Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: fsoXtKqsC8Xh524mHS0vzkZoc3IDsoh8Bf8snbPRoHY=
Subject key identifier: 7C:ED:72:B2:68:EE:05:6A:78:2D:C3:BE:59:F5:F9:28:B8:B0:E8:67
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 01976D06BCCAB8576B447BB8E1FED181B43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 01FD
Signing time: Sat 14 Jun 2025 06:00:47 +0000
Manifest this update: Sat 14 Jun 2025 06:00:47 +0000
Manifest next update: Sun 15 Jun 2025 06:00:47 +0000
Files and hashes: 1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: 7g8CBy1FdHmnAn9R0t46Nlh9slX7jGr/g8sYIyncmcQ=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:bc:ca:b8:57:6b:44:7b:b8:e1:fe:d1:81:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Jun 14 06:00:47 2025 GMT
Not After : Jun 15 06:00:47 2025 GMT
Subject: CN=7ced72b268ee056a782dc3be59f5f928b8b0e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:53:81:42:d9:5e:c7:6c:78:2c:3d:15:d3:
e8:33:1c:01:49:30:e1:ce:21:76:5c:7d:df:59:3e:
ac:c0:fd:ce:b1:d2:53:a8:fd:2e:5b:8d:24:3a:94:
b7:d1:1d:4f:14:b1:24:9e:33:36:a9:53:46:ae:f7:
4c:a2:d7:9e:49:a8:0e:39:8b:ed:1a:af:65:b6:13:
6f:2f:41:e8:41:12:63:15:eb:3d:de:7d:87:54:67:
87:20:d9:25:13:b8:c1:99:5a:af:62:37:2d:8e:83:
93:e1:53:8d:77:be:32:d0:74:8b:ac:a3:5d:3b:98:
5b:b4:45:a8:ca:4d:e2:8a:11:94:64:b0:8d:2c:18:
9e:77:93:3c:40:55:e6:79:b7:6a:15:20:19:6a:b2:
8d:63:86:ce:35:70:8d:8a:77:f1:83:8d:bc:32:32:
43:78:d2:bd:3b:4c:fb:93:dd:5b:df:60:d1:18:ae:
b7:9d:87:3d:27:a0:f7:95:70:c2:0c:75:68:16:ba:
72:fb:64:e3:9c:2e:06:25:c0:ba:3f:18:f3:f4:08:
5e:02:9c:1d:2f:d2:4b:ca:1e:d8:e9:f2:dd:19:32:
d5:c8:90:e2:85:ab:84:8b:f9:a5:11:42:f9:c7:09:
62:cf:bc:2c:18:80:d9:45:4d:2b:00:59:19:a5:59:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:72:B2:68:EE:05:6A:78:2D:C3:BE:59:F5:F9:28:B8:B0:E8:67
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:ec:42:1f:4d:37:89:3d:d2:2f:78:c2:6b:64:75:28:cb:
8c:7d:10:30:6d:da:89:d1:58:1f:49:72:f0:de:b6:02:9a:0a:
52:bf:fa:12:6b:7d:f5:17:e4:c0:cd:f4:d7:7b:ce:51:ea:93:
30:73:12:c0:20:e4:e7:66:64:24:0a:9c:e2:01:80:b3:78:4b:
9e:10:6b:fd:38:c7:54:e9:6f:55:e6:cf:aa:c6:f7:a7:f4:a6:
2f:d4:92:de:64:84:60:cb:b1:29:1e:39:64:d5:a6:6d:35:02:
29:48:65:50:a0:27:ec:60:43:2a:4a:7a:ea:cd:91:81:9f:ef:
eb:ab:5e:03:92:e3:11:50:0a:51:88:b4:00:ea:70:51:4a:22:
4d:73:9c:34:ac:b9:49:81:ae:22:f2:43:97:3f:9d:5a:f6:1a:
3f:52:cd:f1:67:45:28:7d:34:52:91:04:7d:df:bd:f6:87:14:
eb:6d:9e:b8:bc:ca:6c:26:0a:64:bb:54:8f:1b:a5:ac:29:5f:
0f:c7:0c:df:8f:92:c4:39:94:80:6f:17:25:35:22:29:6f:a9:
db:20:ae:fa:2b:19:c2:e9:e5:57:ae:14:da:5d:b9:c3:be:28:
26:41:30:02:55:65:53:0d:3a:a9:4e:a6:50:69:d3:8f:93:65:
27:02:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:13 2025 by rpki-client