Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: RI1wt5iAsR+Cr4Od3+ub+2UejSf84Tr1VpGOuDIGcHE=
Subject key identifier: 01:0C:F7:ED:BF:39:71:E6:36:03:61:3A:ED:87:C4:CC:25:E5:1E:BF
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 01974177790BFEC38B0E54314DDEB0069D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1291
Signing time: Thu 05 Jun 2025 19:00:38 +0000
Manifest this update: Thu 05 Jun 2025 19:00:38 +0000
Manifest next update: Fri 06 Jun 2025 19:00:38 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: 1B54wJfyCXV5cWF/No1bQXUsm+Kb/oSGqrs4mh5qZKU=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:77:79:0b:fe:c3:8b:0e:54:31:4d:de:b0:06:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Jun 5 19:00:38 2025 GMT
Not After : Jun 6 19:00:38 2025 GMT
Subject: CN=010cf7edbf3971e63603613aed87c4cc25e51ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:ba:d4:2c:de:53:1e:73:73:c2:07:86:f1:
34:b5:df:d0:35:4f:cf:34:00:75:a8:b9:62:9a:40:
20:25:bc:9c:16:f9:e2:47:5b:56:d3:b2:8f:e4:15:
c4:6f:f9:2a:8a:52:98:10:9a:af:df:38:9e:62:e3:
1c:17:ea:63:f1:ab:6b:35:50:71:1c:c7:91:29:2c:
0b:93:c1:28:ef:58:78:3c:84:f1:6b:db:be:4f:c3:
e4:4c:79:3d:a8:2c:e7:49:45:d2:bf:8c:af:e3:ba:
69:cf:90:16:ff:70:2d:9e:04:5c:99:f5:0d:08:08:
81:f0:83:b6:7b:59:9d:b3:54:21:ff:9b:f9:2f:69:
9f:d9:d0:dd:a9:eb:c5:92:a5:de:7b:3f:4f:a1:66:
74:4e:be:0e:4d:94:5e:2c:27:2f:f6:1f:f8:8c:04:
2a:74:e0:5d:79:68:9c:9a:b1:92:89:2a:6c:4e:bd:
3c:f7:a6:c2:af:d7:57:7c:a2:d2:c0:d7:46:55:1c:
54:cc:77:45:76:56:3a:7a:98:e1:2d:f6:98:c7:87:
dd:69:ca:9c:9b:08:5c:0e:ac:30:23:a3:82:1c:dc:
19:6b:a3:d2:cc:3f:fe:94:fe:4e:60:27:fa:9e:fa:
fc:03:3a:c1:76:6a:4d:e1:80:41:34:78:86:bf:9b:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:F7:ED:BF:39:71:E6:36:03:61:3A:ED:87:C4:CC:25:E5:1E:BF
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:81:a5:27:42:19:27:90:a5:25:2a:db:b1:c5:af:72:f0:ce:
32:38:45:78:c5:17:06:b3:f9:d0:88:28:2a:20:cd:b5:c4:1a:
af:54:f3:52:a9:18:69:66:1a:23:70:a4:36:a8:d2:81:e5:bb:
3c:38:59:df:99:b1:46:e4:7a:63:a0:15:89:9b:54:eb:b6:5e:
31:0d:fc:42:b6:89:6e:72:bb:fe:ee:37:be:30:92:da:46:13:
48:8e:17:5d:16:22:d8:2e:30:4a:39:be:47:6f:91:99:61:c0:
5b:96:ec:5e:a6:f5:9c:7f:f6:d8:4d:38:3d:32:c2:3a:79:cc:
88:40:ec:de:c1:e5:fa:bd:f5:32:3d:2a:86:82:d5:d2:5c:fc:
97:58:6c:4b:e7:5c:a1:f7:9c:63:3b:bd:c7:da:b9:0a:55:2a:
3f:14:41:1d:dc:b6:2f:3e:b6:c4:1b:15:d3:08:2f:29:38:22:
ca:69:c4:e8:23:18:2f:90:80:73:f4:0a:9b:3b:0a:d2:4a:c6:
42:ab:be:e4:9c:87:21:e3:ea:91:1a:4d:08:3c:81:45:eb:b9:
b2:2e:29:70:f9:00:37:f7:a7:ea:b2:66:a4:b7:33:20:55:5b:
5e:77:88:e0:88:33:9c:01:f3:51:3a:ff:56:c0:6d:08:a3:ae:
f7:a8:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:28:39 2025 by rpki-client