Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: PmwZFJDaqmrGQjfsqoByQ7qhXcy7xXvsASNdFSTi8Wo=
Subject key identifier: 04:DA:6D:AB:75:BC:E3:5F:BE:8E:EF:DC:CD:AB:D3:52:B1:0F:0F:A1
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01974DB2B0664887032C27705F03D1755819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 104A
Signing time: Sun 08 Jun 2025 04:00:45 +0000
Manifest this update: Sun 08 Jun 2025 04:00:45 +0000
Manifest next update: Mon 09 Jun 2025 04:00:45 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: hSZ9O4hv1Cy7d/HKcMaZxDyZqWOobmifOn/RIpiEC9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:b0:66:48:87:03:2c:27:70:5f:03:d1:75:58:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Jun 8 04:00:45 2025 GMT
Not After : Jun 9 04:00:45 2025 GMT
Subject: CN=04da6dab75bce35fbe8eefdccdabd352b10f0fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:47:04:0e:e9:c7:d8:ee:bc:1f:08:c9:6b:
6b:2b:19:f3:fc:49:a9:a1:05:96:8f:c3:5b:33:5b:
66:91:99:fd:c0:d6:25:bb:c1:04:61:d2:af:1d:ed:
b5:75:25:1f:ed:b6:29:f2:b5:e0:81:2e:73:cf:52:
be:b0:a1:36:f8:b6:36:7d:25:23:6d:71:6c:5d:9f:
e6:f6:49:4d:4d:97:f9:40:85:42:46:ba:69:65:39:
19:f1:0e:81:55:b5:11:ce:09:cd:5e:ea:a0:db:b8:
2f:67:be:9b:ac:77:90:89:b3:a2:9f:88:26:14:3d:
cd:c4:d4:8e:3d:c5:05:a1:10:af:11:9c:a8:2f:45:
5b:86:45:63:90:35:b1:b3:30:4a:02:e6:9b:9b:f0:
e9:40:f2:29:0d:a2:91:ee:b4:4c:a0:9b:d8:42:4e:
57:b7:8f:7b:3e:d2:a2:df:00:bb:eb:4a:4d:5a:e0:
2b:68:f3:43:23:00:fb:0e:06:f0:92:f4:63:b1:f8:
38:a4:64:9d:7e:1d:1c:5b:d6:cc:53:38:52:ef:94:
7f:7a:a0:da:2a:b2:e2:a7:09:94:29:0c:b7:83:fe:
43:dd:1b:a8:5e:f0:e1:2d:ad:94:ea:2b:41:f4:92:
87:30:35:8e:c9:3c:c5:28:89:b8:d8:b2:6d:e8:ba:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DA:6D:AB:75:BC:E3:5F:BE:8E:EF:DC:CD:AB:D3:52:B1:0F:0F:A1
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:66:e8:91:5b:51:ef:48:89:6f:8e:92:81:96:aa:d5:00:
65:c9:94:c3:bc:36:28:98:00:1f:12:2c:91:2e:c5:d4:cb:87:
8a:9c:56:d3:59:22:71:f7:6c:87:5e:2d:84:a5:8f:a0:01:2d:
91:8d:7f:49:2f:56:21:a1:9c:1b:17:99:b4:d0:12:8d:4b:b8:
33:d9:c2:1b:3a:10:2c:59:72:6d:9b:81:47:99:55:6e:11:0b:
5b:75:37:ad:ec:7d:0f:97:0b:bd:90:a5:6c:06:82:68:62:b2:
29:c8:10:a5:a8:49:87:8b:4e:2c:3b:07:9d:9f:ae:11:af:83:
82:cc:47:61:89:76:13:8a:5b:01:06:86:ce:24:8d:20:5d:2e:
63:39:dc:d8:08:e4:5a:19:1d:97:6b:b1:d0:3d:01:3f:1b:c1:
86:11:f3:0a:a5:ac:ab:18:5d:80:a6:36:7d:46:21:24:fc:f1:
12:e9:33:6d:03:c3:55:60:a1:fc:95:5e:59:6a:95:8d:05:eb:
ca:86:01:c2:7b:6f:fd:dd:71:35:9c:14:18:f8:a5:22:d0:d5:
d2:d6:a3:2b:16:4f:e1:25:e8:ef:95:71:78:56:6f:fa:d5:e2:
b7:b2:3a:68:6b:54:ad:74:94:c1:63:87:a9:df:4c:ad:aa:43:
0f:8a:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:05 2025 by rpki-client