Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: /LJmSu2YBSczmzDzcK5adEsSQ7qQSjWeb2CrOq++gbQ=
Subject key identifier: FF:96:F9:E7:39:B1:34:00:9D:65:8F:B9:AE:3D:6D:87:A4:3D:88:76
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 01976C62447025C13617BEC83673A7B863F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 010E
Signing time: Sat 14 Jun 2025 03:01:08 +0000
Manifest this update: Sat 14 Jun 2025 03:01:08 +0000
Manifest next update: Sun 15 Jun 2025 03:01:08 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: lbOlzzvu7sqTiNXfuwFu6rLQrWFmJ4jdSWuyqIViSjQ=)
2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:44:70:25:c1:36:17:be:c8:36:73:a7:b8:63:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Jun 14 03:01:08 2025 GMT
Not After : Jun 15 03:01:08 2025 GMT
Subject: CN=ff96f9e739b134009d658fb9ae3d6d87a43d8876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:75:ea:c6:c5:34:d5:39:00:99:79:28:6b:
7b:9e:e7:d3:b3:a2:78:25:25:2e:e5:02:c5:c0:c7:
5e:60:63:50:a3:2a:04:73:d1:f4:40:6d:42:f3:fb:
2e:58:e6:71:84:e8:ba:b4:64:64:37:a7:09:0b:03:
38:eb:85:86:88:78:4a:0c:a8:da:c7:2a:ee:12:ae:
ab:dd:e7:08:b1:ed:82:74:95:40:a7:26:04:05:89:
f7:25:bf:e0:6c:eb:fd:f4:3d:8d:77:c7:ac:54:c4:
54:28:5b:d6:bc:e5:33:c1:4d:34:04:47:db:99:e4:
89:d5:66:4c:ed:bf:01:0d:ab:0a:31:b0:e1:eb:b4:
86:4c:76:00:e2:26:5b:c2:79:d5:69:5e:1c:c2:3c:
8a:28:13:6f:85:8e:b8:f8:73:b6:4d:c8:4d:12:78:
37:af:4e:03:8b:50:4b:d2:c7:41:47:ce:49:17:ee:
ee:19:52:bb:7f:43:1f:41:24:ea:b0:2e:42:85:6d:
9d:27:d5:9d:b9:b6:38:6d:95:7e:33:09:07:79:6f:
26:aa:9e:be:d1:74:65:3e:0e:1f:58:d5:dd:9b:6a:
d0:b2:dc:44:00:cc:47:2c:41:d8:13:91:0e:3e:14:
ef:70:94:30:90:07:ba:f6:8f:14:93:d1:5c:2e:7e:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:F9:E7:39:B1:34:00:9D:65:8F:B9:AE:3D:6D:87:A4:3D:88:76
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:fe:78:64:c2:06:9c:77:ba:9d:65:c7:37:3d:d8:fe:3e:
68:41:cd:38:dc:48:1e:2e:17:dd:6b:ff:a3:f9:e6:dd:8b:91:
aa:6b:73:8a:71:51:52:bb:aa:50:cb:d9:e8:5d:93:30:00:19:
12:80:59:bc:ff:6d:08:7e:45:47:ed:11:12:c4:0d:d9:a2:89:
0b:11:30:25:5c:6f:5e:7d:ba:86:a4:0f:29:b9:26:1c:20:0e:
0a:a7:18:af:19:6b:e3:80:b0:c8:9d:c4:35:ac:c2:cc:e9:2c:
71:d6:9c:93:ff:b2:f4:c2:b2:3c:47:39:61:2c:c1:0a:58:f0:
0b:d3:b0:c4:5a:86:f9:e7:6e:9f:f9:66:f9:91:7e:fe:d0:a4:
4b:e8:64:be:39:3a:1d:a1:11:d3:c5:d9:22:f0:d6:f0:b8:60:
f0:cf:ab:3a:9f:12:51:1c:f5:a6:7a:8f:08:21:dd:2e:b2:83:
84:ca:3c:8a:81:ab:3b:71:06:31:57:db:d8:e6:d3:07:6f:30:
c9:a1:ad:dc:84:4e:5a:9a:c2:64:97:f6:e2:72:a5:f7:83:79:
ce:80:45:f4:22:f7:37:d2:16:2d:eb:46:ac:93:ad:dc:81:2a:
2b:b1:2c:3c:10:2b:ad:1a:f4:ab:c2:07:1d:31:34:6a:81:af:
e7:24:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:43 2025 by rpki-client