Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: kv3qwdnxUjmuTHPSHdPr6+NTe2t8X2q2L/mHSzozjFg=
Subject key identifier: 97:EC:F6:23:9F:AD:70:E5:DC:18:71:C4:AD:BF:5A:82:C4:89:F3:72
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0197CCF18A587CE0523F17BC8AC74D8714CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 09EF
Signing time: Wed 02 Jul 2025 21:01:10 +0000
Manifest this update: Wed 02 Jul 2025 21:01:10 +0000
Manifest next update: Thu 03 Jul 2025 21:01:10 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: NyRcNwGGbZ9JStdH/0/3dhooWb2Bj8NDyNSM8SyRvsg=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:8a:58:7c:e0:52:3f:17:bc:8a:c7:4d:87:14:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jul 2 21:01:10 2025 GMT
Not After : Jul 3 21:01:10 2025 GMT
Subject: CN=97ecf6239fad70e5dc1871c4adbf5a82c489f372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:36:67:c3:58:92:bc:95:8e:77:37:10:4d:
8d:b1:05:47:8b:51:5f:8c:41:10:90:d1:50:0c:2e:
e5:a7:7b:be:22:64:f5:aa:3f:81:dd:b8:79:16:5f:
23:19:1f:21:e7:be:f7:43:c7:ec:e0:31:7d:72:99:
2d:bb:8b:ea:f5:1b:b5:c3:46:34:05:0e:52:da:7b:
f8:f5:92:3b:ba:74:23:0f:b4:5a:6d:7a:df:c1:3f:
a1:98:fb:2e:97:46:52:10:fe:51:32:31:53:e9:96:
29:9b:c5:5a:79:f0:0a:bb:f7:87:8d:19:2e:67:02:
ad:3a:1e:2f:ba:0d:7a:f8:9b:79:51:a6:7f:8f:81:
af:ee:4c:99:2c:13:28:a9:54:b2:4b:26:39:b2:0b:
7b:2d:49:2c:54:cd:c8:b5:53:f1:00:81:1b:ea:d7:
7d:84:1c:a4:fd:b5:e6:87:87:a4:18:a0:ee:e5:f1:
93:40:35:f4:e2:39:2d:c7:f7:f3:86:31:04:55:69:
8f:7a:8c:2c:cb:95:3c:52:f4:f8:5d:48:c9:a4:a9:
06:a7:f7:e6:4a:86:7a:7b:f9:5d:f3:4b:a5:c8:fb:
7e:b6:cc:a8:cc:87:fa:34:f5:7f:fa:fb:b8:88:36:
91:e8:2a:96:49:e6:72:2a:de:cf:72:96:11:79:cf:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:F6:23:9F:AD:70:E5:DC:18:71:C4:AD:BF:5A:82:C4:89:F3:72
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:07:7f:2e:3b:42:6b:00:96:f1:dd:56:a4:e2:1f:f4:3b:
dd:f1:5c:b6:b0:bd:40:90:08:18:54:57:24:dc:1c:80:6d:6e:
01:3c:d8:9e:1b:d6:4f:ea:41:56:82:6c:d6:68:2a:77:33:19:
b4:f4:d2:44:c2:9e:c1:07:fd:d9:c0:02:18:96:6e:20:11:75:
83:10:b5:3c:06:a3:61:20:45:7e:39:17:e4:cb:56:cf:6e:b8:
de:41:be:57:2f:c3:ed:e1:d4:56:a1:80:6d:19:85:27:5b:a1:
af:df:be:4c:33:88:54:5d:ae:21:92:fd:fc:aa:a2:08:d0:0f:
c2:01:91:49:73:0d:d5:0a:b4:73:5d:18:b4:e5:89:5f:18:16:
e7:e4:33:6d:70:62:92:e8:8a:da:12:fe:3e:38:4b:e0:2a:97:
78:20:87:23:ec:86:07:94:4e:5a:09:b1:67:92:63:e6:05:34:
74:41:41:1b:9c:a0:bd:25:0f:43:e0:2e:d3:a9:65:a9:ed:0d:
26:0f:9a:44:a7:a3:52:78:a8:36:53:a5:8d:a2:a8:34:14:9a:
0d:6f:08:e3:80:36:27:0e:bf:92:0b:36:7d:fa:97:a2:a0:ee:
70:df:9c:fd:88:e6:8b:e3:5f:8c:d8:e1:b0:a6:d5:0a:d8:32:
f3:3c:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:31:40 2025 by rpki-client