
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: kgrJwXvlSWxh+0LV57xKPvoVQeBmrdPP5v/hYWrbJCY=
Subject key identifier: 6C:D2:A5:4D:7B:5F:96:5B:EB:93:AC:74:5D:DC:21:CC:80:49:76:51
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01978432FF5C5AB58315525CD165B295D0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 18:00:24 +0000
Manifest this update: Wed 18 Jun 2025 18:00:24 +0000
Manifest next update: Thu 19 Jun 2025 18:00:24 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: w24DSHQM398e7tZ08AwbA9wv0WXh4KT5fV0TUZWfSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:32:ff:5c:5a:b5:83:15:52:5c:d1:65:b2:95:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jun 18 18:00:24 2025 GMT
Not After : Jun 19 18:00:24 2025 GMT
Subject: CN=6cd2a54d7b5f965beb93ac745ddc21cc80497651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:73:d0:d3:a0:57:72:77:6e:26:c1:ed:d7:
b7:15:dd:c9:e7:66:93:67:55:00:df:2c:0d:82:b6:
d8:87:e5:a2:d9:f9:bf:5a:37:8c:20:ab:3a:35:f7:
07:ce:3b:cb:25:78:73:d1:f3:e9:62:e0:ca:36:37:
6f:fb:2e:85:76:ed:19:c8:6e:73:50:d9:fe:31:a1:
c6:7e:fd:25:09:61:79:0c:e3:99:dc:50:20:67:97:
6a:66:23:32:7c:fa:ad:d2:44:df:95:38:6b:ec:0b:
3c:6b:e8:4d:88:cb:97:02:47:b2:2b:e4:5a:58:a9:
ec:36:dd:8d:de:a7:08:ed:eb:4b:b6:90:2d:20:49:
e4:16:ea:c7:8a:a4:f9:04:08:1b:8b:6e:88:ec:a3:
7d:10:50:f5:2e:94:ee:88:d2:47:e4:92:0e:f7:91:
b3:31:f1:44:55:a2:0e:9d:d9:05:08:e5:1e:59:ee:
22:a0:31:49:4b:5a:a5:e9:cf:9d:d1:cc:62:65:12:
be:3c:1a:15:d6:f7:c7:57:10:2b:20:a1:18:33:78:
e6:57:cf:de:15:d9:06:15:12:65:25:27:60:da:14:
18:e6:dd:25:75:47:54:05:54:f4:dc:ec:2a:b6:a3:
24:d3:96:e9:17:fa:a9:fc:d9:37:3f:f3:e0:1e:09:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:A5:4D:7B:5F:96:5B:EB:93:AC:74:5D:DC:21:CC:80:49:76:51
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:64:c3:9e:aa:83:57:7f:9f:bf:4c:de:40:d0:4f:9f:4c:
c5:c3:71:b3:57:e8:69:9a:f5:be:95:32:d8:61:87:fe:d0:25:
b3:99:b0:b8:02:7c:ba:71:37:a2:7f:56:55:68:c9:5a:8e:7e:
00:2f:bc:72:e1:3b:f8:9d:e0:b3:d9:ec:d4:6b:01:ac:41:8e:
a3:bf:e3:df:6a:96:e3:bb:7f:2e:fe:cf:60:07:73:10:43:ac:
d3:69:2a:76:96:89:af:07:27:39:ff:2c:74:63:b5:25:42:62:
a2:60:78:99:4a:b1:d3:cf:a5:fc:13:d8:04:3d:81:f4:8e:1e:
3c:21:9c:a5:80:08:08:4b:fe:46:65:fc:da:47:e6:cc:a7:4c:
8c:4e:41:93:a4:f5:0a:f7:ea:5a:e3:40:12:f5:cc:dc:bc:b6:
f8:0f:98:dd:db:af:42:c5:a5:40:3b:47:e5:ba:ca:c7:e3:31:
eb:c9:6c:c2:1a:90:d4:b8:93:19:a4:e5:b2:fd:10:be:e3:3a:
11:34:9d:ca:ee:ca:6e:87:5e:13:c0:c2:ba:08:db:a1:70:72:
68:bd:7f:bc:2e:bb:c1:1a:91:f3:3d:ae:7c:58:39:69:18:38:
eb:32:19:b1:49:b1:2a:9e:4a:ee:63:5c:68:70:32:79:63:85:
38:7a:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:58:24 2025 by rpki-client