Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: v2+m6D/QafH9OGRlSMJmZxkc4PYdNoFNIRRaruNly0Y=
Subject key identifier: C6:D8:E9:2D:5D:3D:71:1B:BB:CF:1D:BC:27:C9:0A:9D:AC:F5:C4:46
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 01982935916CC5B525D9C39C8BF1DB75261A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 12B7
Signing time: Sun 20 Jul 2025 19:00:33 +0000
Manifest this update: Sun 20 Jul 2025 19:00:33 +0000
Manifest next update: Mon 21 Jul 2025 19:00:33 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 1FXXOiTB8bLRuDZ7XUzQBa+QNx58x70Nh0MJrj3cA9g=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:35:91:6c:c5:b5:25:d9:c3:9c:8b:f1:db:75:26:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jul 20 19:00:33 2025 GMT
Not After : Jul 21 19:00:33 2025 GMT
Subject: CN=c6d8e92d5d3d711bbbcf1dbc27c90a9dacf5c446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:7e:67:ca:0a:5f:de:63:f6:73:21:ce:fc:
03:85:ae:14:3c:d7:e2:c9:09:4b:49:7e:bb:47:a2:
86:41:e6:85:f0:02:c9:af:8a:ba:b7:6f:5c:d2:2b:
c8:af:b1:ca:5d:43:51:b9:73:c9:1d:74:c5:07:fa:
d6:3c:c4:46:7a:8c:6e:44:67:ed:83:28:0b:6b:19:
66:af:05:60:ac:d5:0a:ec:0e:27:7b:4c:94:9d:f1:
9c:d4:b3:fb:76:0d:fb:c6:14:22:b4:39:48:59:06:
83:3c:d0:7a:3f:8b:e0:a0:84:b2:92:5f:1b:b8:55:
4c:61:64:2e:74:e2:2e:60:3c:d4:9d:91:bb:95:f8:
0d:21:a1:6a:45:f4:95:8b:34:5f:0c:ba:67:4a:0f:
a5:b9:50:91:90:4f:bf:a0:9a:0b:a0:22:f2:da:d5:
ae:15:a5:af:bd:de:da:c6:3b:e4:dd:8e:6e:ec:84:
d7:76:68:ca:f4:a1:dc:b1:19:61:ad:3e:16:7f:9b:
84:a5:65:e9:a5:63:0c:f5:f5:37:72:90:44:94:b1:
d5:87:9d:a0:12:56:33:25:35:08:12:97:89:ee:f8:
a8:b0:8b:0b:8b:d8:a4:a4:19:0d:48:2b:86:5a:d0:
df:23:7b:da:d0:53:70:af:d3:d3:73:18:ea:69:9e:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:E9:2D:5D:3D:71:1B:BB:CF:1D:BC:27:C9:0A:9D:AC:F5:C4:46
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:4f:7b:61:d9:33:b1:eb:bf:09:6e:d0:40:e2:c5:ca:7c:
e5:aa:95:b6:02:25:fd:dd:60:b7:67:d1:2a:ad:2f:b4:f6:22:
15:f7:0c:2f:93:10:9a:10:da:1c:d2:34:f0:3a:a0:56:5c:4b:
36:93:e7:4d:75:77:85:4a:b7:db:cc:83:eb:ac:f2:e2:20:29:
47:15:4f:e8:c4:8f:43:78:44:fb:ec:b6:5a:29:e4:32:41:8d:
a4:32:ca:8a:de:26:e7:d5:da:00:55:10:d3:2a:a1:c4:26:9a:
e6:be:17:ca:cf:56:c2:33:ed:e8:16:85:05:37:3f:32:e2:2b:
ae:ca:99:38:8f:84:b5:ca:c1:b8:20:dd:8d:fd:48:a5:87:26:
9f:48:a6:76:8c:a7:ef:8d:41:b2:09:df:ee:02:e5:54:5a:bd:
eb:ea:b8:8e:98:e3:3d:fa:9f:de:b4:34:c1:fb:09:40:e4:30:
f9:76:e7:63:7b:2c:40:8a:84:81:78:34:c9:e2:0a:4b:7b:d2:
f0:5d:21:ee:a4:66:48:72:3d:d0:e3:3f:35:98:36:22:51:25:
0d:ec:aa:71:2f:13:d0:32:eb:95:a6:5b:05:41:b5:92:f1:a1:
3b:73:1f:26:c1:5d:47:c7:36:4e:0d:d7:1a:d4:48:e4:4a:77:
2c:ca:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:10 2025 by rpki-client