Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: wyfkZZSRVRNuMEoAwTvLJ30lnwT6vMHH4o/FG8b4qUc=
Subject key identifier: 6A:98:B8:FC:64:51:8B:69:20:1D:74:33:5B:30:90:61:31:3F:49:C5
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 01976F2CE9EC094B503AC5654670479F15E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0C71
Signing time: Sat 14 Jun 2025 16:01:43 +0000
Manifest this update: Sat 14 Jun 2025 16:01:43 +0000
Manifest next update: Sun 15 Jun 2025 16:01:43 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: psQ2BWcasoG/Ng7f8K1b6PDqI6w/NdqTBW9GyqvpGoU=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:e9:ec:09:4b:50:3a:c5:65:46:70:47:9f:15:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Jun 14 16:01:43 2025 GMT
Not After : Jun 15 16:01:43 2025 GMT
Subject: CN=6a98b8fc64518b69201d74335b309061313f49c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:15:f1:93:a4:a5:76:a0:d1:15:da:02:65:
20:bb:57:ea:f7:ea:9f:d7:71:8c:1d:1b:b8:0d:61:
a9:be:25:ed:f0:8a:8a:0c:12:c2:16:7f:9f:78:f0:
d9:69:bd:9c:04:dc:63:ce:88:26:1e:c8:cb:09:f3:
c1:64:d7:18:38:7b:37:b7:ba:33:c2:31:16:6d:c3:
b4:a0:50:53:a5:5a:21:09:9d:07:2c:6b:f0:6e:82:
87:0c:95:b8:d7:c4:02:54:ca:be:78:94:aa:b8:69:
36:50:f8:c9:c7:88:8f:26:fb:b0:9f:9f:6f:2a:67:
a7:e9:70:0a:e0:b7:02:27:2e:c1:e6:0c:a4:30:3a:
21:c2:fa:19:3e:a5:c5:e2:9e:d3:91:7f:1c:99:db:
dc:aa:40:53:27:4d:23:06:7e:94:ff:39:e1:d0:38:
df:ab:ae:4f:70:b5:ae:3c:ab:86:eb:8b:e1:26:2a:
cd:5c:31:50:0b:59:2c:b3:04:ee:9c:a4:a0:9c:27:
1e:60:bf:63:96:20:e3:0d:d4:76:15:fa:71:56:9d:
57:86:b9:fb:fe:38:56:22:58:86:28:d0:0d:2d:39:
ef:e1:90:33:49:a9:1d:a1:10:1a:36:fd:b9:23:d0:
ac:6f:3a:0e:68:f6:7a:a9:64:a8:a2:8a:57:45:a8:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:B8:FC:64:51:8B:69:20:1D:74:33:5B:30:90:61:31:3F:49:C5
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:4d:63:81:70:bc:bd:b3:c5:f8:57:af:d5:da:9f:85:6f:
59:6a:f5:46:84:a4:0a:e8:6d:17:da:c6:4b:9f:43:2b:34:1f:
42:eb:d6:e3:ec:b9:f5:58:93:3f:da:da:46:04:a3:81:d5:0e:
17:4c:56:e8:ea:c4:ba:33:9c:39:2a:c5:e2:ff:87:1d:46:01:
45:47:5c:9a:a3:4c:d7:bf:4d:07:08:15:be:2d:1a:1a:fe:73:
a7:9a:79:b0:ce:5e:72:04:8b:c4:b5:bd:23:ec:81:53:7b:fc:
14:2e:b7:a1:1c:86:32:0d:57:7a:5f:35:39:3c:a4:78:db:58:
63:59:0b:7f:cb:1d:f4:64:ca:66:f6:e6:ee:8e:98:10:a9:66:
cb:75:1b:19:bf:a1:dd:11:d4:37:3e:4c:75:88:ab:87:0b:ac:
d5:b5:50:19:7d:ff:e8:22:65:2e:40:d9:dc:1e:c9:3d:6e:27:
46:b6:b8:27:2f:21:1b:4c:4f:ce:07:e8:a9:37:43:99:7f:61:
a2:bd:c4:c7:ad:6f:a8:9f:cb:85:8c:f9:7b:5f:ff:1a:c9:d7:
a0:ac:31:23:c2:aa:4a:f8:03:03:06:f9:94:cc:d5:ce:7b:1d:
b1:59:99:fb:eb:35:f9:6c:3a:ac:9f:2b:5c:86:c8:0d:c4:0d:
be:c8:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:30:17 2025 by rpki-client