Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: P7Lw1CW7Z5mq6DqTFCH/HZlMthdvm22x4QqU8MBeyFc=
Subject key identifier: 1A:E8:A6:1D:78:0E:CC:0A:0F:DB:65:14:D5:74:B5:B6:69:AE:FF:0A
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 01975D5CD436BD8AA4E355738962D6C722FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 0106
Signing time: Wed 11 Jun 2025 05:00:54 +0000
Manifest this update: Wed 11 Jun 2025 05:00:54 +0000
Manifest next update: Thu 12 Jun 2025 05:00:54 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: exuUyU1oDrQ9eboTU7CeHjx5g1F2XpfwTfpAqelfcBI=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:d4:36:bd:8a:a4:e3:55:73:89:62:d6:c7:22:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Jun 11 05:00:54 2025 GMT
Not After : Jun 12 05:00:54 2025 GMT
Subject: CN=1ae8a61d780ecc0a0fdb6514d574b5b669aeff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:5d:f3:38:a4:b8:d1:6b:55:2c:42:fb:0f:
c8:f8:e0:82:fa:35:c5:3d:8d:b0:1c:93:9e:d2:a6:
39:a4:c7:53:8f:7d:b3:2b:bd:d4:0d:82:a9:79:a5:
bd:9f:fe:b3:0f:a4:06:94:dc:ec:8e:75:ae:62:d9:
a4:65:c2:f3:42:8d:16:df:d7:42:93:27:be:c7:e9:
ff:b9:67:79:f1:dc:2a:48:df:bf:af:5e:33:e8:a8:
39:dc:10:c3:39:ef:93:c1:c8:cb:ad:80:20:b7:4b:
56:33:f6:44:54:1c:32:15:ab:e9:b9:96:02:44:e8:
b4:18:e9:ca:2e:05:86:31:b9:16:06:f9:42:6c:2c:
be:fb:3b:2d:12:11:80:db:00:1d:3e:85:b4:cf:74:
f2:2c:3d:d9:7a:f2:b9:74:d9:fc:ae:62:b9:3d:9e:
dc:a5:23:09:f9:af:1a:84:ce:73:0d:d8:75:3c:11:
61:96:09:a0:16:71:20:36:0f:ae:0b:27:ae:23:4e:
f0:52:b2:ad:9b:10:2a:3a:c6:be:28:ce:ef:2e:34:
0e:da:f9:b1:a7:24:c0:9d:d0:4b:f3:25:e0:8b:17:
ec:6b:4c:c4:8a:cb:7f:18:4c:94:ba:33:99:55:2d:
40:dd:d6:18:bb:5a:03:0a:41:00:77:71:ad:32:76:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:A6:1D:78:0E:CC:0A:0F:DB:65:14:D5:74:B5:B6:69:AE:FF:0A
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1a:82:f0:0d:a8:6c:c2:9d:a7:01:98:3a:76:8f:79:e3:de:
f6:32:bc:92:08:aa:bc:da:4e:7d:75:3d:6d:7c:45:40:5b:77:
21:ad:29:3d:a8:fb:53:79:a7:db:23:cd:34:f1:86:bb:0d:a4:
a8:8e:e7:e2:fc:37:bc:65:1d:86:d7:9a:70:bc:20:95:e1:d0:
84:49:b7:34:62:d4:81:ad:88:2e:e8:21:cf:bb:be:03:89:94:
65:f0:b5:65:5f:f6:2c:43:b6:36:2f:2c:e9:3c:df:f3:de:41:
80:44:50:e1:b2:d9:6e:55:45:6d:17:b4:75:97:7a:1d:ea:bd:
81:cb:3c:01:6e:79:67:5a:54:28:39:68:08:5a:e2:5f:be:e8:
e0:38:9d:92:68:e0:16:ba:48:1a:09:d3:21:ef:0a:a4:f6:67:
f6:27:72:57:f7:b7:55:09:68:ca:16:4a:a4:80:86:c4:c0:97:
64:5a:47:b8:e7:56:4c:d4:69:d1:b1:92:07:fc:f5:da:9e:6a:
cd:a5:0a:91:db:de:fb:68:bb:78:02:52:85:74:ae:59:ca:24:
80:57:a8:f1:64:7b:09:67:a8:a4:c7:e7:5e:72:22:f5:3d:cc:
77:9f:45:9b:7b:25:01:6e:5c:c3:f9:14:36:0c:1a:c8:de:b2:
c0:ec:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:30:47 2025 by rpki-client