Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: ELzfYwqtOHXV79hOZNWphjjMjHTcuuoMwkxddUzFl5Y=
Subject key identifier: A4:B5:91:7F:BC:2B:72:F5:7F:86:FD:99:CE:B2:D4:1A:24:00:0A:76
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 01977376A5E8C226A4C6FAC76D9208B47C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 12:00:44 +0000
Manifest this update: Sun 15 Jun 2025 12:00:44 +0000
Manifest next update: Mon 16 Jun 2025 12:00:44 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: DpXMRh1vnscDRd/1Uo27fc3rehfxpCFOEdLEdfgwj10=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:a5:e8:c2:26:a4:c6:fa:c7:6d:92:08:b4:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jun 15 12:00:44 2025 GMT
Not After : Jun 16 12:00:44 2025 GMT
Subject: CN=a4b5917fbc2b72f57f86fd99ceb2d41a24000a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:e8:cf:0d:f6:1d:0a:d7:f9:0b:13:1a:56:
30:a2:48:4e:23:b1:66:6d:d5:ce:08:b6:23:c3:66:
9f:fb:a3:d5:92:39:fc:08:59:f2:18:c2:40:c4:72:
1e:c3:54:26:4c:2c:c6:6f:af:ba:f7:72:d1:80:4e:
5b:ac:81:43:3f:c5:77:ae:8d:27:0e:79:a7:97:6c:
ed:0b:6e:b9:75:33:3b:5e:a6:14:f7:ed:24:7d:af:
7c:31:9c:b5:11:3f:7a:d4:d7:b8:b1:1d:8f:47:38:
2b:9e:4e:b4:c8:00:66:1b:d0:b4:fe:7d:d9:a8:75:
99:a3:1f:17:9f:bb:8d:dc:ad:19:2d:3e:e4:6e:60:
6b:d1:26:19:3c:5f:6a:8d:05:32:68:97:58:17:39:
05:ae:a7:60:8a:07:3c:77:e4:ee:f0:8e:14:b6:29:
f6:48:a0:e8:40:97:e5:f0:ee:11:0d:00:de:a6:75:
51:9c:f6:a5:03:9d:b8:cc:41:af:82:1b:52:22:2d:
95:e5:f0:c5:d5:30:64:02:87:42:47:0f:b3:7f:0d:
e4:15:3d:0c:04:2d:3b:70:54:13:c2:16:6f:2f:a9:
64:bb:b7:4c:16:80:8f:31:e5:07:55:58:e3:99:c2:
06:8b:ba:23:75:96:8f:30:e3:b1:03:de:e5:46:74:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:91:7F:BC:2B:72:F5:7F:86:FD:99:CE:B2:D4:1A:24:00:0A:76
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6b:b5:9b:4a:e2:fd:62:43:bf:c9:4c:02:6e:77:ae:02:0b:
4a:69:47:1e:35:b8:08:cd:b0:47:35:10:56:66:e4:95:7b:68:
49:ee:77:18:4d:89:fe:7c:29:76:b4:65:ce:c8:09:af:f0:94:
8b:9d:89:77:a7:02:3f:ee:7a:d3:d9:92:e9:02:e9:16:1e:f1:
57:d1:f9:2e:c5:4e:ab:ae:bc:36:13:8f:df:ea:fe:fe:34:95:
82:7a:ee:05:29:f8:a0:4a:99:63:16:8e:9a:c1:cd:bb:18:46:
4e:a6:46:01:93:c9:c5:a2:be:86:1b:1a:43:c2:f5:90:29:d8:
88:61:c8:ca:c8:df:b9:03:71:5c:30:28:f4:92:04:7b:04:aa:
83:c8:c9:08:34:60:3f:1f:83:09:75:80:ac:dd:c3:ea:c8:72:
3b:cb:66:c2:b3:8c:66:43:cc:a7:10:7d:61:85:55:f6:f0:c4:
25:0b:13:79:f2:c9:3f:f9:fa:85:fc:24:aa:77:12:67:fc:f2:
53:ae:14:5b:04:5a:3e:08:49:0b:50:b2:0b:40:94:c4:67:33:
e4:3f:ce:2e:4e:4f:d2:5f:bf:e9:1c:7d:c0:7e:83:2e:c7:ef:
19:87:a1:a0:56:2e:ff:7c:57:01:aa:58:6c:66:81:45:7e:3b:
49:9c:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:39 2025 by rpki-client