Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: a3saVgTcxb/JUsC2B5To9LpaspmSjxgLGQizMzCQyac=
Subject key identifier: D9:02:01:4E:73:7B:55:85:45:57:5F:67:0D:96:63:AC:92:6E:54:BC
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019745F8EFD6416FA4E382642517C4174852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 0D0F
Signing time: Fri 06 Jun 2025 16:00:31 +0000
Manifest this update: Fri 06 Jun 2025 16:00:31 +0000
Manifest next update: Sat 07 Jun 2025 16:00:31 +0000
Files and hashes: 1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: 6sdQh3dAOv2Um+jcstZlpvNYxUT3ryB2s30Ale5z+mk=)
2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=)
3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=)
4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=)
5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:ef:d6:41:6f:a4:e3:82:64:25:17:c4:17:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jun 6 16:00:31 2025 GMT
Not After : Jun 7 16:00:31 2025 GMT
Subject: CN=d902014e737b558545575f670d9663ac926e54bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:7b:1a:3f:b6:ba:3a:ed:00:30:dc:b4:d5:
3a:7e:bd:ad:18:4b:70:4b:b5:01:c5:ef:44:75:12:
24:9e:b4:20:b0:82:93:5a:ab:58:4d:07:9f:b6:c2:
d0:ed:7d:ce:b6:8f:e9:b7:28:1a:14:50:3c:b2:1d:
95:91:14:41:05:2e:a0:40:b7:27:0b:fc:a2:cd:72:
ae:c4:bf:ef:7b:36:fe:e2:c4:79:70:fe:1f:69:d5:
e8:6d:4c:dc:1f:1a:d9:32:ae:3e:67:ac:2f:e0:0d:
f9:fa:ee:93:ca:2d:4a:3a:a7:aa:f9:fe:e6:03:76:
ac:b2:91:73:d8:27:92:80:f3:57:ef:2e:10:e2:7d:
a0:8e:f7:dc:b4:16:cc:8b:85:6b:c7:6e:7c:fa:30:
42:f2:b0:d6:b1:50:c7:24:57:bc:24:39:3a:fb:e1:
47:e3:4a:ea:ea:35:e5:9a:38:75:2d:bc:2d:a3:dc:
d9:70:bd:9c:a1:e5:3f:c1:85:42:f7:35:3f:74:25:
cb:c4:d4:f5:23:32:99:1f:a1:26:1c:27:c2:8f:94:
18:89:1e:d9:b5:64:9d:fc:d2:88:b3:bb:fe:21:c0:
ad:e0:a0:ee:75:2b:70:33:a8:c3:7b:5f:89:c1:cb:
a3:84:0e:8f:77:a7:a6:c6:11:78:2e:08:86:32:1d:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:01:4E:73:7B:55:85:45:57:5F:67:0D:96:63:AC:92:6E:54:BC
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:1b:50:28:56:38:26:b2:71:9c:b5:1a:45:cc:15:a5:9f:
4f:d4:ce:6f:c8:bd:c8:d6:27:48:4c:b8:68:e7:bb:9c:ef:6a:
e1:c0:dd:cf:97:2d:14:04:2f:ee:cd:e2:bb:2e:82:95:4e:e8:
f9:b7:b9:0c:a4:94:ec:96:ff:fb:fa:11:55:a0:a1:0c:62:a8:
25:a2:32:96:f0:29:85:3e:3a:6f:28:a2:a0:31:cb:83:71:6c:
e3:01:78:a0:b0:72:ba:b6:97:5c:20:e6:84:97:e3:af:1e:3c:
38:7a:1d:fc:03:ef:d3:75:19:2f:d8:57:df:73:5b:ac:02:e8:
e1:5a:4a:ae:46:39:48:d7:19:30:e4:a7:79:4d:cf:da:4b:9a:
61:4a:7c:84:51:31:b8:28:57:d8:96:53:51:ed:d3:8d:c6:51:
d0:8e:bf:e0:b2:a7:6b:25:08:a4:51:c5:da:0a:b1:bc:16:33:
5c:47:1d:1d:55:46:e1:fc:80:a0:11:ff:e0:5c:05:60:26:0b:
cd:05:05:52:6a:ed:96:40:fa:d5:3a:04:f3:f4:85:36:c2:ee:
dc:7d:eb:f3:a1:01:ce:e9:2b:2c:8c:42:f8:e4:52:32:e6:6c:
08:26:18:dd:d6:29:c6:a9:12:b8:bf:8a:fa:b6:39:dd:a7:34:
6b:9e:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:11:16 2025 by rpki-client