Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: l82OcyWkRcFPR7nmPQHn3XUgvA/RkVjqpDWc4vvjrWc=
Subject key identifier: FD:F8:DD:01:D9:F4:76:01:8F:26:63:9F:2A:EE:DA:26:10:9F:CE:9A
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0197488D05B0001B78DB8FE69EE3353EC140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0DF9
Signing time: Sat 07 Jun 2025 04:01:30 +0000
Manifest this update: Sat 07 Jun 2025 04:01:30 +0000
Manifest next update: Sun 08 Jun 2025 04:01:30 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: V5Itaz7XS3YLAWFa5UdzBvHf0zEeGh14f0+xgMX4aBo=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:05:b0:00:1b:78:db:8f:e6:9e:e3:35:3e:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Jun 7 04:01:30 2025 GMT
Not After : Jun 8 04:01:30 2025 GMT
Subject: CN=fdf8dd01d9f476018f26639f2aeeda26109fce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:da:44:3a:2c:29:6a:48:94:fd:74:ff:e4:
2a:7c:38:0f:1f:ed:d9:7f:4b:95:7f:dc:fa:ac:fa:
aa:a6:5c:64:61:40:59:18:44:f3:ba:bd:29:35:fe:
8c:97:d3:7d:41:4d:25:3c:d2:9a:89:d1:48:4c:e3:
e6:40:0f:81:32:10:69:f6:72:cb:2e:eb:b1:78:e5:
35:ec:b5:f0:b9:f0:3d:ff:82:b2:07:e2:b5:12:de:
49:83:9a:ef:73:5f:e3:97:2b:9e:8c:79:d8:d0:e0:
4d:46:3d:a4:29:75:f3:a1:1a:fc:cd:5a:59:07:93:
d2:11:d4:5f:df:4b:88:a9:0b:d3:4f:4c:14:18:2f:
ad:80:65:eb:92:d9:82:b7:9b:53:e7:96:bd:33:8e:
0e:42:d2:27:70:16:15:e2:83:ee:75:f3:b8:23:00:
de:32:64:d5:40:48:82:9c:39:7e:d8:1c:76:85:c5:
06:cc:ae:71:04:95:33:b0:5b:60:37:ac:91:ae:c5:
78:39:74:ef:5e:55:07:1d:80:d3:ad:4c:f8:5c:8b:
d7:dd:10:a1:9d:45:fc:eb:02:2c:9c:60:4b:96:98:
a1:5a:85:fa:22:32:26:60:ce:4a:b4:a8:83:5d:5c:
43:a3:a9:c5:6b:3f:d4:a6:8c:a2:5b:0c:09:10:ad:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:DD:01:D9:F4:76:01:8F:26:63:9F:2A:EE:DA:26:10:9F:CE:9A
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:fb:7a:f9:98:ef:5c:7c:a2:33:1f:0f:75:1a:4f:d9:d6:
3f:42:fa:02:e1:91:37:9d:c9:62:e7:89:32:77:ef:91:05:44:
11:ca:e8:76:ed:d7:16:3c:3b:3c:19:39:61:47:84:19:4a:14:
ac:e4:d4:b3:1a:8d:8a:2b:eb:d2:2e:75:62:97:a8:e3:e8:23:
2b:90:26:89:be:ce:ba:ed:8a:1c:c3:f7:d8:7a:fd:5f:18:ca:
e7:14:45:09:9a:b4:cd:84:c3:52:bf:4b:9b:fd:4c:f0:bf:75:
72:7e:34:c8:7d:bf:bf:96:f1:f4:89:42:64:80:5a:66:1b:6c:
13:11:be:1e:ae:e9:c8:5d:b3:38:e9:f9:44:b1:c5:69:f0:5d:
18:ed:5c:b4:c0:1f:bc:d6:a3:4f:cb:10:70:bc:0e:33:c3:c9:
59:1e:47:9a:02:ce:3d:22:70:a8:0a:cc:57:d4:4a:59:d6:3b:
ce:bf:2f:81:e8:89:2a:f1:43:8b:7c:98:9c:b7:fa:fe:80:60:
39:e4:4d:f2:c0:a5:7c:33:66:57:10:e7:48:1d:54:f3:c6:47:
80:11:30:b4:9b:5a:4e:69:46:83:a0:49:4b:b9:4e:0c:36:ec:
a8:ed:24:b2:17:ba:18:18:cf:17:b2:70:b6:24:1f:44:79:60:
0f:6a:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:40 2025 by rpki-client