Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: 8A00c6rCm0SYOcLbt5zbXYdzgJYReSzVU4ploukB5s4=
Subject key identifier: A7:A0:5B:81:69:C4:84:6D:C0:F0:0C:A7:96:C2:07:F2:28:B6:96:2D
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 0197B63290CA21D6D8E5F1C5603B254E2401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0C9C
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: WYvYxXxmeX/G61AevrP3q9NpwL9vzOWJl1ldnJS/8/s=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:90:ca:21:d6:d8:e5:f1:c5:60:3b:25:4e:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=a7a05b8169c4846dc0f00ca796c207f228b6962d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:1d:16:82:52:0d:ad:f8:4c:80:b9:9c:5a:
b9:bc:ad:0d:98:3d:5c:58:66:0e:9b:fd:07:92:0e:
83:38:d3:fa:4a:9e:31:0c:09:e4:e3:81:54:74:59:
54:1a:16:ef:b8:a6:a4:fa:9e:0b:36:c8:68:85:08:
0f:8f:31:8d:91:3f:71:cf:5f:4f:23:d9:17:06:63:
12:1b:20:1a:96:3b:36:63:15:16:c3:8b:21:22:c4:
1e:ce:1d:8d:45:33:c8:bc:d9:9f:fb:cd:e8:40:3f:
c1:91:52:4e:a8:7c:4b:19:ff:45:b4:e4:3f:aa:18:
38:64:bb:85:5b:50:51:ec:16:55:86:56:3a:8b:e1:
2b:3d:ca:99:c5:85:dc:13:e6:ce:5e:78:e7:33:4f:
b7:63:f8:6e:91:91:00:21:b1:63:3e:df:fc:2b:cb:
97:94:b1:08:44:d0:f1:dc:fe:16:14:5a:7c:c5:6c:
e5:c7:39:78:47:50:83:85:10:24:54:d0:b2:23:08:
97:11:d8:33:3b:a5:8e:5d:4c:de:9a:bd:1d:2f:d9:
8d:ae:ec:0a:04:69:83:f8:cb:62:5a:a8:32:06:de:
39:24:61:e5:31:b8:8f:ee:c3:c2:1f:da:40:47:45:
b8:6e:f1:04:53:0f:9f:ea:55:bf:1e:f8:78:23:b9:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:5B:81:69:C4:84:6D:C0:F0:0C:A7:96:C2:07:F2:28:B6:96:2D
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f6:a9:b3:7a:0e:a1:5a:b7:3d:07:9e:c8:21:95:a4:9a:c9:
ae:d6:46:0c:c3:81:6b:2b:41:dd:81:bf:59:69:12:13:92:3a:
c4:37:5f:07:fd:58:75:86:eb:9b:6c:fb:c6:07:02:44:84:b3:
86:62:a5:69:68:a8:07:86:96:1e:82:89:3c:ec:f9:0d:8b:65:
82:eb:ac:30:08:d1:2f:a5:26:5f:14:7a:16:59:1b:14:ef:de:
02:bb:37:eb:41:0b:73:fd:0b:f6:95:7f:17:11:db:43:bb:68:
a5:6b:50:00:2c:82:09:c2:30:39:56:4e:96:54:e5:7d:1f:99:
e9:c9:f4:5e:e0:92:c3:fe:46:98:c2:d1:93:64:49:59:71:45:
8e:8a:41:b7:75:c1:ce:4c:ad:88:0f:12:7d:02:14:ad:0f:e5:
a7:22:30:16:72:ea:79:7c:a9:1e:45:f9:42:0f:4f:14:83:e3:
a8:59:4e:63:c2:78:16:8c:0b:6d:34:0a:34:26:d9:db:09:9c:
ad:2f:ea:bf:3f:8d:17:c6:32:d0:d4:73:88:7b:84:ef:a3:c7:
2d:a5:f6:71:15:09:8b:2e:28:8b:f3:dc:30:0f:3c:f9:0d:b5:
b6:d3:e9:c4:8f:dc:e2:7a:56:53:95:c7:e9:dc:04:4e:fb:66:
f1:71:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:12 2025 by rpki-client