Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: 5A8Xe0tFUnoLxfkzZXhjkBvhQ9nE9ZmGLD/649SYGew=
Subject key identifier: DD:DD:8F:03:1B:53:57:7D:F2:1E:FF:0F:C1:3A:A2:08:EA:90:4C:5C
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01974D450AA53A3667549B42E39A44B839F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 02:00:59 +0000
Manifest this update: Sun 08 Jun 2025 02:00:59 +0000
Manifest next update: Mon 09 Jun 2025 02:00:59 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: gBX6oE+99K1J0y3VOGkZWeMWiAPkcRbC8ie0tGiEiww=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:0a:a5:3a:36:67:54:9b:42:e3:9a:44:b8:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jun 8 02:00:59 2025 GMT
Not After : Jun 9 02:00:59 2025 GMT
Subject: CN=dddd8f031b53577df21eff0fc13aa208ea904c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:fc:a9:19:d8:11:c6:21:a8:f6:08:d6:69:
6c:d2:d0:39:8a:08:cb:55:f1:38:dc:df:13:3e:6a:
29:12:d4:42:72:a8:2e:74:f3:fe:df:6b:6c:37:38:
e3:df:ad:90:29:8a:fd:c4:10:8a:f6:17:52:c7:d0:
e0:61:9b:55:af:b1:a4:6a:64:80:a4:95:68:36:2b:
28:50:fd:9e:7b:80:39:f0:98:75:51:f5:fd:86:33:
a6:e2:99:2e:5d:0e:66:aa:66:7c:c5:67:25:54:4e:
d9:ce:20:4e:78:ec:89:29:88:c2:d5:f1:77:70:fe:
4a:b3:81:ee:4a:bc:23:f4:f4:ad:9f:1b:54:7f:a5:
4e:2a:86:45:e4:cd:6c:89:f7:d2:02:24:b6:2c:60:
91:d7:a6:fc:98:ed:07:51:1a:da:8a:bb:c4:4a:69:
e3:b0:f0:44:90:91:1e:39:9a:19:00:d0:87:6d:c0:
c0:e2:82:9d:ad:30:18:27:85:2d:db:82:5c:e6:29:
02:1b:32:18:3d:47:02:12:28:55:6a:48:93:4e:96:
2e:7e:c4:ed:e6:84:2d:2c:0b:b8:a5:cc:0c:1f:0e:
eb:af:88:cb:ab:11:c2:d5:c9:2c:50:26:41:ef:f4:
27:22:a7:e2:3c:38:dd:3f:58:4c:dc:10:aa:a9:27:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:8F:03:1B:53:57:7D:F2:1E:FF:0F:C1:3A:A2:08:EA:90:4C:5C
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:68:ef:98:42:93:91:ac:70:c0:3d:cd:fb:16:88:18:37:e0:
0d:ec:12:b7:48:7f:12:69:60:cf:e5:6f:f1:2e:29:1a:49:09:
8a:79:0e:9d:34:13:1f:02:65:bd:35:40:4d:4a:d6:86:29:b0:
b1:df:ae:a5:b5:04:d2:ea:93:ac:99:96:46:7d:a7:79:c6:30:
6f:46:da:53:d9:81:1a:7e:a2:1c:5d:26:ee:d5:ee:03:3b:37:
36:ac:65:ad:4e:97:a8:7f:2f:fa:a8:c6:d4:03:69:b6:61:4d:
3f:ac:e2:91:bd:8b:8f:6c:29:97:ba:75:3e:3c:24:b3:c6:14:
36:09:48:b1:d5:43:db:e5:77:14:f2:7e:13:37:a1:c0:16:65:
4a:74:40:6f:54:ce:52:0f:93:13:21:8f:b4:77:79:54:90:19:
32:af:6e:71:0d:0e:5f:93:d4:e7:5c:6a:0e:f9:d5:22:ab:c1:
95:d1:4f:a2:36:34:ba:87:8e:f3:ac:2c:c5:1a:85:4a:d4:06:
c3:0c:e5:98:c3:fb:35:50:c7:49:0c:62:68:d1:93:bb:56:2c:
f6:26:d5:a6:45:63:ac:ab:10:44:31:e2:ba:ed:f2:22:74:f7:
5e:6b:0d:89:f9:b3:28:f9:55:c1:ec:ca:00:57:9b:2c:b1:b0:
a3:84:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:03 2025 by rpki-client