Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: JQMUegJCUhXN+E+gVUIHLXbHD4Y20Lpecuq2rAiKNxQ=
Subject key identifier: AE:A4:55:BF:ED:62:43:9B:03:CC:3F:32:08:C1:C9:1C:D6:4A:1F:88
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 01976F2C76A5D459263475B249A7D5491A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0550
Signing time: Sat 14 Jun 2025 16:01:14 +0000
Manifest this update: Sat 14 Jun 2025 16:01:14 +0000
Manifest next update: Sun 15 Jun 2025 16:01:14 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: 5dnTgD6RDNVcjlYhqPWVokpakICiKn8ijCGSoSd0jfU=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:76:a5:d4:59:26:34:75:b2:49:a7:d5:49:1a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Jun 14 16:01:14 2025 GMT
Not After : Jun 15 16:01:14 2025 GMT
Subject: CN=aea455bfed62439b03cc3f3208c1c91cd64a1f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:ab:7f:8f:56:d1:d1:6b:89:5c:3a:03:11:
02:b9:87:c4:7c:45:03:76:e3:07:1b:02:fa:b9:62:
b7:26:29:b6:50:c2:c4:ae:bb:62:34:74:6d:75:c5:
64:92:50:89:ee:bb:94:7a:0f:14:56:09:ba:37:82:
31:c2:4b:02:02:79:84:3c:b1:da:61:71:2f:a3:8f:
33:83:af:c9:6d:07:d0:93:13:c7:16:e3:18:ae:69:
d1:50:fb:59:2e:73:89:c6:13:cf:bb:66:da:87:af:
f6:cf:5e:3a:f3:82:a5:d3:b6:52:63:ff:8c:ce:11:
95:79:e2:f1:79:65:07:64:88:dc:ce:fd:28:0d:f6:
72:33:f2:be:c1:ea:d5:42:0d:33:07:95:fd:64:45:
af:5d:b9:c5:79:90:e4:d0:27:b7:7f:e3:bb:e7:3c:
09:59:1f:59:c3:97:38:08:4a:a4:ef:79:b5:84:2a:
31:62:85:e2:ff:bd:cc:68:2b:fe:3e:44:94:b3:73:
78:32:5f:db:25:1e:39:7c:ca:c0:3a:2c:19:53:9a:
2f:0f:df:6c:d7:a1:25:ba:20:87:8e:ab:df:25:37:
26:fd:45:b2:a8:b5:3b:e6:40:f1:49:85:5c:9e:b4:
8f:99:39:78:b0:71:cf:c5:75:f0:14:45:ed:59:0e:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:55:BF:ED:62:43:9B:03:CC:3F:32:08:C1:C9:1C:D6:4A:1F:88
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:43:1f:53:bf:c5:e6:34:d2:db:0a:3b:3a:37:9e:f5:92:50:
ab:60:cd:b0:0b:d5:f2:b1:ee:40:c9:80:cf:b8:fb:6f:bf:4f:
d4:d2:81:bc:e7:8c:6c:a8:63:a9:39:e6:ad:de:8e:a0:53:61:
1d:6c:ba:a5:77:14:5c:4a:ea:98:e2:c5:33:9a:99:3b:9b:d8:
36:36:b9:eb:0d:1b:9d:4d:f6:7c:a7:5d:41:ce:1e:1d:ff:3f:
72:1f:27:c9:03:e8:ef:1a:e1:51:5c:63:24:3e:dd:6e:b6:ce:
6f:d2:08:a3:d1:e9:0f:be:c6:7c:b3:ca:09:9a:6b:c9:37:f6:
a8:2e:5e:06:e7:b9:71:f3:a6:8f:64:45:3e:1d:3b:a2:87:c8:
d0:c8:90:9c:b6:5b:0e:ad:3e:71:6f:b3:c0:0f:f3:0d:ec:cf:
04:31:58:e8:28:d0:37:e4:d5:26:b3:97:04:3b:d5:3e:89:b5:
d7:84:f1:f4:17:0c:2a:9e:af:fd:37:05:ab:48:67:4c:01:f6:
19:88:a3:49:09:03:ce:f4:5b:ec:a2:98:5a:6c:e6:99:64:71:
15:fb:b6:45:be:05:89:fc:42:88:d8:5d:bd:2f:82:1f:07:06:
0a:1f:29:80:7d:df:b1:34:88:69:bb:c8:1f:5e:3c:05:33:67:
79:9e:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:08 2025 by rpki-client