Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: SMYBR+17GQVBwzG0KWM51TzDo4PQUKjty/OrRld4bjo=
Subject key identifier: 58:7B:25:36:29:35:EA:AE:18:2B:EC:80:8A:EF:86:B5:2C:16:A0:D3
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 01974D0E2E6D796339D5C25EE63402657E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:01:04 +0000
Manifest this update: Sun 08 Jun 2025 01:01:04 +0000
Manifest next update: Mon 09 Jun 2025 01:01:04 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: p5VQStUfwM6v3x462AK24Ct9O3lgiE/x2rkq2c4h60M=)
2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:2e:6d:79:63:39:d5:c2:5e:e6:34:02:65:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Jun 8 01:01:04 2025 GMT
Not After : Jun 9 01:01:04 2025 GMT
Subject: CN=587b25362935eaae182bec808aef86b52c16a0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:93:34:03:2c:0f:e3:0f:b8:2e:ad:88:fe:
a5:1b:59:8c:df:4a:74:41:b2:a3:63:2c:d5:53:03:
b8:e9:20:0b:1c:3b:44:7d:ef:8e:6e:f5:b8:5f:8a:
a7:8e:7b:bf:41:66:84:1f:5d:69:a1:74:10:69:8e:
01:63:72:f2:ca:49:3a:45:2f:89:df:d6:e3:df:46:
f1:a1:32:c6:89:92:6c:89:17:98:73:bb:27:06:87:
b9:de:4b:4c:9a:4e:41:35:cc:90:c4:3c:b9:57:4b:
10:eb:54:c5:6f:1b:9a:98:85:cb:81:05:66:49:44:
a1:82:cd:eb:53:d8:28:77:97:65:b8:03:80:84:eb:
36:2d:75:f1:92:7c:0c:a3:8f:a7:cc:c8:c1:4c:33:
9e:8b:87:2e:4a:61:bb:94:64:01:70:a8:96:e8:9e:
b3:55:ed:ae:af:f8:05:88:7d:d6:7b:32:9e:2a:bb:
b5:57:81:8d:89:4b:b5:e0:85:84:8f:7d:83:8a:f6:
6d:ac:57:af:d0:50:76:bf:9a:f0:2b:00:ae:23:de:
a5:3d:e9:d4:eb:eb:f1:f6:ad:3c:da:f3:ad:d0:4c:
0b:aa:8e:f1:5d:89:e0:8d:e5:ad:b6:2e:c4:a6:25:
19:9f:f1:6d:a8:42:4b:b8:85:28:25:21:35:89:22:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:25:36:29:35:EA:AE:18:2B:EC:80:8A:EF:86:B5:2C:16:A0:D3
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:34:f9:13:fa:a3:18:8d:a8:41:89:51:f0:67:90:7e:0b:61:
76:8d:bf:2b:fc:56:c3:0d:66:79:64:2a:5e:10:43:b7:8a:4a:
47:a9:65:4b:e8:24:70:35:b6:7f:bc:0c:b1:98:c7:d6:eb:de:
9e:1b:cb:d7:a2:1b:c8:ec:e6:08:ac:28:90:52:18:ae:cc:10:
d5:6b:79:ff:88:f5:d8:fc:71:b3:50:bd:fb:df:c8:de:50:99:
41:c3:a5:75:c5:e4:06:2a:ed:01:6e:06:cf:fe:13:cd:c7:38:
23:f4:9f:84:0f:d5:58:48:43:61:f0:5d:44:15:ce:03:88:9e:
e3:4f:89:93:f3:18:b2:a9:f2:78:0e:e1:77:44:a8:64:a1:82:
24:f3:67:69:04:e6:39:16:6c:b1:f7:91:af:46:37:ac:8f:f8:
15:b0:7e:36:d1:b1:8d:33:71:cb:af:c0:46:4e:ea:76:4c:c7:
af:78:b2:0d:b5:f5:6f:73:0c:d8:e7:6b:ab:85:35:74:86:37:
44:52:57:a0:32:24:a6:00:a3:32:ab:e1:20:dc:6d:7c:60:e9:
b5:d3:3c:40:56:5a:89:24:1f:d6:5f:e1:b3:f8:ca:70:7d:91:
f1:e0:72:27:1c:7b:ab:36:71:7d:1e:d8:7a:0c:2b:a6:14:f9:
e3:69:fc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:32:04 2025 by rpki-client