Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: ozW2+wxvmM1/AGCjd4f+NcskbFtSv4o9wfdtGmmE0LU=
Subject key identifier: 40:4D:72:14:1C:C9:EA:41:90:37:EF:E7:2A:9F:AA:A5:01:B2:8C:E5
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 019747B1024129CC528EC67D6251962852A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 0FD9
Signing time: Sat 07 Jun 2025 00:01:12 +0000
Manifest this update: Sat 07 Jun 2025 00:01:12 +0000
Manifest next update: Sun 08 Jun 2025 00:01:12 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: YMRq8xgX08gYot5hf41o21eFi2qIFqZISl2L/mx7Hl0=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:02:41:29:cc:52:8e:c6:7d:62:51:96:28:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Jun 7 00:01:12 2025 GMT
Not After : Jun 8 00:01:12 2025 GMT
Subject: CN=404d72141cc9ea419037efe72a9faaa501b28ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:b3:65:a4:93:24:a1:de:c3:e7:32:50:4d:
0a:c8:93:3d:cf:73:5a:c6:bc:84:be:61:8d:11:88:
92:1e:24:39:0a:d4:c4:dd:5e:e7:f3:d8:34:7a:e5:
7b:78:6e:15:ef:dd:b3:9d:d2:1b:94:a2:61:3e:d1:
57:a1:89:6f:77:5c:ce:e0:9d:e3:44:74:c0:63:84:
47:bc:b4:bc:f9:ed:37:a7:21:73:7a:6b:64:b6:5d:
e1:96:ea:d4:68:37:ce:ac:ed:8d:6c:98:40:f6:d9:
66:c7:50:99:c0:f0:cb:37:58:ee:f6:65:66:5e:6a:
76:d9:f3:2b:d4:b3:4d:92:62:21:56:10:17:8c:e2:
95:20:94:58:20:f4:3f:99:38:dc:18:a2:50:44:0f:
31:98:b8:61:e8:84:0d:f3:9e:87:67:d0:d1:a4:ef:
b1:e3:18:f1:80:0b:bb:a9:f1:0b:ab:7a:7a:0b:46:
f0:77:32:c5:1e:0a:f0:83:e3:00:41:46:26:18:79:
bc:3e:c8:27:c8:ac:b5:e6:3b:89:b7:27:5b:fc:41:
09:68:4c:fe:45:c5:f6:c5:b1:6e:e3:4c:b7:c2:bd:
43:46:db:9d:25:51:eb:c9:f1:ed:bc:e3:b6:98:20:
5c:04:bd:f7:fa:8d:f0:ae:2b:17:ba:e1:61:d5:f9:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4D:72:14:1C:C9:EA:41:90:37:EF:E7:2A:9F:AA:A5:01:B2:8C:E5
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:f7:fa:67:d0:22:24:06:44:0c:b5:f5:86:1f:0f:a5:d6:
ee:53:ec:5c:e6:96:93:d6:ab:cb:61:e0:49:4c:85:a2:2d:7b:
3d:e3:3c:96:2a:02:d8:b6:c4:3d:65:c2:f6:d3:ec:9b:5b:7f:
e5:64:b1:eb:e6:1b:f8:18:64:41:5a:92:4c:c8:d0:16:87:a0:
0d:7a:d5:35:70:19:cc:12:e4:05:77:9a:7c:08:a4:b2:ad:20:
e2:29:05:ae:8c:22:56:fb:08:96:43:fe:5e:40:76:d8:ca:b4:
9e:1a:04:e3:8d:f4:e9:30:34:99:d5:e0:78:69:f4:7f:45:82:
b1:c5:ef:ec:a3:ef:c7:39:7a:1c:5f:51:03:b3:cc:b2:b0:f7:
45:41:28:50:23:d6:d7:80:9d:73:07:27:73:c8:20:4e:4f:fb:
7c:6e:13:ac:8e:fd:c2:08:df:1a:7b:1c:81:7c:cd:2e:ca:35:
29:a5:22:63:41:55:b6:9e:5e:35:a3:0f:ce:47:e2:2a:b0:de:
8f:8f:de:84:a6:06:ed:c0:7d:bf:a0:69:53:39:97:6e:08:56:
6c:85:40:44:4f:3c:6b:a7:ab:11:88:62:34:68:7c:ad:d4:e4:
65:03:19:a1:7d:a5:1b:89:19:fb:05:1d:e6:78:5b:9a:1d:6f:
8e:c9:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:30:29 2025 by rpki-client