
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: iiFpPVXcfyzr893kx3kVUtPllKwxhk3K9MdcAgWNnoU=
Subject key identifier: 38:BB:E5:36:4A:43:06:5F:29:FB:79:50:38:C8:FF:C0:ED:8C:48:42
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 01976EBE530167D0ACB9FD54C650A6B5BE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 010F
Signing time: Sat 14 Jun 2025 14:00:56 +0000
Manifest this update: Sat 14 Jun 2025 14:00:56 +0000
Manifest next update: Sun 15 Jun 2025 14:00:56 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: Af6wWm2UWykSx2Dg/aTVpNick8jRthr3RiBjv9gK91I=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:53:01:67:d0:ac:b9:fd:54:c6:50:a6:b5:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Jun 14 14:00:56 2025 GMT
Not After : Jun 15 14:00:56 2025 GMT
Subject: CN=38bbe5364a43065f29fb795038c8ffc0ed8c4842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:4b:a1:af:3f:33:94:88:e8:83:2e:ce:73:
81:b1:de:49:73:c1:2a:c8:50:4a:9f:cc:3e:3c:df:
ba:a9:c0:3c:75:36:c5:64:ee:53:ab:f2:be:8d:75:
b8:ce:1f:2f:f7:2e:01:9b:78:0a:61:9b:8c:e8:35:
dc:79:f2:ec:6d:04:2b:e3:81:8f:70:ad:de:5d:89:
cb:a7:40:65:bd:bf:46:d4:8c:dc:1d:ae:a9:cc:e1:
cb:4f:07:bd:13:96:03:c7:ed:ff:47:6d:d0:de:85:
9d:ea:a9:15:58:ff:48:12:f4:e4:93:0e:3d:01:c3:
df:fd:05:65:b3:b9:e5:a5:4f:22:1d:27:1c:e3:31:
cd:f2:93:02:3c:1b:04:b3:af:29:c7:0a:95:5f:de:
b5:26:7f:9f:82:f7:50:07:8e:1e:1b:8c:0a:22:a6:
13:6e:82:81:65:8d:09:c9:5f:79:6a:55:ed:43:41:
11:67:66:1e:11:bc:8d:c4:23:e9:82:4a:0f:23:bc:
c6:eb:f7:86:81:c7:f8:5e:0a:f1:62:ad:07:5b:c5:
a1:54:04:38:25:3c:69:ff:3f:01:3f:32:ec:9d:60:
f9:b5:76:bc:ab:71:8b:19:6a:94:e4:dc:f9:9b:10:
39:7f:61:63:9a:51:18:c4:d9:6e:53:b1:3d:e9:7d:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:E5:36:4A:43:06:5F:29:FB:79:50:38:C8:FF:C0:ED:8C:48:42
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cd:d2:76:2e:9e:56:d6:11:ef:b5:f0:35:01:30:bf:3c:fd:
ba:c0:aa:7f:88:0f:56:4f:8c:92:da:c5:4e:3c:ce:ea:0d:e6:
5f:21:d2:78:2c:cf:66:44:79:9c:5b:87:2f:cf:89:b5:08:09:
f0:d8:4b:4a:32:9a:b0:07:a8:19:00:22:ee:d7:ca:95:d4:96:
45:7b:a1:c3:b2:c2:fc:83:c6:5e:25:7c:db:21:34:c4:89:5a:
0a:8d:e6:ea:fa:97:62:31:c3:37:a0:43:2e:13:16:a1:50:ac:
9f:93:80:da:5a:d1:6f:33:58:76:d6:d1:ef:79:e1:0c:08:17:
f8:41:46:ab:7a:b6:3c:e8:cd:2c:b0:c3:c5:cf:20:58:52:2a:
79:d9:f2:6b:15:39:29:d7:a9:4b:e7:1d:05:75:9d:05:a8:d2:
0f:15:c6:92:3e:f5:4b:63:07:9a:f8:b9:f1:a1:4d:ff:64:bf:
72:20:8d:63:97:7d:ea:76:ea:37:e4:bd:6a:f7:86:65:ef:e0:
c8:22:8b:05:93:f4:03:71:7c:be:24:7c:18:b9:8b:36:dc:17:
a3:b5:d3:e3:9a:1a:bb:d0:19:ab:81:af:3a:05:d3:ae:ea:c7:
01:25:8a:85:4a:2c:f3:60:e4:ca:e6:0f:a0:df:0c:4a:16:97:
a5:1c:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:05:43 2025 by rpki-client