Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: 6yIhtzgINONUE+NiaNGiXtJSrxErneSw9qWGW9A1oUY=
Subject key identifier: C4:2D:D1:98:A6:A1:FD:0E:EE:6F:DC:26:87:F8:2A:E4:20:E6:D4:A1
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 01975459CDF1EDF98A7FE320301CD2DA8BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 11:01:00 +0000
Manifest this update: Mon 09 Jun 2025 11:01:00 +0000
Manifest next update: Tue 10 Jun 2025 11:01:00 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: NVlHQzhhbBdr/QnYhZi4rvuSEQYIIPJcepv6TE3AU28=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:cd:f1:ed:f9:8a:7f:e3:20:30:1c:d2:da:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Jun 9 11:01:00 2025 GMT
Not After : Jun 10 11:01:00 2025 GMT
Subject: CN=c42dd198a6a1fd0eee6fdc2687f82ae420e6d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:06:38:49:b0:0f:10:21:c5:7b:1c:94:ac:
23:0e:15:2b:65:43:3e:9f:19:c3:dd:eb:78:bb:59:
67:1a:07:54:6e:b3:75:a2:e4:67:d6:e6:cc:46:f4:
19:ea:97:83:4b:24:3f:93:db:26:00:0d:87:f8:5a:
56:84:fa:74:2c:33:02:95:67:b5:e4:bf:af:f6:fb:
1b:56:ca:6a:33:d5:eb:b6:2b:2e:16:a4:6e:2d:47:
3b:aa:06:92:69:66:79:7b:11:34:32:f3:68:a5:5d:
02:7f:2e:de:30:95:fa:f0:3b:ff:5a:d1:96:7b:92:
02:81:cc:27:c7:c1:af:a5:23:da:4a:0a:bb:3b:3c:
b6:6f:19:2f:b7:a8:c0:e1:c4:75:62:c5:47:ad:59:
fa:7b:5b:7c:5f:82:12:cf:d8:f4:bc:45:db:38:4f:
5e:c6:67:89:bb:c0:84:52:33:1b:24:14:38:7a:44:
b3:01:18:64:99:f9:0d:e1:08:2b:b0:ed:8d:d0:42:
be:fd:5e:06:80:22:99:2b:1b:b4:5e:da:0a:84:38:
b6:c8:6b:c4:82:01:f4:b9:97:6e:66:e6:b9:a4:2a:
18:ce:20:4e:dc:d6:23:97:1f:67:16:2b:83:d5:f0:
eb:99:78:96:ab:04:20:86:87:ea:59:fb:eb:52:06:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:D1:98:A6:A1:FD:0E:EE:6F:DC:26:87:F8:2A:E4:20:E6:D4:A1
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:9f:7b:fa:6f:37:60:4e:1b:04:29:8c:8d:0a:47:d2:f0:
6b:2a:1b:99:ea:3e:c2:71:9a:32:51:49:f0:8d:07:5f:a4:56:
d4:bd:8b:29:63:3f:4e:e4:37:b7:e5:00:96:1c:08:96:8e:40:
78:b8:52:57:16:bf:23:09:dd:75:ed:a8:04:28:48:8d:e7:bc:
2e:3d:4a:9f:d4:a4:87:76:e9:94:1d:0a:33:b8:5f:4a:18:b9:
29:e9:8f:c5:0e:ab:94:57:26:49:1b:21:b1:67:f2:f8:2d:94:
da:5c:18:01:43:13:59:9b:f4:e8:48:1e:3f:8d:44:68:3f:97:
a7:8c:51:3f:c2:52:ed:6f:e5:9c:1f:ce:74:69:5b:db:1d:e2:
73:b6:3c:d1:a9:8f:87:79:e7:1c:52:95:52:66:da:86:b9:7b:
d6:e8:28:df:48:45:2b:34:d2:8e:e8:f0:e1:5e:d5:ed:1d:b6:
b3:f1:be:05:9d:5e:78:91:c9:44:27:7b:28:19:70:82:f6:eb:
13:87:44:10:21:13:ee:be:8c:76:ad:6d:f5:2b:88:f2:e4:10:
dd:5f:3e:d3:ed:a7:3a:0c:47:fd:c3:82:82:76:4a:06:34:dd:
27:7d:bb:99:da:5e:da:8e:1e:25:e2:46:d1:14:66:14:22:bb:
e0:04:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:43:36 2025 by rpki-client