Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: mjapPqEriKrYTOG+61gT8GmGknpmHWJeyBBW/IP9ip0=
Subject key identifier: 51:3E:74:50:8F:D4:9B:BC:1E:C7:7C:69:CA:E9:43:E3:B0:F5:BB:42
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0197C26DE20093ED297254E288965FF65A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0B94
Signing time: Mon 30 Jun 2025 20:01:10 +0000
Manifest this update: Mon 30 Jun 2025 20:01:10 +0000
Manifest next update: Tue 01 Jul 2025 20:01:10 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: FJ8vA83QgaT0Su22CYPxDwtiMomUtJ5daaOmV8Kacvg=)
2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=)
3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:e2:00:93:ed:29:72:54:e2:88:96:5f:f6:5a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Jun 30 20:01:10 2025 GMT
Not After : Jul 1 20:01:10 2025 GMT
Subject: CN=513e74508fd49bbc1ec77c69cae943e3b0f5bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:fe:df:bd:fd:d0:73:84:7c:98:45:3d:fb:
a0:6a:80:e8:69:c7:71:47:49:c9:32:0e:54:61:70:
d2:cc:f9:19:2a:be:7d:1c:48:db:17:7f:15:4a:38:
19:b2:d3:bf:f5:30:5f:69:43:37:f6:65:15:75:2b:
f4:66:15:46:d7:d8:ea:34:40:60:ad:f3:75:b6:bc:
56:a3:51:98:81:c3:11:74:b6:0a:16:c1:81:db:c8:
64:4b:4c:78:1d:51:8b:d6:96:f2:b9:80:a0:6d:8d:
8b:40:be:cf:78:b4:db:49:79:f2:ce:92:42:28:97:
f2:12:0e:27:ce:be:03:61:29:01:c5:44:d4:73:7f:
1c:b8:ce:b0:f9:a7:ed:f4:7f:fa:4f:f5:09:f9:9b:
fd:a0:72:6d:2f:bc:70:16:dc:be:7f:3a:7b:9e:41:
4a:e0:a8:33:84:7b:a3:69:ff:ca:bf:d6:7f:66:26:
c4:cb:14:88:a1:f2:b8:75:f3:2d:71:b7:81:18:fb:
f2:8e:ab:d3:a3:0e:8c:d8:20:62:32:d2:0d:00:ea:
8d:62:89:d8:4c:72:7c:42:ac:1f:10:4e:ef:47:83:
28:9d:c7:9d:cf:47:2c:3e:90:0a:77:08:c7:79:28:
2d:9e:bb:38:fc:46:af:91:21:1d:c9:b4:dc:b2:be:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:74:50:8F:D4:9B:BC:1E:C7:7C:69:CA:E9:43:E3:B0:F5:BB:42
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c9:1e:d2:a8:8f:e9:90:d3:cf:12:b7:57:ad:6d:1a:28:37:
89:6f:f5:5b:8d:ad:eb:db:5d:97:d6:08:24:c6:12:80:89:70:
0f:26:7c:5c:8d:66:b5:11:34:aa:6b:ac:9a:2d:07:1e:da:dd:
36:f9:a9:e8:7a:40:e3:be:8a:2e:39:52:7b:c5:e7:e4:bc:50:
b5:f5:86:91:1e:6e:16:8d:8c:86:ea:e0:2a:58:31:14:b2:52:
3d:8c:3c:7c:b6:13:f6:27:24:0a:fe:d5:f7:1b:ae:a6:19:f9:
8d:53:3b:e6:19:5c:f6:b9:5e:be:98:4f:da:ab:78:b0:ce:9f:
4d:32:2e:69:57:f7:e7:4b:6d:dc:a2:df:67:0b:f2:34:64:2a:
47:7b:c9:f4:c7:f4:36:54:64:69:d2:67:30:59:ee:10:60:f9:
6d:00:f0:80:fe:7d:29:81:1c:7a:ea:34:4c:23:75:b3:aa:16:
a1:24:e0:b3:55:6d:c5:ef:71:85:4a:e1:2e:bd:9e:e6:30:cd:
9e:61:48:e2:cd:12:0a:d1:f8:c7:c6:9d:44:db:77:93:f2:06:
5a:da:ee:f6:3b:c0:0a:fc:43:c8:37:e6:c6:12:75:65:67:f8:
7c:33:05:1d:b2:d3:b2:ff:1d:b5:aa:1c:28:73:39:49:31:a9:
0c:64:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:19:20 2025 by rpki-client