Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: 9EcKz5/v5zlH/6/hQNJlhCtqJS4eoj3f0FjQEGivzis=
Subject key identifier: 1D:A1:56:CF:4F:08:DF:49:BE:B1:70:2B:54:D0:75:C5:62:77:42:63
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 01984A7805D65CFF1E7D906A14A7735DFF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 06B3
Signing time: Sun 27 Jul 2025 06:00:36 +0000
Manifest this update: Sun 27 Jul 2025 06:00:36 +0000
Manifest next update: Mon 28 Jul 2025 06:00:36 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: zeUIhojDmRSqhqEOe3rBy5zTn34gyqcKmBWzf8qPwfw=)
2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:05:d6:5c:ff:1e:7d:90:6a:14:a7:73:5d:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jul 27 06:00:36 2025 GMT
Not After : Jul 28 06:00:36 2025 GMT
Subject: CN=1da156cf4f08df49beb1702b54d075c562774263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:be:4a:f6:20:45:a9:2d:3c:4b:66:99:66:
ef:4b:e9:19:b9:16:43:64:f0:fa:d4:da:ec:3c:f7:
0d:ee:fe:0b:b7:45:19:74:da:f4:82:a0:6a:b9:6d:
7e:43:f5:c5:7d:03:ac:9c:04:35:ea:e5:a9:98:84:
53:5f:d3:aa:7c:84:3b:cc:cf:9d:c8:58:d1:39:e2:
49:0a:36:81:31:d2:5c:7d:81:c6:86:d8:07:75:4d:
ab:e7:ee:22:92:8f:c3:b3:ea:0b:17:ba:a6:7a:ca:
40:ef:12:cc:3c:50:29:5c:fd:1f:13:92:a7:ef:66:
11:70:0b:b6:fd:f3:57:6d:3c:20:07:7e:b7:e8:a2:
72:21:f0:d3:85:47:15:40:20:5e:39:2f:c9:40:e7:
ea:5f:83:54:6a:22:82:b1:cb:2a:7d:c8:31:61:8a:
49:ab:2e:cb:63:52:08:75:14:7f:72:12:f5:57:b8:
fe:6f:df:e6:13:d7:9f:d5:3b:fa:cf:fb:62:87:cc:
97:e5:db:01:38:ef:80:b3:47:67:c8:6f:00:53:84:
de:98:5d:c3:cc:e2:c9:42:9c:ad:82:89:7b:3d:32:
31:7f:f9:7b:10:f3:8a:73:9d:2e:d0:68:c1:74:dd:
85:54:9c:4d:ed:fa:dc:0a:aa:ea:60:39:22:a9:b4:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:56:CF:4F:08:DF:49:BE:B1:70:2B:54:D0:75:C5:62:77:42:63
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:57:ee:fd:a0:db:48:cd:dc:f7:6b:a6:d6:ca:4c:67:32:
56:f9:1c:07:bf:29:8d:fe:5c:a2:95:cc:48:aa:93:7e:77:bb:
a2:0f:88:fd:89:78:a6:48:df:3f:9a:51:b0:7c:3d:ef:66:f1:
08:80:57:03:1c:df:ff:69:5b:b5:75:c7:36:d4:57:0b:7a:20:
ca:6c:a0:17:20:45:f0:e9:69:df:b0:d9:3d:3b:e1:40:f3:04:
c7:fa:e5:8b:96:82:f4:92:4a:70:3a:9c:c1:8c:7e:84:7c:a1:
77:99:fe:60:bf:5c:7b:69:f5:7f:4a:35:0e:6e:e4:a5:db:d3:
02:c0:59:51:d3:fb:44:fb:d5:0a:81:ce:c9:18:9d:db:31:f2:
62:fe:2b:a2:05:2a:84:54:63:ed:25:26:97:c2:78:61:cd:83:
50:a5:c9:f7:37:2e:01:d8:f7:b5:8c:7b:56:20:17:d1:1c:e9:
68:f6:30:1d:d1:c4:bf:3c:9f:42:67:ca:aa:bf:eb:82:1d:cc:
c4:8f:61:35:1b:8f:58:b2:5b:78:ab:35:50:ab:ec:4b:bf:bf:
af:4a:35:8c:2c:30:01:4a:c1:6d:5d:77:3e:ea:64:82:17:9d:
30:1d:5b:56:43:00:d5:95:f2:85:b9:20:80:0c:b5:0d:bc:29:
e3:a5:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:34 2025 by rpki-client