Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: Div30O03dk6jonNb5S2rnBagLZcxowTw0k78kewLJ2M=
Subject key identifier: 2C:41:E2:58:C7:4F:1A:35:BB:46:F2:56:2A:5C:E7:F1:24:09:22:60
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01984A417713583C8E2172D7802C052CCE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0D44
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: jHvRrF27DfLVoab6itfbwkbwWyH9LlvOerO7icGGAOs=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: KV03Rnxi6WRZwO1a4oGeC3HanlY.roa (hash: 7zq8HVJc+s32NHnBgUroFGKyISFlCLE015+0grkcycE=)
4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:77:13:58:3c:8e:21:72:d7:80:2c:05:2c:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=2c41e258c74f1a35bb46f2562a5ce7f124092260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:da:5b:28:b0:22:e0:3f:7c:c3:d4:c3:2b:
9f:c9:a1:c9:ec:58:dd:83:ec:df:a9:3a:bb:c8:ad:
a4:c2:e1:45:39:c8:c2:14:fe:fe:ca:fa:8a:55:e9:
6d:78:d4:f5:bd:8a:a6:a4:49:68:c2:13:ee:e9:b7:
68:3a:e1:64:36:3e:46:da:82:36:3e:a8:52:bf:28:
42:88:96:81:d0:8b:a0:ec:3d:2d:5f:d8:9d:2b:44:
85:1d:db:bc:cf:17:32:94:77:1f:ad:77:ad:54:90:
7a:ee:13:75:da:d8:ee:f2:61:25:1b:1e:e2:95:43:
1e:08:ef:cc:26:b2:f0:1b:2e:f1:da:30:ff:79:03:
3e:d4:67:ff:3b:8f:0f:f0:95:3f:62:81:49:ee:c7:
ad:d6:74:ad:17:db:f8:26:2e:f2:f0:60:7a:c8:b8:
f8:24:9b:b8:51:eb:39:bb:aa:80:ce:85:f6:e2:fd:
23:24:1a:88:96:9b:48:9e:be:fd:ef:3b:20:b9:8c:
f2:68:27:5e:97:17:ce:4e:98:b7:36:47:f2:62:c7:
ae:2d:2f:8a:93:20:67:09:9e:4a:a3:f5:62:32:09:
32:f6:b5:07:e0:b9:08:16:85:bc:1c:87:82:09:7c:
4a:9c:94:ff:7e:80:83:d4:ae:91:61:82:a2:74:17:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:E2:58:C7:4F:1A:35:BB:46:F2:56:2A:5C:E7:F1:24:09:22:60
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f0:36:84:41:15:90:97:37:fa:9c:d3:e4:8e:80:16:7c:9c:
fb:2d:28:1f:ac:62:0c:c3:3a:8b:c2:a4:db:29:d9:ae:1c:cb:
4b:f6:69:46:1c:23:b1:8e:20:e4:e4:a5:03:c8:9c:e5:a3:a2:
ea:b4:87:cc:dc:34:38:1e:89:e6:54:b8:7f:23:17:d3:2b:8d:
0f:33:2a:9a:65:99:79:1f:bf:93:07:eb:a6:7b:a3:37:2c:e9:
54:b8:fb:73:75:c7:90:b3:c9:e2:16:5a:ab:7b:a4:63:d6:60:
47:e3:94:92:f3:61:0a:e4:81:10:8a:ae:c6:69:49:cd:c9:52:
fa:9d:35:4f:e0:bc:c1:ea:19:4b:70:b4:36:7d:d9:5a:67:6a:
4c:3c:8f:4c:eb:76:c7:ae:a3:30:76:ae:3d:9b:80:f1:87:b8:
6e:ea:dd:44:47:3d:30:45:3b:a8:e6:4c:77:ed:8d:62:4b:97:
ae:d1:a5:20:3c:46:87:1e:03:09:cd:55:f8:63:34:97:6d:d7:
a6:a2:92:9a:1e:bd:87:be:a8:1c:13:65:0a:53:52:b9:97:0d:
0e:3f:c4:2f:02:80:b9:73:d8:eb:8f:4d:1b:19:7b:87:7a:c2:
2e:0d:b3:78:b6:a4:36:95:6b:54:33:9b:fc:7a:d0:8d:62:de:
26:e3:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:46 2025 by rpki-client