Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: wbkBn7MWe69Zog7KnSCff5f8K9pOxHcV0Cm62tRohEQ=
Subject key identifier: 94:4B:A1:D5:86:8E:AF:DF:A2:32:51:B7:CE:6E:FD:B8:E0:01:C1:F2
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 01974A7B78E7AF4533A0AD5A8D1BD45FE94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0C5E
Signing time: Sat 07 Jun 2025 13:01:35 +0000
Manifest this update: Sat 07 Jun 2025 13:01:35 +0000
Manifest next update: Sun 08 Jun 2025 13:01:35 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: X7oCVUKde/nb0wQ1hj1uOnfQGSqI0IaiN9sfhhZnmsA=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:78:e7:af:45:33:a0:ad:5a:8d:1b:d4:5f:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Jun 7 13:01:35 2025 GMT
Not After : Jun 8 13:01:35 2025 GMT
Subject: CN=944ba1d5868eafdfa23251b7ce6efdb8e001c1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:2a:6e:cc:d2:2e:eb:b7:e1:da:48:e7:41:
bf:29:1d:27:b2:7c:07:8e:5b:70:bf:37:08:4a:e4:
94:c3:51:5f:08:b1:e3:c7:9d:43:f2:d2:27:d8:bf:
82:9b:c4:fe:14:6d:14:91:f6:ea:a3:3d:7c:b5:1d:
2b:2e:f1:b1:9d:e1:3e:44:6b:75:e4:b3:fd:93:9a:
94:4e:c9:a0:dd:d7:c1:da:48:6f:2f:4a:40:02:96:
9f:5f:34:1e:c5:53:1b:59:8c:cf:9d:68:d1:35:e5:
47:f0:ac:57:4f:df:22:02:9e:8f:eb:c7:be:4d:cd:
89:98:0c:b8:64:8e:5f:f9:52:08:5c:f4:6b:da:98:
f0:cb:5e:89:52:b4:09:80:4c:2f:0a:cf:de:2d:19:
8d:12:1e:db:2d:fa:a4:0c:c9:aa:74:8c:3d:ce:43:
17:7e:3f:a5:83:1f:5e:56:63:46:ee:6a:70:48:94:
d9:76:06:f5:00:29:bf:c1:14:24:87:de:14:0d:07:
0e:6f:bd:d3:4f:5c:c3:90:15:e1:f5:35:1b:64:5a:
06:e9:aa:ad:d0:11:47:30:3d:53:d1:59:3f:73:95:
23:58:62:fe:ba:e7:f8:08:fe:20:3b:4c:32:01:40:
bd:45:45:fa:76:ef:75:b3:39:a4:48:9f:2f:7c:90:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:A1:D5:86:8E:AF:DF:A2:32:51:B7:CE:6E:FD:B8:E0:01:C1:F2
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:38:6e:76:be:99:7e:b1:d6:9a:fd:af:dc:c7:d3:e4:d7:ac:
4b:ec:7d:90:a2:2b:70:2b:b0:21:e8:e8:55:6b:53:e6:bd:35:
08:b2:90:8a:74:37:26:35:bf:4b:59:f4:7b:85:b5:ff:31:9f:
24:ac:62:43:26:d6:8e:45:e6:d9:7f:85:e8:d2:70:6d:4a:c1:
87:de:cd:9b:0f:c0:6d:11:38:f4:da:09:f4:9a:e7:92:1b:04:
a7:a3:b2:34:42:74:96:6f:3d:2b:b7:ab:03:4b:1f:8d:05:76:
6c:d4:fe:22:f5:23:6a:b7:dd:04:6d:c9:d8:1f:50:13:97:4e:
ae:2e:6f:a2:ee:63:28:21:04:8b:e7:a5:77:8d:b1:33:86:58:
b2:f8:47:7b:4f:09:cd:7f:eb:61:54:5b:e2:d6:20:c5:30:d8:
f0:37:59:7d:c4:ae:d7:7b:f0:be:e9:a2:15:8a:9c:5a:02:aa:
ae:71:bb:2a:29:1e:d5:7e:fd:e0:fc:d1:59:40:ca:bd:f7:37:
1e:d1:cd:a0:cb:39:3d:51:1c:51:cf:49:92:69:55:af:b2:54:
15:cc:3c:08:f6:be:39:d6:c7:b5:e6:11:2c:63:4f:f1:5a:35:
0e:b3:42:7f:ab:84:d0:49:e1:27:5d:aa:7e:5a:e9:8b:ab:a1:
56:51:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:32:07 2025 by rpki-client