Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: uLBUSal9LoRUtJrUg27236ijFj4h99M1uG0zoMhR8OY=
Subject key identifier: 28:7A:30:E2:CC:52:BE:F6:DF:91:D3:7E:D7:B8:B7:89:CF:F2:D4:67
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 0197B7459816FE3E3EBE1E6EEE64FDE45267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 127C
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: aBYlqE+wvNucwvKreTt+rd8aVMq6K0hlTlsCGcCbAWk=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:98:16:fe:3e:3e:be:1e:6e:ee:64:fd:e4:52:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=287a30e2cc52bef6df91d37ed7b8b789cff2d467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:81:4d:fd:84:d6:ab:14:df:01:f9:1a:a7:
75:c0:53:5d:fb:cb:2d:d0:8a:b8:36:98:e9:aa:08:
fb:34:f7:f1:e5:be:28:f9:41:e4:a4:32:34:fe:59:
e1:2e:21:11:bf:a9:55:79:07:e9:7c:a4:03:b8:50:
f8:b0:11:3a:f4:7d:d0:d2:40:cf:e2:e5:03:93:1e:
69:58:d7:2a:8e:f5:fd:e8:b9:51:a3:37:65:ed:db:
4c:88:65:b7:15:49:ca:8e:f9:c0:a6:90:d5:12:77:
2c:dc:0a:af:6c:5c:be:7e:5d:ab:f1:ec:b6:a6:65:
bf:d5:72:f9:dd:50:7d:ec:e1:f3:cd:4a:98:c7:43:
c0:43:bb:ad:b7:fe:e8:d3:31:83:33:81:8c:43:42:
ad:79:84:f3:37:a7:c3:a0:fd:87:7f:26:c4:58:fd:
66:13:3a:72:26:01:9d:ee:00:64:65:aa:30:98:b1:
67:48:cf:b2:ab:65:d5:7b:31:23:df:b4:24:f8:38:
63:4a:40:d4:9b:e6:67:26:5c:df:95:70:79:d0:b6:
8e:7d:dc:2c:d9:e4:34:6d:ff:a9:ad:54:ec:42:bf:
b8:b4:dd:0c:4c:1e:83:5b:d7:6d:37:54:1b:6d:3f:
50:75:e7:67:a2:fd:3b:5a:81:ac:3d:4b:de:e7:18:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:30:E2:CC:52:BE:F6:DF:91:D3:7E:D7:B8:B7:89:CF:F2:D4:67
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:4e:bb:17:1a:0a:49:74:71:06:66:d5:f6:c4:9b:41:ab:
ea:36:fb:95:a5:6a:81:22:9e:7c:4c:d9:b6:11:c7:b9:1e:2d:
4c:a7:c8:28:6e:8c:01:94:76:61:9e:da:3d:f8:34:f1:9d:99:
12:a3:b2:62:89:06:59:19:36:fd:c7:9c:02:47:81:4b:ac:b1:
f2:b3:96:e5:32:0e:f9:7d:d1:82:c7:66:0b:97:90:e5:7c:34:
10:60:e1:8e:77:53:51:5e:bf:d6:45:02:54:b4:41:2c:ad:d5:
7d:cc:11:97:6a:00:1b:88:a2:33:8d:7a:0e:27:a5:1d:a4:ed:
51:e3:f6:f1:b6:fe:61:88:0a:c5:b5:ca:47:6a:1d:79:dd:0a:
58:6a:91:6a:79:41:b7:0f:7c:4b:5e:68:ef:4e:e6:7a:ab:aa:
ef:77:72:4c:c4:bc:07:6a:b7:80:81:f6:e0:52:df:d7:95:68:
71:16:c4:99:e4:53:55:49:ae:40:2e:59:4f:c6:98:6d:0e:94:
cb:49:f6:a0:8c:3f:0c:4e:b2:aa:05:b0:87:aa:59:e1:23:39:
ed:56:16:82:b9:c3:8f:1f:e1:ea:a3:8c:71:31:b2:ec:c5:be:
2f:b2:ef:cd:07:99:ae:0d:fa:5c:6a:08:20:5d:d5:c3:0d:0d:
06:c8:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:39 2025 by rpki-client