Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: FEgd3aepmncWmGvSP2x+sgkGx+mv5deEWqMzbBJNrmo=
Subject key identifier: D8:57:EC:99:80:70:05:8D:65:59:85:73:77:49:8E:26:43:8A:BB:A8
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0197481E4855D8F67373417E38653E5D2424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0AB9
Signing time: Sat 07 Jun 2025 02:00:33 +0000
Manifest this update: Sat 07 Jun 2025 02:00:33 +0000
Manifest next update: Sun 08 Jun 2025 02:00:33 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: uLbfXkYdDCzkkbW7Zy4eLHwna0LvgfwzlA6OEjoVpxk=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:48:55:d8:f6:73:73:41:7e:38:65:3e:5d:24:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Jun 7 02:00:33 2025 GMT
Not After : Jun 8 02:00:33 2025 GMT
Subject: CN=d857ec998070058d6559857377498e26438abba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:63:42:7d:79:26:d9:06:5a:36:d4:aa:8b:
08:f1:a4:a0:a7:65:86:44:89:a9:e1:88:73:a3:4b:
dd:31:46:a6:a8:15:8f:a0:85:65:83:ff:9f:2f:e0:
82:22:89:d1:e9:50:ee:da:39:42:fb:2d:44:7c:0a:
ac:a3:79:11:52:62:d4:43:f0:c7:0d:c9:a3:e9:b3:
67:b6:fe:c5:50:31:7f:b5:70:58:4b:b0:e9:e0:4a:
a8:bd:30:e7:8d:8e:c8:bd:f3:97:7f:37:62:4a:c6:
84:8d:86:f3:f3:eb:f9:5b:59:f5:a3:cb:ac:7e:9c:
28:f8:be:e6:0c:ce:d3:99:e4:14:c9:a9:73:12:88:
54:3f:d1:26:0d:9e:a0:c8:ac:9a:cd:cf:2d:a3:1c:
5d:52:61:72:48:42:01:62:8a:11:32:38:38:94:32:
7b:8a:1e:f3:0f:9b:5c:c1:fc:2f:24:4e:14:d1:87:
80:59:1e:1a:ae:4e:57:be:d0:10:5f:ff:a8:42:47:
a1:f8:a2:57:71:b6:e0:fc:a6:2d:d0:47:03:73:18:
1a:6a:02:f8:b8:52:c3:17:a1:52:84:57:ee:40:5f:
cc:dd:62:89:05:97:2c:d5:51:ba:ea:ad:0c:cd:c1:
36:bd:d1:af:c4:70:f7:d7:c1:81:02:e2:3d:39:d9:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:EC:99:80:70:05:8D:65:59:85:73:77:49:8E:26:43:8A:BB:A8
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:05:99:2b:03:e0:6c:35:64:1c:13:48:0b:4a:26:2b:65:51:
20:4b:56:f0:f8:92:9e:29:ad:89:56:76:0c:52:9b:6e:6a:28:
a4:11:fc:81:e9:a5:c2:e6:c4:49:1f:31:2a:15:dd:37:21:fb:
1a:ff:9a:57:b2:4f:6a:33:a4:8e:9e:0c:94:78:8f:0e:cd:e8:
a5:52:eb:1b:ff:c8:61:f9:ba:44:e0:4b:56:58:f6:cf:18:4f:
9e:c8:e8:57:47:28:75:bb:92:df:51:12:2b:c4:2e:77:48:1a:
46:a1:37:7f:af:8e:21:86:65:c2:4e:f9:ce:0b:5c:c5:d3:fd:
a9:97:97:22:c9:0c:b4:9b:fc:fa:7e:53:73:6e:56:64:88:ca:
79:97:65:30:5a:d8:ba:b6:ec:ac:a5:46:16:66:35:04:ec:57:
0f:67:46:de:04:b3:47:f1:fd:b4:33:e5:07:d2:96:8d:5c:26:
4e:35:3c:dc:94:2a:f8:86:79:da:fc:58:3b:57:e7:e3:9d:37:
6f:c8:dc:5c:50:23:fb:db:f3:97:4a:82:3d:c7:98:5d:3e:83:
ae:a8:18:82:b6:95:de:15:f6:14:a8:b5:ab:7f:92:ed:84:3c:
fc:40:45:d7:b7:00:90:d8:8b:f5:3d:82:62:95:80:6b:df:70:
b8:36:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:39 2025 by rpki-client