Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: hF3kTfjw2HLiqGZycef7ZwSZJXxdh8hxcyHKe0u98yw=
Subject key identifier: 90:DA:BA:DA:46:40:BD:56:B9:C4:A5:D7:68:42:46:37:BE:A7:1C:BB
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019751C6496F2C761FFE3C9A390BA5D6FAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 23:00:38 +0000
Manifest this update: Sun 08 Jun 2025 23:00:38 +0000
Manifest next update: Mon 09 Jun 2025 23:00:38 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: 4/OVRSdsB88RKXxT3VA3DiXNLsEAwct/WSlPBxGFbuc=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:49:6f:2c:76:1f:fe:3c:9a:39:0b:a5:d6:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jun 8 23:00:38 2025 GMT
Not After : Jun 9 23:00:38 2025 GMT
Subject: CN=90dabada4640bd56b9c4a5d768424637bea71cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:48:58:18:20:d9:bf:2d:8c:78:f9:49:03:
10:0a:7c:94:2b:5e:7f:f5:97:3f:1a:52:cc:1a:71:
f5:56:d0:6b:fc:33:45:3d:92:5c:61:cb:42:2b:04:
d2:cd:46:bf:08:cc:a7:b4:53:c4:68:9f:d2:8d:9b:
81:db:87:75:51:41:88:c0:92:cf:8a:e7:8d:1c:e4:
aa:c9:f2:4c:bf:90:b3:f8:8e:03:29:0e:6b:35:a5:
f2:90:9a:96:ff:81:52:e9:31:47:bf:34:43:cc:00:
4b:29:6f:a0:23:6c:b3:82:c6:73:fb:10:8c:bd:31:
81:cd:78:8a:ff:74:df:e6:1a:be:26:db:13:46:02:
e7:9b:ac:9e:fd:09:95:b1:b2:32:2b:03:39:3f:52:
cd:36:cb:33:7c:35:90:58:2f:0e:7d:da:a8:9e:45:
07:83:39:8e:96:df:27:9c:f2:d0:d3:12:03:91:fd:
11:c2:e8:ef:20:88:e8:e7:70:9c:5b:b3:e6:48:b5:
44:25:36:6e:72:4e:67:af:9d:ba:fd:2e:e7:20:61:
ac:33:1c:d8:10:54:be:ad:b4:3f:2b:9c:c1:91:af:
41:b2:2c:04:7e:19:dc:97:08:2d:6a:87:d2:1c:0a:
72:fe:59:6b:9b:49:2d:a5:fa:c9:e9:a7:3a:d2:89:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:BA:DA:46:40:BD:56:B9:C4:A5:D7:68:42:46:37:BE:A7:1C:BB
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:a3:93:9f:ab:b2:98:b8:61:27:b7:42:51:ab:c4:fa:41:
95:54:3b:98:54:90:27:49:25:e2:d6:0a:db:0a:95:31:76:a5:
94:5d:79:4d:36:87:42:ff:4a:0a:11:81:01:86:26:2f:76:69:
29:9a:92:ae:35:8b:3c:1b:73:57:4e:65:70:45:51:56:03:26:
b3:57:ac:fc:87:76:83:7e:33:61:e2:83:7f:9e:f9:02:89:97:
69:34:83:b9:db:b5:fc:70:40:28:74:52:34:12:da:4d:73:47:
ae:c8:de:02:e6:cd:6a:d1:5e:9f:fc:70:40:e8:d8:6f:e9:a7:
4a:5a:70:60:96:7c:26:9a:74:54:dd:73:3a:f0:ab:c7:5b:f0:
71:13:1f:d5:32:fe:e4:19:c7:0a:c1:b1:a1:c7:55:d5:a2:29:
40:53:b0:6f:66:97:2e:3f:b1:0b:05:68:94:78:0d:08:92:de:
65:62:7d:ad:c9:1b:b9:30:49:64:2a:38:27:7a:82:09:14:0f:
8d:72:d2:46:c8:16:45:d9:b0:75:4f:24:12:ad:38:35:c3:57:
6d:51:40:3d:ae:59:16:fd:a8:36:9f:5f:df:80:2a:3c:e9:a1:
aa:07:4f:04:4b:b5:94:74:d6:0b:1c:41:2f:64:37:ef:0c:2a:
a0:97:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:39 2025 by rpki-client