Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: mRk8pRImsc4SGA6TnfmSeKwCJ6KBGHy/c8P2oACbQyQ=
Subject key identifier: C4:42:49:38:2C:5E:1E:F7:9E:35:C2:9B:93:DA:82:32:0E:7B:9B:A7
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 0197B7455D61587B339A868EFFF0614B2DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 0E20
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: VV6wjn9KTcFwl1YAbU6qtl67aUQfzd3yDDVSKRiITdI=)
2: 787WsGeG_PtOH4NifJLvSRcdjKE.roa (hash: LXK7T54I67xPwZvLYoiPIC1z9h7T9ebkz0cAqwvP0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5d:61:58:7b:33:9a:86:8e:ff:f0:61:4b:2d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=c44249382c5e1ef79e35c29b93da82320e7b9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:b4:91:6a:bc:82:15:cc:eb:f5:0c:0b:b8:
48:d2:16:31:2f:0b:43:71:c6:2f:80:2e:6e:2d:d8:
a9:cd:80:f6:8f:d2:07:23:90:d6:60:8e:a2:f0:e2:
3d:c7:a4:7e:9c:1b:28:5c:76:5d:88:0f:95:19:44:
40:bc:08:ad:09:1a:ff:14:09:ae:94:24:39:31:c9:
0a:ee:18:36:b3:ca:c1:f2:24:1b:94:ae:28:8d:96:
02:d8:dd:05:36:6b:22:f3:4d:84:4f:25:cd:cb:94:
14:60:af:82:95:9a:b7:84:a6:3d:c6:ee:d7:c5:3e:
d8:fb:43:74:11:37:dd:65:9b:14:0f:29:0e:27:23:
42:4d:8d:06:9e:24:87:5d:1c:f9:9c:58:98:30:a2:
3d:16:a6:b5:c7:27:5b:dc:9a:4b:4a:8f:37:39:40:
28:e5:4e:06:60:87:21:cd:2f:67:1c:8a:fb:d8:5b:
79:57:9a:67:33:30:dd:0b:e1:42:57:27:6c:a9:2d:
af:f0:4a:a4:42:1b:87:88:a9:a4:1c:61:c5:7b:45:
05:d6:3d:f0:f8:84:b0:dd:1d:1d:4b:b4:12:e7:89:
7f:6e:47:f0:c1:59:e9:cc:31:f2:0d:f1:bb:af:ae:
ea:a8:d2:78:90:5c:70:bc:7f:af:38:9b:41:9e:e4:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:42:49:38:2C:5E:1E:F7:9E:35:C2:9B:93:DA:82:32:0E:7B:9B:A7
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:e3:79:b0:25:9e:47:b4:dd:4d:5a:d1:53:d6:ee:6b:7e:
71:7b:d2:8e:ad:4a:b4:05:b3:05:2a:c6:e1:08:65:26:c0:32:
43:31:bf:4a:d9:56:00:d2:5c:8e:5c:c4:73:a2:25:c6:4e:95:
c1:62:a9:d5:d1:d2:73:18:02:e2:21:3a:cc:7a:8b:58:ac:f0:
9e:1c:b2:de:9e:5d:cd:89:00:46:be:4e:99:9f:46:a3:4c:19:
59:7a:df:ed:de:77:ae:45:72:7d:c2:2f:09:e5:bf:6d:ae:9c:
00:2f:af:a4:2a:95:fa:d0:0d:dd:b4:55:a6:1b:b4:25:72:18:
00:73:9c:15:96:48:c7:56:ec:90:5f:c4:dc:bb:73:87:36:76:
11:4c:87:89:a2:97:c2:f0:29:ab:8a:da:d2:8c:b2:71:10:98:
05:58:6f:dd:e7:11:c9:32:ce:ad:26:66:c7:29:2f:c1:d6:59:
94:12:48:67:14:5f:bc:b5:08:ca:cf:aa:7d:30:b7:16:d1:e2:
60:69:14:5b:bd:14:d2:ff:e0:80:57:15:5d:84:27:58:0b:a3:
45:75:59:ae:bb:d1:52:0a:be:2f:58:04:d5:16:20:10:5b:fd:
e9:f0:68:c3:e7:ef:bb:b1:fc:b6:8b:e0:af:0d:fb:9f:14:6d:
d4:04:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:52 2025 by rpki-client