Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: HXzCScSAVAQZ5W4JB0SfodLLRyS9Zhkyp4Hvf2yFlZc=
Subject key identifier: 85:57:8E:95:6E:20:3D:48:85:5F:77:4E:92:48:DE:62:0D:92:47:A6
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 01976D74545A8B3AB632C1D5419A5AF04CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 053E
Signing time: Sat 14 Jun 2025 08:00:29 +0000
Manifest this update: Sat 14 Jun 2025 08:00:29 +0000
Manifest next update: Sun 15 Jun 2025 08:00:29 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: WbML2IGVmZqlECMlBnIY4H1fB5qeiIOYfRGLgw3H+Mo=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:54:5a:8b:3a:b6:32:c1:d5:41:9a:5a:f0:4c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Jun 14 08:00:29 2025 GMT
Not After : Jun 15 08:00:29 2025 GMT
Subject: CN=85578e956e203d48855f774e9248de620d9247a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:d9:25:cb:72:ba:b8:3c:a3:16:44:63:b3:
1a:29:c4:ee:45:ec:31:8f:c2:de:d7:4c:0e:17:3b:
b8:97:51:26:27:6b:dd:a7:ff:81:ff:c3:7f:ac:bb:
70:80:06:a8:aa:8c:97:df:5e:7f:87:38:f9:2e:fd:
b4:cc:ff:40:ae:6f:0f:22:d2:43:93:ea:b8:89:38:
64:f6:c8:61:1c:e0:2d:75:6d:3f:d0:8a:21:ce:d2:
b2:68:ab:5c:05:e5:cd:14:4e:a6:d0:16:35:a2:79:
b5:7e:4c:80:4a:b9:a3:f8:3d:e2:20:9b:90:50:01:
03:1c:6e:2a:df:de:d3:a2:46:b3:86:34:9c:20:b0:
70:e3:ca:14:90:7f:6f:14:c3:9b:76:42:45:6b:f8:
31:ed:35:6b:9c:c8:c0:66:18:3c:6e:6d:2d:6b:b6:
87:d9:16:10:bc:45:a4:a8:99:37:1d:61:4c:22:4a:
71:05:48:82:35:d3:69:dd:9c:b9:08:fe:19:ae:1c:
88:29:b0:9e:71:0b:98:f3:bb:0a:4a:90:a0:08:24:
73:7b:28:0b:77:c2:41:d9:cb:85:c0:b3:af:1c:ee:
8f:3f:29:ea:d7:86:80:14:42:a1:c1:3c:b4:3b:ed:
89:ac:a5:f4:56:16:3c:e3:30:ed:6f:55:47:6a:1c:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:8E:95:6E:20:3D:48:85:5F:77:4E:92:48:DE:62:0D:92:47:A6
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:ed:8a:f6:44:8a:ce:0a:68:51:4a:24:c7:a1:b2:d9:d9:
bd:e1:9c:57:0f:fd:44:08:98:ab:7a:35:46:b5:e6:ea:37:d5:
70:15:05:ed:29:d2:db:08:19:48:94:6e:05:67:f1:fb:10:88:
eb:fa:8c:18:28:67:71:92:e9:e3:20:d1:6f:9e:78:ae:d0:55:
31:1f:a0:81:26:0b:2f:30:c6:ff:05:26:40:42:7d:bd:89:be:
b6:ff:9d:68:b5:b3:17:ab:f3:f2:89:8b:8a:c4:23:5a:2f:02:
48:56:aa:21:85:ef:10:ec:c4:83:7f:36:73:d5:b6:38:a1:7a:
ee:47:d1:54:9b:49:fe:bb:49:aa:98:62:62:97:d4:4b:03:3d:
ae:a5:31:6e:d9:c9:cd:ec:35:98:c6:f5:5a:87:10:42:74:c9:
e1:ee:d6:eb:4e:4e:b3:f3:6b:d9:26:e4:db:05:f5:18:b7:bd:
ec:48:56:bb:c2:03:de:5e:33:75:a3:5f:70:b4:ee:17:f1:9c:
2f:5c:0d:bd:c6:d8:46:0d:05:f8:ba:87:d8:9f:9a:34:d5:0c:
66:9a:c6:1a:4b:7e:25:6a:8d:b9:8b:1b:83:ec:6c:cd:e1:4e:
3c:66:ab:c8:40:54:14:d5:7b:3b:c0:df:89:a5:7d:2e:10:6c:
ff:c8:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:37 2025 by rpki-client