Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
File: _2doQ1vYHTIqUcZiBRA9Rc775fA.mft (raw, json)
Hash identifier: QG/gckIRxKNja/QpUg+LCjo1D3A4zTZv++4voeCW9Ug=
Subject key identifier: 50:F6:8F:18:CE:15:06:E9:5A:C3:E4:82:BC:98:FA:0B:72:55:14:3B
Authority key identifier: FF:67:68:43:5B:D8:1D:32:2A:51:C6:62:05:10:3D:45:CE:FB:E5:F0
Certificate issuer: /CN=ff6768435bd81d322a51c66205103d45cefbe5f0
Certificate serial: 01974666C8ABDBE0A59134D7808E657F9C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
Manifest number: 2F
Signing time: Fri 06 Jun 2025 18:00:30 +0000
Manifest this update: Fri 06 Jun 2025 18:00:30 +0000
Manifest next update: Sat 07 Jun 2025 18:00:30 +0000
Files and hashes: 1: _2doQ1vYHTIqUcZiBRA9Rc775fA.crl (hash: WWJcV3hL4E+9yrQi4Bd1L2ubs5lPPCNJz7GeHzn/tM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:c8:ab:db:e0:a5:91:34:d7:80:8e:65:7f:9c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6768435bd81d322a51c66205103d45cefbe5f0
Validity
Not Before: Jun 6 18:00:30 2025 GMT
Not After : Jun 7 18:00:30 2025 GMT
Subject: CN=50f68f18ce1506e95ac3e482bc98fa0b7255143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:3b:73:60:a1:07:a6:ff:3d:ae:53:23:a0:
7c:dc:7b:83:e4:e5:a5:bd:a3:e1:f8:d9:78:52:7d:
73:05:4e:f9:38:b1:e1:46:d2:31:b0:33:a3:a8:d3:
98:c7:a2:33:ac:7b:4b:22:d2:3a:31:8f:54:ac:a7:
dc:42:a3:56:57:d9:e0:94:2c:24:37:d7:31:32:e8:
f3:de:92:8d:d9:2c:f9:bb:00:a3:60:5f:5a:70:39:
5d:51:38:c6:ec:31:88:b4:b8:0e:5a:5e:4c:8d:bc:
68:5e:3f:a7:a0:63:be:cb:7a:a2:26:f8:05:2c:a1:
49:5e:93:38:c4:b2:e1:0b:84:a2:2b:b5:e4:a0:e5:
29:f6:4e:a7:f0:1f:62:6c:6a:d5:a7:2e:d1:b8:95:
7e:31:45:e9:7a:5a:e1:13:0b:68:90:27:8a:26:46:
91:c7:ae:21:f2:81:40:80:8d:1f:a2:ce:71:39:69:
d7:d3:36:d3:ec:16:19:07:f5:b0:60:23:5f:6b:a2:
a3:9e:22:3c:00:9c:92:af:9e:c8:7c:70:0c:12:11:
54:6f:67:d0:e3:0b:6f:94:53:92:38:67:ce:aa:6f:
ae:30:0c:61:d4:cc:8c:d7:58:49:fe:12:c3:dc:f3:
48:02:e5:12:45:cf:c0:f4:d2:5d:59:61:6d:0c:6b:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:8F:18:CE:15:06:E9:5A:C3:E4:82:BC:98:FA:0B:72:55:14:3B
X509v3 Authority Key Identifier:
keyid:FF:67:68:43:5B:D8:1D:32:2A:51:C6:62:05:10:3D:45:CE:FB:E5:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:ec:14:51:bc:05:74:44:45:b0:2a:fc:3d:60:53:39:ea:
96:c4:9d:35:95:7c:69:43:c8:6d:bb:a1:ae:3e:3e:78:17:aa:
f6:a3:1b:eb:aa:8a:cf:75:2f:ea:f5:02:64:98:ea:15:1d:ee:
66:0d:ec:e8:33:46:85:35:7f:a4:b7:52:7d:53:8a:ca:81:35:
1f:0d:6c:4a:01:60:f2:b8:c4:ab:57:50:54:ec:0f:e6:1a:e1:
f1:51:28:da:9a:97:0b:f7:c1:4a:ae:e2:8b:5f:80:bb:28:09:
7c:ad:d1:ad:a7:09:7d:60:4a:09:c5:10:f3:d3:0d:b8:81:65:
a8:3b:a2:22:d9:6c:f3:17:d3:ad:24:71:2d:5f:3a:d2:63:59:
b7:1c:4f:21:3d:39:2e:10:cb:98:9f:47:4b:fa:78:5d:94:d5:
37:93:9f:8c:89:aa:8a:a8:da:77:30:4f:90:6a:fc:13:61:a8:
59:90:c2:c3:0c:d5:db:77:7c:41:fc:ae:a5:19:70:f0:d9:aa:
fe:5d:03:25:0e:65:10:d9:86:03:34:12:a8:02:31:76:c0:b6:
0c:c9:1a:9c:db:e1:9e:a4:36:e0:7d:62:fd:b1:2e:36:15:df:
1e:c1:41:74:3b:cc:3c:f8:51:2d:e4:a3:49:35:b7:10:0c:e0:
48:16:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:39 2025 by rpki-client