Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier: hkh99Npmi4+RxwpuNltk1bRk1V5qqb8zZo/I912RDuU=
Subject key identifier: 84:AD:63:70:70:0B:0F:CB:EE:48:3D:52:D4:B5:98:F0:39:8E:A8:84
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial: 01974A0CC8DF650ED39B2C08A56B50E80AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number: 0F
Signing time: Sat 07 Jun 2025 11:00:41 +0000
Manifest this update: Sat 07 Jun 2025 11:00:41 +0000
Manifest next update: Sun 08 Jun 2025 11:00:41 +0000
Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: ZtgnB9Mb0BthGOd4HBDGOxmb3yybt/v4I7p9x1u9qoY=)
2: HyAFlnKRYn8v4ck7CUrvJ74oqJw.roa (hash: Cz97E2NkgnmgiZA3PdXbnScz0dyzdjSpjkDb9HLlBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c8:df:65:0e:d3:9b:2c:08:a5:6b:50:e8:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Validity
Not Before: Jun 7 11:00:41 2025 GMT
Not After : Jun 8 11:00:41 2025 GMT
Subject: CN=84ad6370700b0fcbee483d52d4b598f0398ea884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:f2:8c:ca:3e:9b:42:be:db:4a:a1:a8:25:
4e:19:ed:9d:22:c5:fb:6e:bc:02:4c:81:1d:73:91:
10:59:b6:98:c1:ce:c9:b0:f8:9a:62:b7:4c:b8:f4:
22:1c:3a:a3:bc:f6:96:d8:e5:ac:d4:eb:d6:c6:22:
fc:c2:35:de:06:a2:21:7c:76:44:2e:78:7d:a4:df:
bc:a2:0c:28:8e:2c:12:62:f9:07:bc:0d:38:a2:da:
b9:e6:5c:9c:61:17:60:cb:dc:3f:7b:32:72:ae:e0:
df:08:81:12:7c:57:ed:97:b9:8b:92:bf:5f:20:42:
29:49:d8:77:73:83:90:10:bf:62:6d:c6:1c:5e:2a:
64:5a:22:42:9e:21:9d:26:b0:0f:e6:d2:79:8a:9a:
5c:d4:e5:36:96:1e:3d:96:9b:63:f6:8a:1b:7d:8f:
8e:0b:61:8a:e1:b4:af:80:8f:d8:85:d1:d0:8b:86:
99:8f:9c:e5:1d:bc:bd:b5:76:84:42:69:b2:4d:b5:
fe:bc:5f:1b:67:47:d1:18:2b:74:cd:00:30:54:9f:
4e:24:3e:6d:a3:05:88:4c:d3:c0:fb:6e:9b:40:4b:
6a:8d:e9:6c:11:64:d3:84:d3:16:56:3e:ce:58:86:
ab:46:9f:db:d8:e2:6f:77:76:51:e6:5d:ee:28:cc:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AD:63:70:70:0B:0F:CB:EE:48:3D:52:D4:B5:98:F0:39:8E:A8:84
X509v3 Authority Key Identifier:
keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:b9:35:7e:2c:a6:b1:3c:c2:07:fe:74:35:79:eb:03:46:
79:92:9b:58:a5:b5:76:2a:74:18:61:cb:ec:92:75:ef:25:0e:
71:3c:12:bd:d5:ac:aa:64:99:7f:b9:56:33:32:0d:e4:b0:12:
77:80:80:e8:bb:72:e4:86:c7:c7:39:eb:53:58:f9:50:3f:a4:
a3:7a:bb:91:e9:b6:ef:74:59:c7:62:55:0b:ef:b9:3b:38:24:
eb:3e:af:bb:ea:a7:0a:a0:ea:b0:e6:5a:f7:a0:57:f5:60:1b:
e4:1c:fd:80:43:78:2b:0a:7a:25:1d:79:2b:1c:0d:f7:5c:5d:
86:ce:25:ef:e1:76:ac:8f:e1:67:57:d6:f1:ff:a1:ed:15:59:
e0:78:49:db:c3:f9:b6:40:1b:83:ae:2b:12:73:98:60:99:f4:
29:30:32:d6:33:39:61:1d:f7:ef:65:d3:01:d4:d1:1b:35:1a:
63:f9:86:c4:16:55:16:60:e9:54:3e:79:54:65:fc:76:3e:24:
df:89:c3:f8:92:60:e1:b7:a5:31:01:94:fc:9f:ad:e7:d1:2a:
2a:b5:11:78:d8:6c:0f:72:c0:85:cf:f1:3d:f5:5c:71:4e:ed:
10:3d:49:eb:18:de:8c:96:49:1c:3f:ea:1c:84:e4:7c:14:4c:
5e:75:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:22:31 2025 by rpki-client