Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: tSyP2hNTVuH7cRzJRu81BAYeiYGFZzb1zNo5UKiDUlM=
Subject key identifier: 29:4B:0F:38:DC:7E:ED:57:9A:03:7A:AB:31:8E:35:8E:D3:3E:0F:CA
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 01974B1FCDD6DED0DB0F7BD5AF920D0A3C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0CC2
Signing time: Sat 07 Jun 2025 16:01:04 +0000
Manifest this update: Sat 07 Jun 2025 16:01:04 +0000
Manifest next update: Sun 08 Jun 2025 16:01:04 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: d/z/FLyh5vHUUTWHD0H8zHJ4Uqsh8hgronHbW+j93t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:cd:d6:de:d0:db:0f:7b:d5:af:92:0d:0a:3c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jun 7 16:01:04 2025 GMT
Not After : Jun 8 16:01:04 2025 GMT
Subject: CN=294b0f38dc7eed579a037aab318e358ed33e0fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:53:95:ce:66:b4:86:6f:26:d6:a8:36:61:
28:22:94:18:12:f1:a0:5f:22:d0:3e:5a:af:4e:1c:
d6:9a:56:0c:74:16:bd:88:ca:89:f7:23:65:ff:6a:
45:0b:6a:13:a8:f8:ce:d6:07:3c:d5:b5:ab:57:cf:
cd:ee:66:4f:fc:c3:f8:7b:33:19:fb:b4:a1:50:0f:
8f:28:07:5a:1f:a3:49:95:8f:f3:fc:1d:57:60:fc:
33:53:04:6b:e0:c4:97:f6:5b:a7:fb:d5:a3:06:49:
9b:53:16:ca:f8:61:2c:33:fd:f7:16:e0:5b:5b:a3:
5b:b3:87:be:78:87:3b:3a:7c:ba:24:ac:6e:cf:a2:
de:a1:fd:db:b8:c4:fb:4e:69:91:07:f0:6b:cd:a2:
20:b6:ea:4d:d3:c7:45:36:69:c8:15:6a:2a:9e:55:
4f:6b:18:d5:9c:18:db:ec:bf:25:1c:00:36:9a:71:
cc:59:18:e9:47:4d:1e:16:d1:3e:51:8c:af:c2:34:
78:64:d3:18:c0:fb:97:c8:92:07:67:3b:97:59:0e:
05:d7:eb:d4:97:76:c3:11:1d:8d:c2:39:b2:ae:3c:
7d:5d:6f:f5:d1:9a:da:0f:91:ad:be:88:df:d2:b2:
16:8b:fb:b2:c0:d3:cb:47:3c:2f:84:18:dd:e9:21:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:0F:38:DC:7E:ED:57:9A:03:7A:AB:31:8E:35:8E:D3:3E:0F:CA
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:82:a5:ae:f4:d7:e4:e9:2b:8f:8e:91:d8:1a:95:57:cf:
1b:2c:54:7b:07:a8:38:0b:65:97:ac:1d:31:fc:a6:f8:da:b5:
0c:67:5b:ac:71:ed:92:b7:84:54:70:20:42:9e:0e:0e:db:0f:
64:5e:58:03:0e:e7:52:98:b1:10:d8:65:b9:87:3a:ad:6f:13:
7a:95:50:29:99:15:f5:e5:bd:6a:75:c9:a7:d3:6b:15:cc:a0:
cc:47:50:0c:47:5a:88:4e:7b:03:aa:24:44:d1:8d:e1:9d:bc:
aa:77:2a:6b:01:ae:16:b4:a4:36:7b:08:b4:09:12:5e:2a:b5:
69:bb:1b:cb:3a:63:f6:9f:08:74:bd:7b:ef:a2:75:b3:61:ab:
4a:eb:9d:27:d3:94:4f:fb:ee:96:96:84:42:61:02:98:b5:a6:
52:21:35:6e:dc:2b:9a:97:c7:f5:67:45:b8:f4:96:b8:77:e4:
ac:78:69:90:98:be:90:78:ff:43:05:b3:47:6f:cf:ed:f1:92:
6a:77:af:f3:1a:3d:2a:36:01:b9:c8:b0:db:ca:b8:48:ff:21:
64:93:87:f4:b5:13:91:d0:86:f8:cc:dd:1a:5f:0c:5d:a8:36:
72:96:d9:f8:06:b2:d0:0b:ff:76:e7:20:39:20:e3:15:5a:e8:
99:22:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:53:42 2025 by rpki-client