Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: Cz5AK8eodUvV5Vz5H0E+ANmQHNvDEOirNUwAyF6WzCg=
Subject key identifier: 47:77:EB:48:56:09:52:68:67:7E:62:F0:38:4C:F3:A3:0E:55:81:09
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019750B439290C9B71C76A0E70C253B56041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 06DF
Signing time: Sun 08 Jun 2025 18:01:17 +0000
Manifest this update: Sun 08 Jun 2025 18:01:17 +0000
Manifest next update: Mon 09 Jun 2025 18:01:17 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: ABNEbj2F/dNZv441N/zfWwXTRJnxeXUH7iyy/FHUARM=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:39:29:0c:9b:71:c7:6a:0e:70:c2:53:b5:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jun 8 18:01:17 2025 GMT
Not After : Jun 9 18:01:17 2025 GMT
Subject: CN=4777eb4856095268677e62f0384cf3a30e558109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:0f:97:10:9a:a1:3f:e1:0e:4b:94:0f:fe:
54:5f:5f:6b:4d:b5:c0:ba:ba:8c:82:92:07:7d:6c:
c9:18:70:29:a7:c2:c7:68:b4:77:7d:fa:f6:e5:a3:
0a:eb:93:77:89:ee:34:24:91:51:8f:61:7f:d9:8a:
29:d2:30:50:7c:27:95:cc:73:dd:62:33:87:52:0a:
58:4e:3f:a9:dc:2a:91:28:0d:4b:1f:91:e8:c8:8a:
b1:c2:3a:a5:cb:a7:46:66:15:5a:b8:c2:f0:c9:f2:
c8:e1:20:0a:61:0a:80:55:29:4b:d1:e0:11:2a:bd:
53:3f:63:33:fe:8d:58:be:35:bc:84:41:d0:88:d3:
84:43:cb:0b:0c:dc:cc:93:1f:da:36:8c:80:28:fe:
b0:48:29:b7:3e:4b:28:99:80:cb:80:e3:47:21:de:
90:4f:8d:88:a5:86:b7:37:c9:db:56:c2:b7:d4:a5:
04:fc:42:8a:53:32:ef:2a:c1:d6:68:e2:e3:14:00:
cd:ce:ae:ce:88:08:42:8e:3f:da:50:a7:f8:d1:c8:
e3:27:d8:59:60:bf:67:cf:bf:8d:22:e8:77:14:a5:
04:9d:f8:0a:7f:be:e0:91:ac:54:a6:a8:0b:bb:10:
6d:68:32:ef:fd:8e:7f:0a:06:8b:41:90:b5:02:60:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:EB:48:56:09:52:68:67:7E:62:F0:38:4C:F3:A3:0E:55:81:09
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0d:04:e2:4a:bb:a5:e4:1c:6f:71:a8:5f:22:60:28:e2:b3:
57:62:73:bd:95:23:ec:97:3e:6e:7b:b1:7d:1a:52:37:f6:ee:
48:71:d7:16:43:86:a2:5b:b3:41:89:33:a9:41:86:72:74:c4:
6e:f7:4a:56:81:6a:85:4e:f1:42:e8:a6:ae:e7:94:37:a2:09:
ef:f6:4b:95:84:22:00:50:12:20:80:52:60:36:a7:d1:6c:73:
88:04:b6:05:43:d5:1c:ff:27:bf:3c:f6:f6:3f:28:bb:c9:36:
f9:e1:1e:07:2a:09:d4:8f:5a:c9:12:08:64:e7:b5:3e:3a:29:
df:dd:18:6a:7b:7a:dd:1d:21:34:9b:14:cb:ab:a2:d4:6b:a3:
73:74:90:1b:89:b1:15:0a:7f:1f:2a:3e:6b:63:19:f5:a3:86:
ea:13:75:f4:43:58:cf:79:46:6b:23:9d:04:0c:c0:8f:2d:23:
62:e5:78:2d:34:49:11:df:9a:88:22:36:51:ad:89:1c:3f:de:
c1:36:f3:fd:70:da:2e:9e:01:c2:9a:59:e1:03:1a:0e:77:8e:
dc:8c:3b:e2:7f:aa:92:03:76:27:81:43:6c:51:7b:43:f2:a6:
f8:f9:bc:fb:01:ab:17:f7:8c:cc:8b:fb:22:41:4c:ae:62:02:
b6:7f:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:42 2025 by rpki-client