Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: Z+LHw6ODHIb3vs6Cv1i5C6tInr1OeEDXTKozKF1UZQ4=
Subject key identifier: 6D:AC:56:E0:F6:1F:E9:B1:6D:F1:22:7E:A7:A7:FA:D8:4A:72:D8:30
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0197463039432B446DD7F82D40451DAFF3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 17:00:54 +0000
Manifest this update: Fri 06 Jun 2025 17:00:54 +0000
Manifest next update: Sat 07 Jun 2025 17:00:54 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: s7DwSp3o4MMLtxNR80KYqIQmd7jx9KOJE4hxo6iS25Q=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:39:43:2b:44:6d:d7:f8:2d:40:45:1d:af:f3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jun 6 17:00:54 2025 GMT
Not After : Jun 7 17:00:54 2025 GMT
Subject: CN=6dac56e0f61fe9b16df1227ea7a7fad84a72d830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:a8:ac:31:18:12:ef:2c:95:5b:e7:e8:b7:
41:a7:cc:c9:2a:db:18:0d:09:84:74:c9:78:a1:9b:
4f:a9:47:67:e3:0a:34:5e:21:d8:f8:34:70:25:33:
8a:7f:02:46:ce:92:ce:d8:53:93:7c:7c:b1:4a:16:
6c:b2:93:5a:49:1c:01:f6:3e:f0:aa:8e:61:a9:01:
0d:55:bc:48:73:57:70:f3:e5:ec:90:0a:63:87:b9:
70:37:1f:0b:57:3d:a0:55:ed:1d:ba:83:2e:ee:22:
25:a0:82:28:3b:10:30:fb:8d:37:c5:09:8a:af:95:
fe:4f:5b:ab:66:09:bd:02:b5:ee:82:40:81:47:33:
f1:f0:c5:8c:06:2e:65:d2:9f:df:23:00:8b:5b:c3:
f3:65:57:3b:e3:9f:da:fc:72:6f:2b:8d:e0:91:93:
8e:92:1a:d6:fd:95:d5:b8:09:17:d6:6c:e4:48:c1:
cc:34:49:f7:76:97:1d:11:0f:6a:77:a9:f9:24:ca:
fc:e6:ad:d7:02:2d:90:a5:22:ba:90:d6:5f:cf:56:
44:57:9e:b3:fb:de:35:b7:12:62:01:17:bd:73:69:
94:fe:d5:ba:26:7f:6b:d5:85:b1:40:3d:9c:12:e4:
ce:ab:a4:78:b9:93:f4:b0:c8:7b:59:01:d1:c4:a2:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:56:E0:F6:1F:E9:B1:6D:F1:22:7E:A7:A7:FA:D8:4A:72:D8:30
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:98:76:2a:da:3e:09:ac:29:91:f2:d1:c8:96:6c:7f:67:
91:ed:ae:e9:47:96:b0:38:2e:ff:85:4a:e1:0b:36:c7:fc:4e:
a2:84:70:43:c9:a1:bb:74:73:64:1e:c4:73:a8:79:89:8d:ed:
bb:df:b2:b7:1c:60:17:e2:89:95:63:3d:e9:a6:44:94:e2:b5:
76:79:d0:59:94:b2:14:f2:47:bd:7c:27:98:51:e1:96:31:ee:
a6:ef:8c:29:5f:f2:48:06:48:5f:c8:a1:4e:b4:df:33:27:70:
e0:5b:2a:31:83:8f:6f:4e:22:d0:4d:a1:67:34:21:a4:65:ec:
5c:f0:a8:f5:a8:2d:eb:69:f4:53:6b:4e:8e:f2:50:80:3c:da:
15:64:23:42:61:bb:25:7d:f7:c8:95:f3:d4:01:da:ed:fc:c5:
eb:d4:bd:51:e7:12:e2:f8:72:b2:57:c5:5e:c5:f3:f3:f7:11:
8b:75:fa:99:7d:35:ab:1d:9e:59:72:50:d2:44:d1:d9:3a:eb:
ac:da:1c:2c:17:90:f7:82:0f:12:1c:e6:56:cf:8e:d6:76:48:
44:a8:07:14:b7:b3:d6:f7:ac:bf:5c:84:be:78:d8:0b:d2:18:
ae:5b:e7:da:18:59:7a:d2:9d:2a:30:99:06:74:0c:92:38:ef:
37:42:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:13 2025 by rpki-client