Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: 4B9G7v9SiMbvvz6DDdJ9S7xdKh3OK9u9DuqJY1VvQZM=
Subject key identifier: 6C:9A:C7:CB:F4:AF:4E:86:3A:03:DB:E5:DD:9D:AD:45:E4:7A:B0:8B
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01974AB1A4A8B05B1AB6B733FE3EC41687BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 14:00:45 +0000
Manifest this update: Sat 07 Jun 2025 14:00:45 +0000
Manifest next update: Sun 08 Jun 2025 14:00:45 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: rG19l0uMSTP89KLvOLtl0ysV0f04Gx1u6q8RAUvcJwU=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a4:a8:b0:5b:1a:b6:b7:33:fe:3e:c4:16:87:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jun 7 14:00:45 2025 GMT
Not After : Jun 8 14:00:45 2025 GMT
Subject: CN=6c9ac7cbf4af4e863a03dbe5dd9dad45e47ab08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:d5:2a:63:b7:f7:8e:f5:61:cf:c8:4f:4a:
d0:c3:43:bf:a6:64:d4:a3:ca:0c:e3:4a:6f:85:03:
27:a3:b5:b4:26:db:1e:41:86:87:42:32:61:79:6d:
dc:b6:54:96:a0:84:b4:b7:b5:d8:e0:3e:1f:db:44:
f5:b9:d2:0a:96:1a:22:86:07:61:50:61:8a:91:b7:
3e:b8:cd:d9:ff:05:43:54:3d:fc:c7:8f:85:4a:f8:
55:15:64:4d:16:78:80:d1:af:83:5f:31:7b:60:8d:
38:18:57:54:5c:c1:66:47:42:1e:1f:4c:0b:36:b5:
60:96:a5:89:25:b5:9d:bb:5a:58:4c:24:f9:da:0b:
3b:88:06:d0:70:75:44:3f:16:05:d8:90:47:7d:1c:
26:5d:90:bc:29:3a:31:49:59:ae:24:eb:f4:f6:c9:
0c:bc:14:0f:c2:c2:f5:5f:76:03:71:d8:88:15:21:
7c:7f:da:b9:c9:3e:a6:27:61:7a:fa:24:52:1c:1e:
b8:53:15:0f:b5:30:aa:bf:c5:f0:35:84:9a:e1:05:
13:52:7c:8a:60:45:cb:52:1d:0c:77:4f:5d:b3:e3:
36:17:ba:60:72:bf:09:dd:4a:84:1d:e5:b4:14:0a:
a6:08:f7:a2:2c:26:98:66:30:67:82:34:3c:dc:9f:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:C7:CB:F4:AF:4E:86:3A:03:DB:E5:DD:9D:AD:45:E4:7A:B0:8B
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:62:02:d4:c4:17:8b:a3:5e:3c:90:f6:97:38:aa:8b:86:d5:
3e:c1:4f:15:6d:c8:0d:22:0b:b1:a1:4f:6e:e3:a1:76:ab:7a:
88:c3:b1:71:c1:e0:5a:f3:f6:e6:56:a0:2b:ed:ec:84:51:c1:
28:d9:dd:5b:e8:b4:b0:bb:79:21:fd:ac:25:85:9b:40:fc:50:
4e:38:37:0c:df:8c:a9:d1:31:06:e7:e6:92:6c:2f:58:32:dc:
b7:d3:30:31:69:57:91:7c:83:19:a1:46:0f:3a:77:c9:27:30:
b3:50:46:a2:22:a1:3c:49:8f:78:72:19:ed:4e:f4:4a:61:0d:
e5:71:4c:47:20:f4:d1:10:dd:7f:d9:ec:7d:fb:d6:9b:e9:84:
52:0f:74:2e:66:df:93:86:aa:da:14:e9:66:90:9a:89:71:43:
f9:a7:70:fd:8e:29:92:f9:cf:48:5a:81:b3:f7:c0:f7:96:f8:
f3:88:b5:b1:ec:53:ab:5a:0c:ca:0c:dc:ad:fe:ec:ba:ef:6e:
11:9c:22:76:12:ea:12:be:89:ec:cd:c1:b8:fa:e3:43:87:85:
af:e1:fb:d1:13:ec:a4:08:72:b1:04:bd:4d:ee:d3:f7:79:07:
98:03:94:37:37:46:06:2f:9e:da:94:ec:ba:40:83:d5:df:ad:
b7:02:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:56:58 2025 by rpki-client