Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: +5aQjCAcVb8VDKRhdPgNbVG0gXYPW0VnH2nvIptPIqQ=
Subject key identifier: E8:34:2C:DE:AE:4F:36:B8:D0:8E:60:4E:8C:51:70:81:A9:BC:97:67
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 01974366188CF61B6C88AA7057AE3C919DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 04D1
Signing time: Fri 06 Jun 2025 04:00:53 +0000
Manifest this update: Fri 06 Jun 2025 04:00:53 +0000
Manifest next update: Sat 07 Jun 2025 04:00:53 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: jr+s9OCe05J7Xxk2N2xmO4Z+bFNlHtg/einf665mtu4=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:66:18:8c:f6:1b:6c:88:aa:70:57:ae:3c:91:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jun 6 04:00:53 2025 GMT
Not After : Jun 7 04:00:53 2025 GMT
Subject: CN=e8342cdeae4f36b8d08e604e8c517081a9bc9767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:8d:a9:a1:87:f4:eb:36:ea:da:f1:59:2c:
c6:f4:c4:53:f1:48:25:00:9d:d1:9c:74:2c:f8:51:
c0:95:74:2b:ed:77:1d:97:fc:2d:dc:cf:50:38:c2:
27:77:0b:0f:25:b2:4e:8d:3e:02:57:a9:ad:c9:98:
3f:78:ab:ce:f0:5f:46:b8:96:17:c0:e4:0c:36:19:
6b:72:3a:eb:8b:b3:dc:ad:2f:06:b0:92:ff:b2:6a:
a7:84:69:21:fb:eb:3d:53:22:36:4f:53:0a:ad:b8:
ac:87:20:14:2b:cc:29:37:40:04:6f:ad:bf:57:97:
03:da:e7:af:ff:5a:de:94:9f:8e:63:81:58:f0:51:
c0:b9:78:d3:8e:75:aa:c3:ae:33:4c:95:a6:97:e9:
33:d2:ba:ad:04:76:06:71:32:f2:9f:96:3b:ba:d9:
e4:2f:cb:87:a1:aa:81:00:d1:c1:b5:f7:9a:a0:27:
5d:bc:be:6d:93:33:94:51:75:1f:1b:a7:5f:38:22:
8d:de:c9:f3:6a:18:e3:3d:26:b7:50:19:d5:c4:78:
43:a6:e0:f1:aa:50:9b:9f:e1:0e:72:d7:ab:56:44:
ed:62:f9:b2:18:58:6b:5e:e6:14:90:e7:31:f6:11:
1b:27:e5:45:44:52:91:85:66:47:30:60:80:c3:4f:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:2C:DE:AE:4F:36:B8:D0:8E:60:4E:8C:51:70:81:A9:BC:97:67
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:07:7a:40:bb:97:71:28:d2:26:27:dd:c7:6e:35:7d:85:28:
e9:9c:e1:6e:2c:df:8c:71:c6:6e:6d:3d:06:e7:b7:e6:e3:be:
d3:27:0c:da:29:f8:d3:3d:dd:e2:75:28:ec:68:a1:4d:6b:4d:
bb:b0:93:e2:88:00:0d:47:92:70:b5:8f:86:eb:58:ef:ac:a0:
15:90:76:e4:38:19:63:76:ca:4c:5a:15:24:eb:57:33:a9:c3:
dd:cd:f4:2e:5d:69:98:a1:fc:f0:1f:2f:b2:bf:d3:21:e5:29:
93:09:62:8b:0e:89:4a:9d:ef:aa:eb:ad:4a:c1:70:0f:09:e9:
88:91:32:8c:13:b7:b7:06:9c:34:fc:33:81:d0:15:b9:37:a7:
6f:98:df:cc:20:5e:de:c4:3b:94:3d:a1:73:1e:fb:62:71:68:
06:62:ef:25:7d:92:42:77:e0:de:f9:f2:ba:f3:e4:4a:c2:fa:
10:1f:7b:3e:99:9c:df:e3:00:35:50:d7:de:1f:5e:57:b0:24:
90:3c:9e:08:53:32:a7:07:8b:2a:70:d8:56:41:f0:7d:e5:9a:
6b:00:96:c3:26:76:85:7a:44:4b:fb:8b:7b:d6:7d:71:fc:f6:
7c:13:0f:d2:d9:16:d9:b4:39:3c:2e:a0:75:2d:d7:37:6c:e2:
41:8f:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:21:09 2025 by rpki-client