Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: kA1W/+SccqckUJ8o1/c/0iOVlcBZ+8jTGQ+9cZCzN6Y=
Subject key identifier: 85:53:3E:4D:7E:99:76:EB:A2:1A:3C:75:80:45:DE:D2:2E:42:C1:A4
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 0197745290B4A723BE55119462238B18E236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 08B2
Signing time: Sun 15 Jun 2025 16:00:57 +0000
Manifest this update: Sun 15 Jun 2025 16:00:57 +0000
Manifest next update: Mon 16 Jun 2025 16:00:57 +0000
Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: 7Lq3NDiJfoVPKY1CCBI0OyqTCtZRMP/43jqQCiSq74A=)
2: 5Y3Jwmte8A-d_YlOn8cgBr_VO4M.roa (hash: vSY895Pgffq53GRNLVm1t6+gWyyWT9dNx713Rvp80xY=)
3: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=)
4: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=)
5: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=)
6: bf7MiBVtuN_VY-lMeIniqJDCBns.roa (hash: m1U+Cy0bI+/dKIetpHKZZ9yo7LVmFreBiQ7nhZy+5Fo=)
7: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=)
8: djyQgKDBzjTtDqekGHCbyDvwrGE.roa (hash: cybcX12xZijqQUsvS6pf9buN4wQXxjv+dDk5QDV0/Ys=)
9: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:90:b4:a7:23:be:55:11:94:62:23:8b:18:e2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 15 16:00:57 2025 GMT
Not After : Jun 16 16:00:57 2025 GMT
Subject: CN=85533e4d7e9976eba21a3c758045ded22e42c1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:94:5e:25:d9:08:62:53:df:a7:32:4e:c9:
82:24:9f:41:94:c6:71:58:15:dc:b6:06:e8:0e:8b:
22:e4:18:db:b9:e5:6b:9a:15:34:14:ca:24:64:04:
15:9c:b5:0e:fa:17:2b:5b:58:18:e3:bb:15:c9:4f:
ba:a7:93:cd:88:f5:2e:1a:e7:93:07:aa:b8:bf:3b:
eb:e7:7c:c5:c8:b3:12:24:a5:02:42:39:3e:1f:27:
56:fe:83:6c:d6:50:ef:b1:1e:10:68:f0:9c:8d:d8:
0f:27:e0:00:16:e0:1c:b4:1d:8b:98:32:76:8f:27:
7c:f5:39:13:8e:05:e9:ea:2e:71:91:49:6e:d6:5d:
24:1f:ec:77:d0:ff:a0:46:4e:77:07:f4:60:90:19:
01:6b:e9:18:87:ee:d5:a0:a8:a7:a4:0a:0c:ab:94:
23:79:68:8e:92:f2:97:83:1a:d1:bc:55:f6:e1:6e:
0b:1a:1c:8e:fa:55:3c:9e:d8:6f:f5:5d:3e:08:b0:
95:b9:1f:5a:4c:7b:e3:6a:47:9b:c2:d6:cb:49:0f:
e3:1f:5a:47:c0:62:3c:48:5e:44:c9:24:b2:da:40:
a6:ab:83:6f:43:a0:eb:d5:4c:04:72:1c:cf:b0:96:
bc:5f:fa:e7:a0:cd:b5:30:12:33:fd:0c:b0:64:de:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:3E:4D:7E:99:76:EB:A2:1A:3C:75:80:45:DE:D2:2E:42:C1:A4
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9c:8c:ac:4b:85:19:13:d0:7c:68:38:2e:5a:0b:d6:59:cb:
80:86:7e:5e:c2:e4:06:8e:3e:35:8b:76:4c:67:56:dd:fc:95:
9d:35:a2:3a:c9:38:8b:29:ce:7f:86:59:38:5f:e2:55:94:fa:
19:4d:91:36:4c:46:bf:ea:b9:42:6e:84:c4:31:86:c2:06:c2:
c7:b3:40:f5:4b:48:e1:ea:3d:00:8c:90:39:86:fd:a1:06:ba:
8b:24:c5:bb:57:9a:03:ed:bc:3e:9b:5d:db:f2:dc:2c:9c:7f:
cf:a6:a0:2e:d0:8a:f9:5b:88:11:56:32:07:72:0e:02:f6:34:
27:23:7e:9d:39:8d:e6:3b:5b:91:28:9a:41:e4:f7:ff:4c:ee:
f4:42:bc:52:72:8c:39:2c:62:32:6e:91:0a:c4:d6:cd:4e:1b:
2b:79:1f:ea:aa:86:46:ac:8e:c0:90:bc:fe:72:11:8b:e8:87:
2a:18:c9:02:de:08:82:20:11:1a:7a:2f:61:b0:ad:d8:de:a1:
2f:36:ae:21:fc:c6:d7:2c:a5:19:26:fe:33:05:d1:b2:8b:15:
51:c0:99:47:ed:14:f2:3b:6c:68:c0:17:03:c4:69:4e:b3:58:
9b:39:f8:3f:ea:0e:49:7b:d7:a7:55:f2:5a:f2:85:b9:a2:de:
28:5b:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:04:40 2025 by rpki-client