Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: cS33lE7CEFwlyQ45fUr6WKVd2fLvtJOdWZBpWo0o8NU=
Subject key identifier: 37:77:77:F9:5C:06:37:97:9A:76:48:D8:EC:B3:30:91:A9:DA:6D:45
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01976F632D876A9C916851E581BAD254396E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 02F0
Signing time: Sat 14 Jun 2025 17:00:59 +0000
Manifest this update: Sat 14 Jun 2025 17:00:59 +0000
Manifest next update: Sun 15 Jun 2025 17:00:59 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: dYIOG/26HeWhu1yb+UMFvbaIbnaCp6snXg0kd293TwQ=)
2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:2d:87:6a:9c:91:68:51:e5:81:ba:d2:54:39:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jun 14 17:00:59 2025 GMT
Not After : Jun 15 17:00:59 2025 GMT
Subject: CN=377777f95c0637979a7648d8ecb33091a9da6d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:e0:e8:7c:f0:0d:d1:f7:5f:04:85:79:b8:
40:47:e7:20:a4:a9:90:5b:5b:a0:e2:d6:06:32:7d:
b2:61:2e:ab:23:1d:85:af:bd:45:36:e8:9e:80:dd:
46:79:5d:3a:64:6a:da:c0:20:1f:94:0c:a3:dd:15:
54:27:d8:a3:d7:90:ab:ba:06:ba:5a:a7:99:6b:a4:
2d:ac:5d:1c:cc:3a:9e:81:38:bb:ba:73:ec:90:a7:
c0:20:d7:60:55:c8:4e:79:03:16:8a:8d:d6:2e:55:
a1:54:00:75:31:57:83:60:d8:ae:bb:0d:d6:e6:d8:
a3:de:c7:32:b5:03:a7:b2:bc:56:d1:23:37:6c:43:
99:e2:c1:44:6a:c8:c1:3e:c7:ef:b2:ab:c4:06:06:
22:e2:b6:9e:74:5e:93:02:40:c6:c8:4b:0c:a7:9b:
8d:f6:b2:c7:b6:c7:7f:1c:11:c6:ad:85:ff:0e:e8:
fe:e4:fc:5a:a0:25:ec:80:c9:ab:be:81:de:4c:3d:
2c:77:81:d4:e1:e9:ff:af:df:58:5a:15:2b:08:5c:
47:ae:77:2f:4a:ef:c1:28:af:5f:24:82:69:3c:82:
14:9a:c0:b1:65:4c:d6:57:0a:10:fb:6c:88:fe:29:
c3:9d:11:25:db:7d:0e:f1:6a:12:eb:c8:c6:fe:1a:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:77:77:F9:5C:06:37:97:9A:76:48:D8:EC:B3:30:91:A9:DA:6D:45
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:e6:c9:57:81:9d:b9:b6:83:7d:78:e1:76:03:71:50:9d:
bf:0f:31:a3:8d:41:68:bf:73:b9:76:36:61:db:7b:b3:c4:c7:
b3:2f:a5:56:27:5f:f0:fa:b7:da:33:11:65:8e:5a:fd:7f:63:
23:3b:cc:58:0c:6b:e3:7a:e8:d0:72:9e:aa:c8:7c:22:c2:0b:
e1:db:fe:57:ba:f0:b9:47:e6:2d:15:a8:fb:65:ef:56:45:6e:
90:a0:12:e4:21:de:70:74:2b:ed:e9:c9:90:38:fb:f5:9f:2b:
55:4d:27:4c:aa:f7:86:f1:04:9b:d1:6c:78:8d:e7:2e:83:fa:
dc:0f:8d:ff:83:ec:a8:fa:9f:ae:5a:fd:ad:7d:db:2e:5d:1a:
e4:c8:19:d7:b7:92:ec:0f:74:00:05:b3:d9:d9:52:a3:c0:f1:
24:0b:77:a2:00:b4:00:0f:eb:8b:6f:c7:58:2f:a8:b4:36:ba:
53:e6:da:ad:6a:37:eb:ff:f5:a9:a1:e7:c6:a9:c5:d9:46:7f:
39:92:d1:1f:1e:dd:35:d5:bd:bb:97:26:7d:ef:7b:39:dc:0f:
65:21:f4:c3:a2:99:6b:b8:19:c4:1d:e8:96:93:62:43:42:7d:
0f:75:a0:eb:52:32:26:2d:e4:98:a0:e9:31:63:b6:dd:82:c7:
b3:73:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:13 2025 by rpki-client