Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: QcLHc6d9B5jYTAXZxyeELtjmRFL0JfH1YCQJMOqvDWw=
Subject key identifier: 7B:8C:2B:D7:F8:BA:E9:51:2B:0F:9E:B4:FA:9F:57:6E:77:BB:C1:EA
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 019770079EE38EAC4299A66AF7C4503D6670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 1459
Signing time: Sat 14 Jun 2025 20:00:37 +0000
Manifest this update: Sat 14 Jun 2025 20:00:37 +0000
Manifest next update: Sun 15 Jun 2025 20:00:37 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: i/12Q1pqyr0hxFGgEVoFjgru/GqqH7rzmMMQJxAWEwE=)
2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:9e:e3:8e:ac:42:99:a6:6a:f7:c4:50:3d:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Jun 14 20:00:37 2025 GMT
Not After : Jun 15 20:00:37 2025 GMT
Subject: CN=7b8c2bd7f8bae9512b0f9eb4fa9f576e77bbc1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:29:7d:86:d7:04:30:95:00:51:5b:50:94:
78:25:d8:e8:09:59:dc:af:db:77:39:21:ac:a7:dd:
7b:55:23:27:af:f8:a4:e8:74:00:63:6c:64:de:cc:
bd:30:90:b4:d3:62:ec:ce:fe:f4:79:ee:9e:79:58:
9d:4a:38:e6:b3:83:19:43:8f:51:de:d1:53:bd:37:
3a:ea:24:c8:db:eb:60:39:a0:32:8b:fe:15:a3:34:
f7:5b:96:3d:9b:5d:c2:33:26:3a:ff:ae:52:db:0a:
26:0d:08:25:6c:6a:0c:0e:d1:8e:52:05:c1:b4:97:
bc:07:d4:39:37:f6:97:96:34:7b:e1:ee:b3:38:d4:
ca:28:a5:54:3b:42:2f:8a:ef:e4:0b:d0:22:65:dc:
94:83:cc:58:14:a9:4e:de:3e:72:eb:57:8a:56:ed:
46:0b:59:e8:1d:02:7a:84:f8:ee:52:94:7b:b7:57:
30:0c:f7:d1:2d:9f:75:1c:8a:1e:0f:53:1a:fe:17:
f6:fd:a0:9e:e1:fd:63:20:72:f2:07:4d:43:d0:19:
bc:3c:4b:b8:25:70:a4:74:85:26:62:0b:4c:27:c2:
3b:0d:ec:2d:40:c8:f7:fa:04:eb:5d:c5:34:64:22:
81:e0:cc:e5:b4:34:b0:48:55:9b:11:cf:01:a6:df:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:2B:D7:F8:BA:E9:51:2B:0F:9E:B4:FA:9F:57:6E:77:BB:C1:EA
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:5e:64:8a:fd:12:36:20:48:af:2b:72:ea:ec:f4:c2:32:
39:7a:6b:22:93:2a:db:81:02:1d:2a:cf:9f:34:75:71:d8:30:
81:98:9b:6d:ad:e9:fe:90:ec:19:d9:d6:e7:f1:92:6e:63:d1:
e8:e1:a2:46:93:5f:28:5e:db:07:11:53:fd:bd:0c:ba:a5:ed:
ee:c8:eb:4f:e4:23:d8:25:ca:93:ce:e0:28:69:3d:1d:f8:72:
2e:6b:5f:a9:b0:f8:42:03:cc:83:f2:3a:88:16:11:15:06:79:
35:2c:1c:07:00:57:4e:75:21:68:f0:84:76:7c:0c:f2:59:25:
c4:f6:d9:ec:91:62:1b:b9:a3:92:7c:a4:3b:18:4f:a7:41:d4:
ac:66:34:9e:52:89:d9:49:d4:04:d4:d7:5a:e4:be:83:55:06:
85:64:ec:2d:fb:35:93:94:a6:a7:36:71:02:a0:ee:ec:b9:20:
67:dd:4e:ca:b2:20:b4:3c:7f:90:3c:39:6c:a6:1f:99:a7:ff:
a3:a1:0d:e2:41:f8:be:14:a6:a7:3a:c0:8c:53:73:7d:65:91:
47:ca:1b:31:31:af:09:40:d3:64:7d:18:45:f6:32:b5:f7:4b:
76:f1:8a:d8:34:84:90:cd:fe:5a:1c:84:22:ff:9e:c6:42:0d:
59:d4:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:54:42 2025 by rpki-client