Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: r3dUliNf8vfRT33jZXZNct+/mW8MtIxCbcQiMTMNdEo=
Subject key identifier: 60:1D:68:DE:68:1D:1C:3C:E9:76:E8:46:4F:C1:D1:1A:82:F5:29:78
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0197B7EAD02BC2F9A1A5AE8A476BDC39A159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 0D8E
Signing time: Sat 28 Jun 2025 19:01:48 +0000
Manifest this update: Sat 28 Jun 2025 19:01:48 +0000
Manifest next update: Sun 29 Jun 2025 19:01:48 +0000
Files and hashes: 1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: eIH0da8LuWZv44BV7brEu7ejjwNpkyqrTzeufMQVgWI=)
7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d0:2b:c2:f9:a1:a5:ae:8a:47:6b:dc:39:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jun 28 19:01:48 2025 GMT
Not After : Jun 29 19:01:48 2025 GMT
Subject: CN=601d68de681d1c3ce976e8464fc1d11a82f52978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:1a:5f:82:65:36:fe:69:fe:83:88:e3:04:
54:d3:d8:42:d2:ad:9c:8c:22:42:1c:47:c8:37:1f:
aa:d1:cd:0d:4c:7b:45:08:1e:7f:39:5d:52:35:e0:
2a:6d:49:c5:7a:6a:eb:87:7a:51:b2:73:15:52:bf:
82:50:97:1f:68:7a:02:ff:62:97:ad:ff:a4:9f:3e:
58:ff:b3:81:3a:5b:7a:83:d4:5e:26:4a:2f:aa:f6:
a3:08:dd:32:19:4f:58:e1:49:a4:70:2c:92:c9:c3:
d6:f1:25:59:ae:8f:fc:8d:a6:34:29:89:fa:89:47:
24:8e:f8:2d:e4:a4:a1:55:b4:30:a4:59:fa:99:31:
af:51:9a:4e:8e:ba:16:17:7c:55:d4:1f:74:3b:84:
13:86:42:45:57:58:f0:a5:23:b9:0a:16:eb:f4:cf:
67:9f:18:6a:f4:55:07:a9:66:40:74:9e:76:9e:dc:
d0:d8:26:7b:0e:f1:cd:84:f2:19:7a:62:5d:fe:85:
48:1c:9e:41:7a:81:8d:4b:89:ed:39:62:ac:ec:8d:
0d:14:bb:68:a6:89:8f:94:de:df:e1:8a:83:5d:7d:
44:da:67:ae:1d:3e:ad:f5:7e:a7:64:e4:ea:2a:06:
da:c0:ee:f1:c2:c8:ce:57:fd:e2:04:26:ff:f2:24:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:68:DE:68:1D:1C:3C:E9:76:E8:46:4F:C1:D1:1A:82:F5:29:78
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:eb:91:80:6e:a5:6e:ee:a8:bf:d1:e4:aa:22:16:46:b3:76:
62:64:51:90:35:e4:33:93:53:47:c6:85:d0:a6:9c:7b:d5:3e:
7f:3e:c2:b8:a0:56:2c:70:f9:30:b9:22:31:de:1a:8b:38:4f:
59:dd:ff:22:ab:71:36:31:2e:66:52:74:74:d1:b4:73:aa:db:
8f:27:94:84:77:16:f0:a5:10:c0:9f:6e:b5:03:06:ae:2b:3c:
75:be:99:06:53:de:7f:78:f0:0f:46:c1:8c:52:a5:8e:a4:44:
31:d8:2a:e3:c4:1f:89:e2:82:1c:c4:b1:30:3c:dd:af:25:52:
1e:15:06:9c:11:4e:97:61:8e:2e:a5:d6:d1:9a:08:ab:d5:f2:
cc:f2:08:a9:71:83:5b:d0:fc:f6:66:67:c2:e4:a3:12:aa:1a:
02:b7:b5:0f:84:c0:72:a9:a8:9b:fd:87:15:aa:8f:dc:94:79:
0b:da:7c:0f:2f:97:c9:09:be:7b:9d:96:36:6d:f2:e6:c0:55:
d2:82:a7:a7:54:dc:e5:c1:76:24:e3:0b:27:44:9f:1d:ae:68:
ba:1c:3b:25:62:f4:b3:d5:2c:d5:91:5f:a3:4e:ee:45:68:60:
aa:73:3e:b9:b0:d4:a4:da:79:38:af:24:4c:8e:f1:4a:db:39:
57:97:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:47 2025 by rpki-client