:49:e8:f7:7e:3e:e3:72:23:99:7d:bf:3d:
59:ac:d6:53:92:83:d0:86:b8:c6:87:44:6c:d6:b8:
87:35:2f:99:ec:ea:21:d7:ec:f4:58:2e:d9:58:79:
ac:59:b9:de:0c:7f:bf:d0:4d:ef:1b:94:70:69:fc:
0a:fc:0e:b2:e8:9d:f9:29:f8:fb:71:f2:b8:79:37:
be:20:1b:65:0d:18:0e:9c:ed:80:0b:34:02:b9:0b:
7c:5c:dc:67:7a:72:32:03:ae:8a:3c:1d:2c:a0:df:
be:de:5c:8f:8b:cd:a2:ed:44:ee:5e:39:f3:2d:67:
a7:d1:9b:4b:af:df:02:ea:b5:6f:b8:2e:7d:82:41:
c4:66:68:82:39:82:5d:c0:80:61:10:a8:66:8d:a3:
70:f2:49:af:3a:8f:88:b7:b0:ba:f9:44:84:1e:16:
b4:9b:a2:57:ca:fd:5e:96:4e:5e:56:9d:46:a4:f4:
9f:b9:5d:43:89:b7:f0:46:e1:0a:f6:94:00:62:b7:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:3D:E6:43:62:11:84:B2:35:CA:FF:6C:6F:5F:78:33:52:E8:65
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:93:51:9b:0b:ba:81:1a:e4:ec:88:c3:b2:c7:cf:91:19:5a:
53:9a:5a:42:5c:47:15:3d:31:c9:6e:eb:aa:7e:b7:f1:f5:b4:
24:6b:af:64:d0:42:cb:4f:81:1a:c0:79:22:43:d0:91:b9:6b:
62:88:d9:f7:29:c8:41:d0:50:93:c6:9b:2d:fa:a1:8c:ce:85:
6e:fd:a9:c7:21:c6:08:92:77:07:36:d5:d8:09:4d:05:2a:d9:
f1:dc:7e:3a:1c:22:9f:ff:9a:64:18:fe:c3:12:a7:2c:18:07:
c0:79:5c:3f:3b:3d:66:16:f8:84:87:43:f9:6d:0e:25:99:52:
bb:19:42:49:e7:20:96:2f:15:91:15:2b:99:de:dc:64:99:5f:
9a:e8:ce:9b:d0:a1:f3:7d:aa:a0:44:d8:62:a6:21:cc:f4:f2:
7b:ea:5a:e3:a5:fc:49:48:c2:77:8c:69:10:4f:f6:15:6b:20:
52:ad:14:d9:8f:3f:d9:6b:83:29:8d:49:8e:39:41:c8:4a:cd:
37:b5:d3:88:a9:13:ef:ef:98:dd:f0:c1:f2:07:de:de:58:98:
67:f1:3b:51:b7:ce:d2:ca:14:81:1c:e1:12:a6:0e:93:5a:f4:
03:42:c4:06:7a:28:7a:f5:1e:c9:9f:63:e9:5e:cc:3f:fe:88:
11:be:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:02 2025 by rpki-client