Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier: BNxCdWjcrop85w9pfziSBa3uUbu2GSNI3okNY0qYYs0=
Subject key identifier: 33:7B:B9:3F:FF:30:95:8D:55:83:A6:ED:5B:60:44:E4:9A:0A:04:E0
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial: 019779E68C6FC443645F4D2A04BC943B7BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number: 0C88
Signing time: Mon 16 Jun 2025 18:00:41 +0000
Manifest this update: Mon 16 Jun 2025 18:00:41 +0000
Manifest next update: Tue 17 Jun 2025 18:00:41 +0000
Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: USPSi2M3rwTYXjsVDh/XV1bg8wc8DP/v26kUFcUvlYM=)
2: wUSVu8lDNfoUWdaRO2jsDgRSmsg.roa (hash: A2CVwSparFGjp8/uMP7BcSnzpGUx0FpocYCZqqW30C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:8c:6f:c4:43:64:5f:4d:2a:04:bc:94:3b:7b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Validity
Not Before: Jun 16 18:00:41 2025 GMT
Not After : Jun 17 18:00:41 2025 GMT
Subject: CN=337bb93fff30958d5583a6ed5b6044e49a0a04e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:f1:bb:61:cf:5f:00:f7:ae:51:1b:b7:e4:
c3:1f:9f:6e:1a:b8:dd:c0:b2:16:7b:b6:a4:52:17:
90:7d:df:fa:84:94:96:2c:ca:ec:6b:75:d7:eb:b4:
e8:ae:df:eb:b0:a0:f8:e6:58:f5:d9:44:72:e4:da:
b3:74:30:82:b3:0c:ba:80:8e:4d:31:72:38:12:93:
85:54:0a:5f:e6:c2:4c:cf:4d:4c:4c:b0:89:44:ed:
e6:e0:8b:0f:fb:d8:d0:34:55:ae:b3:53:6a:5a:ae:
61:55:65:72:15:e1:4b:f6:40:93:d0:b6:df:a2:40:
95:82:49:94:17:2d:51:4f:2f:0f:1e:7f:8e:c3:46:
c9:8f:b4:59:c8:0d:f7:04:2d:cc:9c:2b:85:bd:b7:
36:3c:35:6b:c3:63:fd:ed:0b:71:af:05:f0:10:6c:
2c:ff:7d:72:d2:fd:93:60:8a:68:36:95:79:a7:31:
5c:e1:a6:13:ef:8c:e5:99:8d:78:66:a8:92:62:06:
88:80:a0:bf:a4:12:77:4f:6d:be:f4:ac:1b:6b:1c:
d4:22:45:08:43:f2:d9:fe:98:07:0a:f7:3f:3a:21:
49:b4:e7:d4:de:f9:6f:13:20:39:7c:bc:34:12:0b:
3a:a5:46:72:cc:20:22:3c:bd:60:35:bb:31:88:16:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:B9:3F:FF:30:95:8D:55:83:A6:ED:5B:60:44:E4:9A:0A:04:E0
X509v3 Authority Key Identifier:
keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bc:f3:66:eb:75:da:0d:38:83:12:75:d9:0c:fe:8d:1f:79:
ed:27:8f:93:a8:dc:6e:0e:23:ed:60:a8:ea:dc:64:9c:55:a0:
ee:d2:07:1f:1a:61:48:bd:69:9a:df:40:5f:d8:4f:1a:5a:48:
82:96:32:58:e1:d8:41:cf:b3:e6:75:58:f0:4f:01:67:b3:56:
44:7d:75:e2:90:1f:89:fb:7e:52:b1:bd:69:73:a8:d9:2a:d1:
96:65:f1:ce:8b:7a:ba:19:9b:ae:b5:12:34:d5:c9:7f:9f:f2:
79:c9:79:42:04:50:86:72:05:79:36:b0:86:68:57:dd:10:02:
3c:b5:de:cd:4c:84:21:8b:03:8c:a2:89:2a:fd:4e:6d:5b:ee:
0a:8a:80:9b:51:f6:3b:d4:39:02:34:f0:57:85:e3:78:1d:b2:
b2:58:d2:2f:2e:22:aa:27:17:5c:32:eb:2f:87:34:a2:9b:27:
0f:a6:d2:29:60:a2:49:ef:7a:3f:79:c7:da:ed:98:89:0e:3e:
13:7b:37:c0:0c:a5:7c:9f:a6:f5:00:eb:d0:68:93:1e:75:ce:
36:4c:52:93:fc:ff:6c:34:09:79:18:9e:01:26:b1:68:bb:b0:
c5:86:46:11:d3:e2:4b:58:47:f4:48:49:2f:9f:c3:b4:d8:2f:
de:34:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:49:22 2025 by rpki-client