Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: AFOnV8Y5GRgkO/SSb+4O4DJAAGxBT7DcWWaQtKcKMSk=
Subject key identifier: 7D:BA:65:22:BE:18:32:38:28:C0:43:41:65:BE:2F:64:10:43:BA:B8
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01976CCF992B0B60A0D817BFF7B4D048F664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 05:00:33 +0000
Manifest this update: Sat 14 Jun 2025 05:00:33 +0000
Manifest next update: Sun 15 Jun 2025 05:00:33 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 6n+rXz4yMm5EbABQ0uZFLz/iAFjkJsR4xCsRvFc7fmo=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:99:2b:0b:60:a0:d8:17:bf:f7:b4:d0:48:f6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jun 14 05:00:33 2025 GMT
Not After : Jun 15 05:00:33 2025 GMT
Subject: CN=7dba6522be18323828c0434165be2f641043bab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:42:00:0b:88:b0:3f:71:66:00:da:4f:ae:
29:50:86:94:2b:76:7f:f5:00:19:37:59:28:73:97:
1b:15:be:79:39:c8:3b:b9:1a:86:74:28:83:67:44:
1f:e2:5c:bb:19:15:6e:6b:0b:cb:75:8d:2b:2c:04:
de:b5:b0:56:2f:6b:01:49:86:f1:7e:06:db:b1:06:
a0:49:1c:46:b1:05:c5:52:03:fc:0b:65:f4:a6:50:
6a:fc:7b:fe:05:7f:6d:51:f2:35:ac:c4:51:48:04:
6e:77:e5:e2:46:8f:d0:c7:5a:c7:47:16:0a:6e:f4:
08:a1:90:51:6c:6d:26:a0:19:46:95:c2:26:92:5b:
88:0e:2d:59:08:ad:5c:ae:39:83:ca:6e:0f:a3:f8:
88:23:af:f1:b0:53:06:47:eb:f9:26:51:ad:77:c2:
7d:a3:23:49:9e:21:ae:93:2e:ec:a3:43:40:35:9e:
92:37:0e:a7:c1:88:a0:a1:5b:31:1b:0f:be:8c:24:
79:82:19:db:98:c3:6b:ae:e6:00:6f:3f:2b:7d:c8:
a7:5f:df:b0:73:85:b9:0a:bf:e0:a3:ea:80:82:d1:
96:e9:67:ab:f7:01:ea:0c:bc:97:58:e5:14:72:9a:
21:d0:cf:86:16:9d:f7:20:c0:5f:f1:e6:f9:f1:4d:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:65:22:BE:18:32:38:28:C0:43:41:65:BE:2F:64:10:43:BA:B8
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7a:17:73:21:86:e2:4e:b5:ad:0a:40:01:76:92:3f:85:c9:
af:2d:03:cb:bf:2f:84:06:f4:16:b8:d5:55:38:ec:54:bb:b3:
d1:6e:14:fe:26:cb:25:32:db:d5:e4:1d:a4:d8:9d:9b:58:a4:
10:c9:bf:9e:17:33:a9:7e:da:f8:3b:ee:a5:2f:58:b4:e3:8d:
99:12:73:0f:70:3d:ee:fd:0e:b4:b2:66:53:2f:99:ec:3b:83:
74:62:f2:52:51:b1:6c:f0:1b:70:0b:03:4d:f2:d8:f6:48:b3:
e5:5e:dc:50:23:56:88:2d:82:f3:ea:11:b2:e8:21:7a:04:39:
f8:1d:7d:a3:03:8b:71:85:d8:82:3c:7c:4e:03:51:2f:27:c3:
6a:64:0a:04:26:7c:d9:ba:7d:15:34:d1:7a:f5:a4:a8:2b:92:
0f:2f:42:64:84:22:95:38:f2:a7:0f:65:f2:7e:aa:6f:c1:46:
d8:31:f7:cc:fd:60:69:e7:4e:cc:d3:f7:47:71:a9:2f:d3:ed:
0e:93:b2:f9:85:ec:15:bb:25:6a:2d:a1:2a:47:fe:10:8d:b5:
50:37:26:c0:88:c6:07:3a:02:43:2c:c1:b4:b0:89:99:09:89:
55:15:1e:d3:55:c4:77:6c:c4:1c:df:aa:14:7c:8e:ec:ca:54:
63:87:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:36 2025 by rpki-client