Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier: /59kz1dmO2/SNX3RxjIJEADt8hdIEx6L1qisw+ou99Q=
Subject key identifier: 56:E0:61:D4:C0:27:65:E8:06:20:E1:CB:1D:A6:EB:3C:17:81:AD:71
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 0197B6D74ED10515C0454C2D3E775DF26831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number: 14A1
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: jJLM66bEzp0JbGeowMd6VxTZl1amBAgdQMjCAgxjR+I=)
2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=)
3: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=)
4: iWkENaumrn_VqAXGYeFWSy8pOdc.roa (hash: BifAs92ML2XP6L2w5bLWRZw5RDndqu7o+E6QeoQC5zA=)
5: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4e:d1:05:15:c0:45:4c:2d:3e:77:5d:f2:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=56e061d4c02765e80620e1cb1da6eb3c1781ad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:78:5d:87:28:21:65:40:85:59:83:96:61:
ad:b3:f4:e6:19:c3:b2:fc:f1:6b:b0:88:ea:db:6c:
68:94:15:f5:da:4a:ae:70:8c:f3:75:a4:7b:0f:9a:
5c:be:46:f8:2d:d1:14:c1:70:4f:7d:b4:64:12:d7:
f3:9b:41:33:11:eb:8a:4d:1e:e3:5c:a4:d9:e8:38:
37:2a:07:07:10:b8:0d:1a:b5:ce:e8:1b:83:f5:2d:
0d:6a:83:2f:f2:6f:af:05:5a:9b:3f:cc:4a:f6:18:
9f:88:1d:46:a6:80:43:c5:8b:cb:4a:58:b5:ab:2e:
15:95:3b:04:32:5b:82:f2:33:a6:cc:ae:0f:31:d4:
98:83:9e:3e:25:fb:f3:49:89:17:60:12:94:0b:37:
b9:d0:d5:e8:86:a9:10:b7:6d:f5:4a:a7:ea:b9:d2:
a9:d9:08:ca:7f:7c:50:0d:b9:5a:81:82:2e:85:4b:
05:01:b6:af:79:18:4c:ca:99:6e:33:51:af:75:f0:
b9:ba:7a:04:99:ff:5a:af:25:fe:64:d4:03:8d:f6:
87:dc:ee:c1:46:4d:47:2e:20:1b:c8:ec:6a:a5:34:
62:b5:c8:ab:fe:d4:b1:7f:c7:0a:12:a0:b0:32:77:
16:62:49:34:1d:45:94:2e:54:49:a9:6e:cb:0d:38:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:61:D4:C0:27:65:E8:06:20:E1:CB:1D:A6:EB:3C:17:81:AD:71
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c2:f2:51:cc:5b:87:da:cd:39:75:63:6f:b5:a7:f6:0e:0f:
6c:10:4f:9e:a6:04:af:a1:c1:47:b8:86:fc:16:c1:95:5d:df:
70:79:c6:01:40:4a:9c:32:8d:b8:fb:fd:83:e1:d3:75:35:68:
9c:23:aa:95:7d:a4:17:eb:fc:6a:15:38:dc:7b:9d:5c:7d:16:
1d:9c:b1:64:31:e6:3c:cc:6b:66:3a:3a:e2:e9:81:c0:5d:48:
b5:80:99:69:4c:d8:0f:43:8e:e9:4a:67:29:39:a6:84:10:41:
a1:5c:2a:6f:ad:eb:47:9b:d3:44:fe:5b:2e:0f:c4:6c:a0:e0:
0b:6a:2e:bd:51:6e:5b:da:99:10:93:dc:9d:f7:eb:5d:fe:1f:
91:7e:97:2b:97:20:41:2b:67:c6:09:b9:89:9c:17:0f:39:aa:
ad:c7:69:7b:8a:33:e8:5e:2a:04:f0:74:ad:a8:dd:82:38:e9:
cb:41:a3:5e:35:29:e6:d3:0c:55:b4:f3:03:19:40:b1:7d:f1:
43:46:f5:2f:0a:78:16:71:28:6a:cb:f1:8f:28:58:f9:01:45:
46:27:56:97:4b:83:b7:33:ec:5c:bb:a9:75:77:17:6e:43:5b:
9a:e3:51:4b:3a:fc:f1:37:37:6a:07:4a:be:11:20:cc:30:d1:
0c:88:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:04 2025 by rpki-client