Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: KCGLwgAA5G/jXAZvdWVPGBqkqyX/VHWIiygO43Wgbuk=
Subject key identifier: 2C:F6:81:E2:0A:9A:D0:D4:A9:8B:DA:13:DF:DF:FD:02:31:4D:6F:52
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 01976D3DFF8595688EAA5525F1C3E09F6E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 14BF
Signing time: Sat 14 Jun 2025 07:01:08 +0000
Manifest this update: Sat 14 Jun 2025 07:01:08 +0000
Manifest next update: Sun 15 Jun 2025 07:01:08 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: 3fZyOXMNzfoiV/4ZsJjTZyR3id3xNdVvulS/J7px3NA=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ff:85:95:68:8e:aa:55:25:f1:c3:e0:9f:6e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jun 14 07:01:08 2025 GMT
Not After : Jun 15 07:01:08 2025 GMT
Subject: CN=2cf681e20a9ad0d4a98bda13dfdffd02314d6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:d6:0b:fd:d3:6d:6a:e3:5d:d0:19:e9:4e:
25:fd:bd:d3:f5:4c:44:ae:5b:2d:37:32:f5:da:f1:
e6:5f:10:d2:38:3f:d9:16:cc:a6:8a:56:62:4f:65:
c0:18:37:ba:c8:ff:fd:e2:e9:7e:70:4e:63:6f:5b:
27:f5:38:d7:14:10:1e:ef:24:8e:71:11:61:0e:13:
a5:96:b1:c3:a6:ba:6b:1e:9b:07:2c:9a:ac:03:12:
de:ca:88:23:c7:e9:f4:03:71:40:32:d1:11:aa:65:
fa:20:b0:e4:65:e8:17:68:cc:1a:bd:2c:17:ce:37:
18:55:ad:6b:02:f2:47:3e:9e:62:a2:ea:52:93:bd:
4d:94:c6:de:8e:c3:25:ce:33:0a:13:c9:cc:b2:3d:
3d:3d:c1:86:9a:ab:7e:3a:11:ed:b4:be:64:23:d2:
70:6f:06:ad:19:42:22:5a:89:71:e4:74:a5:d1:f2:
98:98:0f:88:20:90:2f:d9:1b:d8:94:49:e1:5d:e5:
56:c7:80:b5:78:84:a8:ff:a5:c4:3e:01:ee:3d:55:
08:a0:86:e9:06:0f:6d:f1:bc:97:c8:f8:ec:7b:14:
20:37:7d:a2:7d:15:df:c4:38:3f:01:f4:01:6f:19:
4a:96:5a:23:16:54:54:a2:94:f0:57:a7:8a:c2:db:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:81:E2:0A:9A:D0:D4:A9:8B:DA:13:DF:DF:FD:02:31:4D:6F:52
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:3d:e3:64:ed:1a:35:38:cf:a7:2f:d0:1d:f4:36:14:87:
72:bf:f3:df:15:b2:75:5f:f8:97:04:ac:26:e3:81:90:a1:66:
4c:35:fd:af:9a:47:f6:a7:24:51:e4:e4:4f:08:93:18:6a:6b:
99:bd:58:a1:49:b7:20:c0:63:11:90:c8:70:35:e9:8e:79:11:
7f:75:ab:0f:81:5c:e1:68:c5:b8:94:c5:9c:3e:01:3f:e9:1f:
a7:43:80:e4:03:17:af:58:39:a9:1f:18:df:2b:9f:31:cd:f2:
7f:1f:b7:c3:2b:87:86:a6:de:aa:3a:77:3c:ed:17:9d:97:d7:
f8:af:bc:f1:8e:c5:3c:6c:ea:87:82:54:77:63:7e:6c:0d:be:
73:94:05:91:0c:48:f9:41:73:0c:fa:9e:7d:9e:7e:24:94:4d:
00:63:a1:00:28:64:f8:a6:2e:f7:ec:58:ad:11:19:1e:b1:5a:
f4:54:6a:3b:68:40:70:79:64:c7:ca:2c:62:c7:3e:ee:e8:1a:
63:b9:37:23:40:17:94:24:a6:30:90:ba:51:84:4b:bb:ee:51:
81:f3:60:6c:f2:73:45:1b:12:d6:c8:4a:90:8c:ac:3b:ce:f4:
3a:08:50:ae:6b:af:21:41:e6:01:7c:1f:d1:fc:1e:56:d8:69:
1f:98:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:35 2025 by rpki-client