
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: xydnlcsSFjK2HmoBtqEFy8Ku356f8w0b2gW1BeZYR40=
Subject key identifier: AA:50:0D:93:53:83:D4:23:FF:44:E1:3E:09:1A:83:DE:E8:54:8B:6A
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0197B6A19473A38B4A132DAC4030D8612475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0E32
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: zy6/cYoQEWUQFJewYh7YwplaPObFMTiWKWnnNXK9eeI=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:94:73:a3:8b:4a:13:2d:ac:40:30:d8:61:24:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=aa500d935383d423ff44e13e091a83dee8548b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:81:fa:6b:08:97:63:a9:e3:bc:78:cb:a5:
0c:d1:fe:5c:20:1f:db:ed:ca:e5:ef:ef:03:2c:26:
ad:5a:ae:7b:dd:b3:26:f6:2d:07:2a:3d:26:8b:d6:
9e:d2:e3:09:59:08:10:1e:25:68:a8:9c:53:89:6d:
67:24:6a:86:47:5f:03:7f:1d:16:e9:e2:cf:99:33:
27:5c:92:68:1a:3e:4f:ae:62:0f:3f:7c:a3:fd:52:
ab:92:5d:08:5a:28:33:f4:d7:d0:be:54:be:52:23:
7d:4b:38:1e:d8:96:da:c4:36:06:89:cf:b9:82:de:
48:42:37:4b:61:15:b5:d6:59:dc:b1:bd:ea:43:85:
30:0e:83:ed:b3:91:65:84:53:84:ce:d6:d5:09:a6:
8c:aa:91:62:7e:d4:ed:bd:35:81:1a:28:f9:e0:7b:
51:25:69:8d:75:29:4b:d1:4e:54:2d:10:95:e0:35:
3c:7d:c3:d3:4b:69:9d:36:cb:30:42:fa:98:e0:65:
e5:37:f2:c8:28:0d:02:95:c1:5a:5e:a1:29:7d:9d:
d1:24:78:78:00:d4:82:3f:e9:1e:d6:ec:e0:37:02:
62:d4:1e:54:0a:cd:a3:ee:81:a0:b7:39:e6:ba:5e:
1d:ee:91:e1:59:df:34:fa:d2:c6:3c:7c:82:5c:65:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:0D:93:53:83:D4:23:FF:44:E1:3E:09:1A:83:DE:E8:54:8B:6A
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:c7:08:0d:21:50:6e:49:10:51:af:e0:36:a9:88:7c:0f:
1d:21:28:e9:a0:c9:e7:76:24:e3:dc:00:9c:8b:6a:81:76:2b:
61:d6:a5:4a:59:3f:cd:bb:4c:c6:c8:70:65:4c:f3:b1:fc:58:
af:3a:52:ed:a9:b8:47:ee:ff:8d:f0:b8:67:5a:7a:26:4a:64:
f0:7c:db:f8:a2:47:61:21:a7:99:63:4d:fd:9d:29:48:b3:53:
49:58:17:a8:c4:7b:0a:2b:2e:f1:ef:b5:ef:a0:cd:1e:78:04:
e9:24:2f:4e:78:36:b0:51:7b:ad:7d:59:53:93:1c:c2:d2:45:
f8:60:26:af:a4:11:23:00:fb:c1:6c:03:b2:48:a1:3d:6d:35:
35:16:81:ec:61:74:d6:6b:03:c1:21:18:de:b2:d8:3f:93:8c:
f9:1b:9c:d1:c0:2e:66:6d:fe:b6:ab:3d:03:ee:c0:0a:6c:c4:
65:7b:f9:5c:86:dd:ac:ea:a4:38:66:78:67:72:09:b9:c9:00:
2c:db:f4:53:f2:73:ae:e4:21:b1:5e:a9:0d:fa:49:4b:e5:1f:
fb:4f:4d:f7:33:a4:c8:4c:60:96:8f:76:94:e9:af:bc:e4:2a:
8a:84:b8:23:48:36:c7:1c:4c:e8:81:55:34:82:92:1f:d2:a2:
72:54:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:31 2025 by rpki-client