Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: wTqRo6Yan4MtmpTgGdW9OccEUwwVFyIYmhc6Uq+n3+c=
Subject key identifier: 66:6D:BD:60:FF:B5:C9:0D:65:CC:15:F3:CE:5D:70:75:84:74:06:00
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 0197B77C7C7925731E2FDDC98917ADD78AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: yKlkJsvly1WKagoECka1gUtHuah+LQeQMNPU296iFkQ=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7c:79:25:73:1e:2f:dd:c9:89:17:ad:d7:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=666dbd60ffb5c90d65cc15f3ce5d707584740600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:b0:38:c8:bc:76:4a:61:89:1f:67:9d:61:
0c:a1:34:ab:29:4e:89:ed:53:9f:20:44:ed:e0:ca:
5c:fb:e3:a2:1f:4f:57:6a:35:62:ef:1d:85:4e:27:
95:2d:e4:52:e9:cb:89:b6:49:9a:3e:0e:1d:d2:d6:
f5:31:4d:52:3f:be:2f:1d:5e:f8:4e:8c:78:7c:8e:
a6:3a:d6:22:e9:2e:ed:16:3c:b1:c9:a9:0c:03:f6:
e6:24:9d:3e:77:8d:6b:8a:9a:70:1f:59:e6:b7:fa:
7a:30:f6:64:24:2c:31:9c:3e:5c:ec:e4:dd:12:08:
d0:b7:5f:39:3c:16:1d:d0:94:b9:e2:34:6d:37:33:
23:7a:2d:6e:65:03:22:65:e0:21:f2:e4:68:cf:41:
fd:9a:96:59:19:64:b3:33:9e:d8:73:36:78:55:4c:
03:6e:87:d4:25:67:2d:39:a6:00:54:b3:52:d2:13:
fa:4e:91:67:7e:f4:fd:55:16:b6:bd:e9:cc:52:c3:
f8:4a:b3:f7:a8:94:f7:cf:6b:09:33:d0:19:ca:af:
1d:6b:d3:12:36:13:3f:da:23:e7:4f:01:e3:37:82:
04:86:97:f1:ab:2a:af:a3:86:d6:74:9a:77:de:48:
ff:d9:4f:b5:b1:b7:ad:eb:a3:d2:08:c2:83:31:ff:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6D:BD:60:FF:B5:C9:0D:65:CC:15:F3:CE:5D:70:75:84:74:06:00
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:55:54:84:ca:ee:df:5c:97:7f:2b:9d:bb:a6:42:56:80:
3c:29:e6:8c:47:13:89:4b:ff:48:74:00:10:90:ee:9a:8c:15:
2e:e9:55:2e:2c:68:fd:18:9f:0e:50:02:18:e1:f0:c2:17:4b:
1e:a4:93:43:bc:49:94:54:63:26:73:10:9d:7c:99:77:e2:eb:
37:5b:7f:82:18:61:f0:a3:90:59:8a:26:52:5c:45:88:72:6b:
fb:6e:78:8b:98:e5:5b:d0:82:70:a9:1e:a2:f2:2d:91:76:02:
05:23:52:ad:27:88:1d:95:d9:bd:34:4a:ce:00:7b:20:a3:5a:
c5:8d:af:12:5f:04:3a:3b:60:f2:5b:e2:54:f9:aa:82:d9:49:
60:2d:62:4a:cf:da:7b:ef:a4:bd:fa:91:9d:24:dc:a0:8b:a5:
17:bd:d7:40:9c:3b:37:9e:b9:4d:f1:04:a9:43:1c:cd:2d:3c:
88:3a:d8:43:58:5d:76:e1:bb:91:2e:7f:3b:3c:45:25:e3:d8:
4b:20:7d:cf:54:3b:da:4a:6a:eb:6c:c4:a0:65:ce:a0:76:ac:
eb:c5:06:15:a5:b0:c8:00:35:0c:74:43:ec:51:e4:d2:a3:01:
8d:41:99:f8:aa:1b:f2:28:0a:ec:90:6c:a3:ef:70:87:dc:0c:
4d:36:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:21 2025 by rpki-client