Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: hPPlngxJ26SPL31AoO/Y+Mrco7cVzwIDD0rtr8gOcHw=
Subject key identifier: F5:39:24:9A:7D:59:9E:B0:0C:58:10:3B:F1:1A:39:8A:61:25:46:46
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01976C2B313202FA6155064293F7CB15FA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 02:00:59 +0000
Manifest this update: Sat 14 Jun 2025 02:00:59 +0000
Manifest next update: Sun 15 Jun 2025 02:00:59 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: vDQmI6ZiY4IqvDyXQcNP8+zlc+A0ZHE9knk8klGV4PE=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:31:32:02:fa:61:55:06:42:93:f7:cb:15:fa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jun 14 02:00:59 2025 GMT
Not After : Jun 15 02:00:59 2025 GMT
Subject: CN=f539249a7d599eb00c58103bf11a398a61254646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:b1:9b:21:f1:83:34:8a:5d:fb:3c:3a:4b:
2b:77:b7:0b:f0:98:67:27:fa:d7:69:d6:31:d7:96:
2e:78:59:fb:10:db:63:a7:21:0a:a3:60:85:1c:b5:
ad:d0:63:4b:30:8a:cf:63:59:52:74:58:d2:da:15:
c4:ec:e6:d7:55:1c:52:0e:e0:78:56:72:ea:7e:c0:
6d:0e:a5:c4:de:79:5f:9c:74:2f:01:e1:f9:46:16:
39:99:22:ff:4b:12:b2:26:89:e6:0f:17:cd:90:6c:
6c:7b:93:34:84:d1:3a:3c:e7:aa:57:65:a1:b6:7e:
3e:e0:e6:1c:fc:78:8f:4e:d8:8b:20:c8:f7:81:d4:
ec:0b:84:6f:52:33:70:42:1f:a9:9c:dd:6f:07:aa:
7c:ed:54:e0:64:e8:fe:d4:fe:86:a3:ce:71:63:36:
0f:f9:e5:e8:f0:71:68:63:3f:42:91:16:21:3b:52:
93:be:8b:0b:2d:b3:0f:e0:13:80:78:bc:79:70:38:
80:5c:f8:92:3a:6e:58:ea:d7:a2:26:b1:2b:18:31:
0b:2b:db:b1:df:77:0d:73:0d:38:32:17:73:ec:a0:
e0:3f:b7:09:0f:9b:5d:63:06:8c:e4:72:e7:a8:a6:
d7:a1:2a:49:f2:61:11:dd:74:c8:70:e1:d1:83:97:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:24:9A:7D:59:9E:B0:0C:58:10:3B:F1:1A:39:8A:61:25:46:46
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b1:a4:50:c4:0f:89:ba:b2:fa:f2:a8:99:19:77:d4:cb:0d:
03:96:ff:3d:8e:68:62:77:26:14:8c:1d:dd:ad:17:5a:e4:87:
27:06:b8:03:30:8d:37:06:9e:94:0e:42:cd:7d:27:c4:8c:f8:
f2:0d:15:47:1b:6e:21:72:fc:68:19:1a:af:e6:b1:14:53:33:
6c:f1:b5:72:98:24:23:19:4d:f4:fe:bc:b3:48:69:61:e0:4a:
b0:bc:41:77:20:a9:4d:0a:a3:66:69:3c:21:d8:d2:2a:eb:94:
0d:ae:3c:65:84:f5:f9:09:dd:b9:44:d4:d0:84:06:0d:4a:9c:
49:fa:09:55:bf:03:fd:cf:87:1e:ce:64:62:56:96:4e:74:c1:
a3:dd:57:69:4a:f4:90:05:57:19:01:7b:75:88:f1:12:09:a7:
5c:8e:df:ae:08:9b:47:4a:68:f6:5b:30:bb:dc:cb:11:7a:70:
f4:5f:3f:5a:5b:a9:5e:cb:43:7c:c9:df:e5:2a:71:3c:64:64:
51:95:52:63:3b:89:ae:18:69:83:4c:ad:1e:bf:12:24:f1:04:
96:05:23:58:e5:da:2a:f9:d5:9c:03:65:71:84:fe:f0:95:81:
bd:2d:71:30:06:27:86:db:cc:69:09:86:9f:5b:5c:b9:36:97:
5e:4f:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:07 2025 by rpki-client