Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: uAfZeW8Q1CpFRF5AbAirWWvlG2D24PsnVzBKKBFJAY0=
Subject key identifier: 95:0C:2B:AE:4B:CD:DE:F8:BD:E0:78:F5:84:47:45:41:FA:63:F0:18
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019747429CED57A7C8DD40BC412929AF3C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 1057
Signing time: Fri 06 Jun 2025 22:00:37 +0000
Manifest this update: Fri 06 Jun 2025 22:00:37 +0000
Manifest next update: Sat 07 Jun 2025 22:00:37 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: rppextn7ZS6FQsj2oBzxtNF0svl0OhZNFbf3yy4nhAE=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:9c:ed:57:a7:c8:dd:40:bc:41:29:29:af:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jun 6 22:00:37 2025 GMT
Not After : Jun 7 22:00:37 2025 GMT
Subject: CN=950c2bae4bcddef8bde078f584474541fa63f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:07:4b:69:9f:49:d1:5c:67:73:44:4a:55:
e9:93:05:49:f3:45:e4:de:79:b4:d7:f3:24:19:06:
41:43:a0:68:30:eb:87:5b:91:58:25:3b:be:26:9c:
94:cb:5b:7c:bb:7f:25:c1:da:5b:a8:6b:02:ca:36:
d0:d1:cb:c5:9c:88:07:ea:7a:11:52:61:da:89:ad:
df:43:1f:9c:34:7d:0b:e8:e5:b3:ef:cd:d8:9e:13:
a6:03:ff:20:60:03:ee:51:5d:d8:7e:1d:85:de:89:
a1:ed:b0:88:1e:a7:60:74:6e:1c:ee:f8:3e:90:b9:
ec:8c:19:ab:0f:90:73:51:5c:db:2e:a9:5d:14:ae:
e9:56:8e:eb:5c:e1:e4:28:ce:e5:dc:63:49:b2:86:
c8:ff:55:d0:f0:4e:8c:db:db:e8:d7:94:c2:6d:3e:
84:90:74:00:1f:0c:08:71:f6:c3:3d:c1:ce:4e:3f:
08:ce:9f:61:6c:d5:8e:d1:de:6b:4f:4e:e2:c5:61:
9b:e9:16:36:a5:51:64:c4:36:a7:48:5c:ad:3d:1d:
95:cc:be:4f:69:e3:fe:47:3c:1e:55:bd:f3:b9:1a:
2e:e4:10:ad:4c:bb:60:57:f9:93:51:b8:08:34:ac:
af:83:c8:8a:57:b3:ca:b6:0b:c3:51:b0:dd:72:cb:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:2B:AE:4B:CD:DE:F8:BD:E0:78:F5:84:47:45:41:FA:63:F0:18
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:57:e0:88:04:fc:8c:1c:01:6a:c4:bf:93:35:35:54:71:da:
66:f0:63:4d:f9:24:c6:75:8f:7f:70:dd:22:3f:cf:64:bc:4b:
a5:12:6f:9d:51:0f:b6:cd:d1:a2:2a:b3:d8:7f:4c:41:1a:2d:
ef:26:8a:38:4e:97:ce:8d:c0:da:5b:fd:80:ce:ae:b0:a6:47:
d2:95:78:b1:6e:ab:5d:7b:c6:22:1c:c4:e1:fa:8a:2f:66:a0:
fa:2c:e4:b3:51:3c:5e:4b:55:cf:4d:c8:99:a3:87:ad:de:21:
88:06:cc:45:af:60:07:49:78:b2:e2:cc:16:ae:e5:c8:42:9f:
ea:81:a1:fd:6e:be:e5:b2:be:f5:0e:73:8c:f6:5f:52:30:e8:
37:6f:aa:97:c1:b4:40:a9:76:30:3e:c0:8c:11:06:33:ad:f9:
ec:da:9e:f8:ef:a4:15:7d:1e:bd:70:56:4d:89:c6:8a:31:0c:
45:a2:78:a2:3c:d4:ed:77:6e:4f:73:3d:46:59:a3:52:8e:75:
58:07:fc:2d:e4:2e:00:ff:50:92:cf:f7:46:54:46:1c:ed:63:
a0:51:a7:e3:33:3e:65:23:6a:e2:3c:b3:8b:c5:75:48:57:bb:
ea:d1:9a:1f:a5:60:0c:90:5f:94:36:11:a5:07:00:77:43:19:
24:80:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:24 2025 by rpki-client