Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: deDNZyfPHO+G94J+cJ4Iibmhi6cTiCFaUa53qOgWwpg=
Subject key identifier: 8D:11:93:2F:CF:B5:3D:60:1E:1F:C9:9B:2A:97:54:17:2E:FD:46:0D
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 019749D5E54B57624DA5DADBAB5F65C183E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0A24
Signing time: Sat 07 Jun 2025 10:00:43 +0000
Manifest this update: Sat 07 Jun 2025 10:00:43 +0000
Manifest next update: Sun 08 Jun 2025 10:00:43 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: GofE91mDwsOKaNziZ1VVxL0sk9QhDxztD/xsOZyKSMo=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e5:4b:57:62:4d:a5:da:db:ab:5f:65:c1:83:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jun 7 10:00:43 2025 GMT
Not After : Jun 8 10:00:43 2025 GMT
Subject: CN=8d11932fcfb53d601e1fc99b2a9754172efd460d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c7:29:11:2c:d4:15:45:2a:b5:13:9d:3d:24:
fd:c6:d5:79:57:ff:25:ed:4a:80:c4:0c:83:c1:6c:
93:62:1d:58:8c:9d:42:1d:8e:f7:b0:7e:1b:cb:52:
77:6c:d5:67:ea:53:0b:76:f6:f5:72:31:8f:86:be:
2c:d1:08:75:86:0d:b3:49:65:23:cc:65:68:e3:2d:
5d:96:d1:64:38:14:14:f1:be:3c:8b:87:99:50:b8:
b4:40:2f:3d:54:60:ba:86:f5:ac:b6:11:c7:8c:ec:
b9:7c:80:cc:5c:ab:d2:ae:b2:50:64:e7:68:6f:9f:
93:0e:62:65:51:ef:19:d4:35:69:c0:08:aa:19:70:
17:ae:f3:7c:cd:6c:9c:99:1a:39:4d:e8:bc:48:cd:
26:13:47:53:ff:35:ad:ce:52:d1:06:8a:59:8b:a2:
d8:1b:89:cb:10:69:d7:02:92:d1:6d:6c:f5:db:b6:
c2:13:f2:12:7e:35:48:db:0e:e1:f4:77:b7:d6:e4:
93:ea:e1:56:8e:d5:af:57:c4:8a:4f:3d:cb:b8:1d:
8d:ea:53:f6:39:ec:c3:06:bc:64:d4:87:a4:98:22:
69:e2:93:6a:e8:01:82:c4:1c:0f:4e:cf:dd:e7:9b:
a4:3b:dd:69:9b:c3:8c:76:fb:fc:01:58:c9:06:e7:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:93:2F:CF:B5:3D:60:1E:1F:C9:9B:2A:97:54:17:2E:FD:46:0D
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:52:1f:23:b8:c3:da:89:a6:2b:dc:9f:d9:58:e9:03:3f:a8:
d1:2a:9f:c3:03:7c:87:7a:e5:ca:d0:41:42:59:19:e5:99:16:
05:68:d4:a4:42:d9:fe:af:3a:ba:02:ec:b5:2e:b3:23:7b:c2:
ab:91:51:06:ab:00:67:f4:5c:14:78:3a:77:19:27:2b:9a:55:
a9:69:3d:4c:d1:af:0a:23:c2:8e:90:c7:d4:94:d5:06:84:a0:
cc:c4:a2:85:40:3f:b1:15:14:9f:fe:ea:ca:33:13:c2:3b:d4:
40:08:4f:6c:90:99:a0:29:70:48:0d:9c:bd:ac:85:2e:61:8d:
a2:71:e0:41:ec:1e:9a:17:95:86:bd:95:6a:de:ce:bb:f6:ba:
10:13:56:fa:4a:80:22:4f:f4:0f:0c:6c:8e:7f:66:e6:8e:d6:
df:0d:38:43:0b:cc:cf:1f:98:d2:30:88:29:ae:d5:60:91:ad:
7e:95:ee:c5:e8:ff:1e:aa:64:38:58:c7:ef:d9:f9:a3:32:8d:
f5:60:ef:14:3c:2b:11:6a:18:72:6d:79:aa:c4:df:8d:a7:c5:
b3:0e:e4:df:dd:8c:dd:28:61:b6:9b:00:43:4b:7a:fb:2c:c2:
1b:de:f6:84:16:56:a2:d7:5b:8b:b2:7b:56:fe:02:83:d1:e6:
e4:fd:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:32:10 2025 by rpki-client