Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: wBq2/FzIpeTrKLB2AVi8kSoJbNWKE3rPNLo8h4ajc3E=
Subject key identifier: FB:7F:24:46:5D:0F:9F:1C:0C:06:C5:CB:DE:A7:35:E0:9D:95:19:10
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 01974666ECD24548688375B8BDC265CD0416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 18:00:39 +0000
Manifest this update: Fri 06 Jun 2025 18:00:39 +0000
Manifest next update: Sat 07 Jun 2025 18:00:39 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: ZvgamTnVmRcX7saYH5nk12sP+IPRX54+4SOQ+8f7bKw=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ec:d2:45:48:68:83:75:b8:bd:c2:65:cd:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Jun 6 18:00:39 2025 GMT
Not After : Jun 7 18:00:39 2025 GMT
Subject: CN=fb7f24465d0f9f1c0c06c5cbdea735e09d951910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:94:57:6d:79:6d:60:31:d7:d9:88:cc:c8:06:
b4:db:1e:38:da:22:2b:5e:d2:32:2e:07:de:ec:4a:
99:21:df:57:d0:d3:61:f3:17:b0:28:a0:f8:cc:78:
ca:86:97:71:3f:b9:17:df:34:aa:a3:2d:d0:ec:15:
92:73:a5:e1:87:3d:26:c1:13:6c:b7:81:a5:38:e4:
26:24:66:7c:84:53:4c:c6:57:53:b3:1f:b2:05:a0:
e9:eb:c0:1e:91:e9:ed:2f:ea:ae:57:49:28:4e:ab:
18:f6:9e:f0:c4:93:b9:3c:af:1c:ba:72:17:a0:96:
cc:c4:f2:ba:df:d3:d4:72:71:ca:17:e6:5b:1e:d1:
1a:14:35:11:3b:79:72:68:b9:a0:b7:18:ac:b8:6d:
ac:34:00:b5:9f:38:61:6c:0e:3c:36:d6:10:d9:c0:
e0:a2:65:6d:11:1a:16:40:6a:a2:7f:47:c4:e6:a3:
cf:9b:76:bc:e7:2c:00:c1:04:58:4f:22:2d:c2:a7:
10:0b:4f:75:81:bb:d0:e4:90:3b:ef:31:49:e5:ba:
e5:d0:31:c1:d1:ed:38:b8:53:61:0e:5e:88:f7:b2:
b0:2e:be:8a:f1:44:f9:7c:90:d6:6e:e9:a5:a0:a7:
49:89:42:60:7f:f8:a8:17:fa:26:fc:f0:9b:7a:fc:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:24:46:5D:0F:9F:1C:0C:06:C5:CB:DE:A7:35:E0:9D:95:19:10
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:33:df:7d:1f:49:06:bc:71:31:9f:3e:52:f5:0c:3a:25:d2:
e6:d7:ba:dd:ec:e1:91:6a:b6:f0:30:ab:28:7d:b9:a7:e5:71:
b1:f3:87:22:c1:fe:99:06:29:5f:9a:c0:4f:07:81:c3:0c:68:
19:c9:9b:15:03:90:e2:93:7a:86:61:e4:48:f0:f5:46:bc:c9:
21:8d:a0:9f:8f:ac:6d:59:d6:97:5d:24:a1:f3:64:d9:3c:94:
44:99:8a:2c:95:9a:ec:7d:fb:dc:ae:9b:15:39:08:f2:40:16:
aa:15:32:39:2a:95:21:06:36:b9:db:34:b1:78:8e:1c:bd:eb:
9a:d0:7e:cf:06:b6:ea:8e:64:3d:bf:b5:e2:54:26:86:a6:3d:
61:d4:c5:12:3d:59:3d:39:05:5d:51:ca:ae:29:62:56:e0:82:
e1:0c:c0:29:80:0a:5d:7f:97:00:fd:dc:c5:f5:34:99:5c:b1:
73:ea:7a:b0:1b:1d:59:9c:d8:42:75:a6:3f:cb:03:7c:56:d4:
6b:23:86:c8:e6:6d:e1:24:c7:b4:84:e4:78:48:e9:ac:1d:50:
f9:e8:00:37:74:90:d7:e3:e1:5a:56:63:45:37:39:af:2a:f7:
c1:7e:37:8d:50:d2:b1:84:b4:4e:76:58:fe:78:2a:da:df:1b:
ec:b3:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:36 2025 by rpki-client