Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: slynR5e4N3g3FuyF/oiFw+3pUUT/3Q2FlIU1b29Kxzw=
Subject key identifier: 87:BF:39:00:72:AA:BC:B2:A4:69:51:50:D0:17:CB:78:FD:CE:92:6E
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01976F62E8A57A3CDC568B76399754A1A682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 17:00:42 +0000
Manifest this update: Sat 14 Jun 2025 17:00:42 +0000
Manifest next update: Sun 15 Jun 2025 17:00:42 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: MoeOC4GJ2c1Umz0nKpnGKyOlhzzghSThwWaOl6i/QdI=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e8:a5:7a:3c:dc:56:8b:76:39:97:54:a1:a6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jun 14 17:00:42 2025 GMT
Not After : Jun 15 17:00:42 2025 GMT
Subject: CN=87bf390072aabcb2a4695150d017cb78fdce926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:1b:92:28:32:06:52:47:e6:e0:94:cd:a8:
65:d5:f6:38:1b:da:24:c9:2e:0d:07:67:ab:08:cd:
52:2c:cb:51:49:97:b9:85:24:42:7d:d8:a3:b8:08:
2c:8b:35:76:d0:62:fe:57:b5:8d:ea:c1:a9:09:8b:
d6:a9:86:5f:04:5a:7f:8d:3c:a1:6d:c2:b4:29:2f:
d5:78:bb:de:e1:14:b9:e7:66:d8:fd:32:78:9e:2b:
16:a4:68:eb:11:08:2e:9d:f9:c0:0b:51:63:32:e2:
9b:a8:47:ce:cd:d8:76:a2:15:fa:78:5f:e9:da:cb:
1d:10:4b:49:c3:ac:4b:1c:8b:b0:8c:6e:b2:e7:23:
b8:29:0e:f6:2d:ef:95:04:36:d8:25:8f:de:89:5f:
86:f3:f6:0a:c3:e9:35:0e:52:fe:0f:53:0e:a5:ba:
87:98:55:e3:df:f9:28:c3:bd:95:d9:50:47:7f:ab:
2c:2e:32:21:d9:70:24:b6:73:2e:ce:11:6a:32:3d:
d1:f2:64:53:1c:13:6d:8a:f8:c5:2e:9a:17:59:99:
9b:a4:87:d7:6d:b7:9d:3d:35:fa:62:8f:0e:0a:3b:
7a:28:80:9f:44:93:a1:dd:39:81:1a:f9:a7:de:fb:
73:2f:17:72:9b:98:c5:c7:52:2d:0c:19:2e:13:8d:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BF:39:00:72:AA:BC:B2:A4:69:51:50:D0:17:CB:78:FD:CE:92:6E
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:be:8c:89:fa:25:46:ba:df:be:66:22:f1:f2:0b:ec:4f:25:
bb:db:93:aa:92:fd:a6:84:70:0d:68:82:b4:ec:9d:7f:0b:ea:
e6:94:ed:58:ab:90:c5:13:51:66:6d:ae:6b:43:a1:09:28:6b:
70:cb:c9:0c:5b:5b:51:27:bc:67:f8:ac:48:52:6c:2a:6f:90:
db:b6:32:be:8e:7a:d3:5e:41:f8:e5:ac:90:4e:1e:99:8b:9d:
e7:e8:01:55:33:5a:2d:aa:64:2b:c5:f6:dc:04:44:f3:cc:41:
fa:c7:4a:a6:79:1f:aa:2b:41:7b:df:b0:b4:85:02:ea:9e:fa:
fb:55:4e:d7:db:b1:ba:da:fe:99:ae:7e:69:2d:9a:2a:74:b6:
cf:b1:59:7c:ce:18:9a:b6:80:4a:6c:05:4c:a1:f6:e4:a8:8c:
12:71:6d:a2:8d:a0:87:18:dc:9b:f3:57:62:7e:65:bf:e2:f5:
c3:f8:af:47:5c:8e:39:fc:5e:30:dd:7b:18:60:7b:3c:63:60:
95:45:24:7d:8e:db:99:19:4c:12:6d:ba:bf:71:93:bb:3f:08:
21:4f:5c:77:b8:b9:2a:06:fa:2b:68:2d:39:ce:9a:d3:03:eb:
02:0f:c0:73:c1:27:4d:5a:80:f2:50:13:6b:4d:36:8f:91:91:
ab:59:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:20 2025 by rpki-client