Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: dCtEZMjBiPOUFwkk7pd+4wUTwqNPt+cflJMSRDNcjUA=
Subject key identifier: C1:1A:39:2F:45:34:1B:E0:F5:33:9D:A4:92:7C:9F:7A:AE:68:B6:EC
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 0197500EE11370FBDB611A84C5DBD4682391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0F24
Signing time: Sun 08 Jun 2025 15:00:41 +0000
Manifest this update: Sun 08 Jun 2025 15:00:41 +0000
Manifest next update: Mon 09 Jun 2025 15:00:41 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: NOgcoDZ1eIJn5vGZm8zQs6W85i0AQxxJx7RntwJEG/w=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:e1:13:70:fb:db:61:1a:84:c5:db:d4:68:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jun 8 15:00:41 2025 GMT
Not After : Jun 9 15:00:41 2025 GMT
Subject: CN=c11a392f45341be0f5339da4927c9f7aae68b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:92:24:0e:08:23:fb:1d:8a:e7:a2:0d:6d:
af:6f:e5:1f:c4:c4:3f:43:cb:3b:54:4d:da:39:49:
6a:37:8d:bf:49:34:51:0d:cb:a8:1d:58:d7:09:6e:
75:29:35:d2:22:75:0a:d2:88:a8:91:b0:65:8d:da:
a0:ea:f7:d8:26:68:19:67:b2:21:ef:bd:c9:bb:d9:
5f:4b:e4:01:ce:78:4d:11:7d:06:a3:76:34:69:42:
cc:95:36:76:4d:fc:65:71:14:f4:58:0d:00:8a:a5:
85:03:3c:14:7e:fa:1b:72:6a:b7:50:47:e6:75:aa:
d5:a4:c3:da:cc:ee:b1:9c:50:b3:f6:fa:c3:0e:3e:
55:45:5d:9a:0e:c2:b2:51:cc:5e:c9:fc:d4:29:d4:
b9:b5:f2:1c:30:db:f8:23:62:f8:73:ba:76:ff:5d:
b5:5b:e0:a3:aa:d0:c8:f8:c9:09:a1:90:b3:65:5f:
c4:62:29:0e:29:13:e3:13:fe:74:7c:84:c8:29:17:
39:4c:84:88:ae:a9:07:80:1c:a3:18:bf:a2:31:0a:
09:94:f0:3f:4d:1f:a8:e3:ab:96:58:72:0e:0f:35:
46:33:31:a1:00:1d:80:35:ff:fc:a3:a3:ef:e1:d9:
24:18:04:b1:43:9b:66:98:7c:71:4d:dd:07:9e:ab:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1A:39:2F:45:34:1B:E0:F5:33:9D:A4:92:7C:9F:7A:AE:68:B6:EC
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:76:27:94:0f:ca:2e:16:06:ca:9d:25:ec:60:c3:8e:ed:dc:
7f:67:6d:77:d5:89:56:d4:74:23:34:86:46:9b:e8:3f:f9:f7:
a2:56:c8:67:d4:79:ce:48:3d:b8:37:4b:85:2d:46:50:45:15:
87:2b:a0:a6:7e:6d:49:3a:21:c3:3f:33:11:0c:90:d1:3b:d3:
90:dc:42:9d:01:1f:7c:aa:e7:cd:1c:cd:da:98:71:ef:1c:d6:
9a:32:6d:0c:c5:29:94:0b:12:34:d5:bf:cd:b5:ca:e4:b3:43:
3c:57:43:7a:b6:19:65:c7:26:87:4d:91:80:b4:82:19:b8:7d:
86:a9:70:ba:ef:9b:d8:f8:0c:43:04:f7:ae:52:a0:f6:4c:f7:
fd:ad:3c:b7:0c:7d:13:f2:d8:54:b1:e3:ce:0c:72:ae:e0:0b:
f6:de:65:e6:3d:c2:52:3a:92:44:de:41:e1:a0:36:10:5f:74:
0f:af:68:a2:d9:d4:9e:f3:ce:20:3c:72:59:74:13:c9:35:3a:
18:db:8c:82:7f:69:3c:6d:69:ae:04:68:a0:2e:a8:22:52:f4:
fe:d9:ec:f3:ee:09:bb:85:eb:20:f9:8a:0f:f5:ee:2e:20:c7:
ea:10:8b:76:32:5a:86:5e:f1:3a:c7:0b:37:7d:82:6b:37:c2:
cd:0a:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:08 2025 by rpki-client