Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: xkBAMi9+NsTM+DZmrb2W0OQ98b4tRQbY3OmicfAvs/M=
Subject key identifier: 4B:E9:6D:D9:AE:2C:C5:B0:E5:DD:C5:8D:6F:83:0A:C5:71:70:15:D0
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 0197B77C0E59AD7EA4A33CA7664B2B2E42FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 147E
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: EzyLFJiyLEue8PfT6snEDjw5KTUWE9jiN+KLbviYgYY=)
2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0e:59:ad:7e:a4:a3:3c:a7:66:4b:2b:2e:42:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=4be96dd9ae2cc5b0e5ddc58d6f830ac5717015d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:12:59:0b:4e:20:8e:f6:c5:68:a1:f1:bc:
4d:bf:a2:62:0d:1d:3a:90:44:64:7f:1a:fe:81:f8:
74:b2:fd:1f:97:8e:15:86:08:64:95:00:4d:2f:32:
ff:c3:fd:4a:94:d9:79:e7:1d:ff:ca:19:5a:c1:30:
43:5e:9e:ae:cc:59:46:9a:54:71:bb:f0:63:87:dd:
71:ee:3c:61:19:15:90:f8:f0:e6:50:cb:b7:dd:d6:
0e:d7:6e:db:c6:2d:e1:0b:9a:e5:f8:49:ec:d1:ba:
ba:3f:20:f0:12:93:db:cf:cb:19:6e:fd:13:bb:1a:
4e:d3:4c:af:f4:be:79:b8:f8:9e:05:4e:65:77:06:
72:26:0e:fd:dc:6c:76:26:c7:c5:7b:e4:10:b2:48:
4a:03:be:8c:0b:cd:d9:25:8e:0c:4c:12:d6:d0:e0:
b8:8a:a7:42:64:5f:eb:4a:73:88:db:cc:8b:d0:d2:
4a:4e:38:0f:6a:cb:d6:d5:75:07:30:27:cb:23:81:
93:6f:d1:8c:b8:2a:7f:70:97:91:78:68:2b:f2:ae:
70:41:0c:0d:66:fc:a0:4f:e0:d3:9c:2a:70:ee:18:
3b:37:8b:8f:bb:4e:a4:54:a1:9d:70:05:05:f4:9b:
9a:aa:5d:61:89:d4:bb:87:09:3d:32:f9:82:87:df:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:6D:D9:AE:2C:C5:B0:E5:DD:C5:8D:6F:83:0A:C5:71:70:15:D0
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:8c:21:e1:54:42:31:36:14:4e:2b:15:81:3c:30:68:60:
68:15:87:36:49:c7:f0:ff:51:6c:df:8c:39:a2:c1:11:c5:ed:
db:99:24:bc:75:dc:73:98:d9:6a:bc:ab:a6:4a:12:90:88:28:
1c:4e:c3:4b:80:27:74:6f:1f:2e:52:2c:ab:f3:66:de:89:25:
ee:5d:42:73:ec:40:d0:11:de:e7:7e:87:2b:8f:3b:80:8c:ea:
90:9e:25:d3:8a:90:70:da:5a:52:ba:c1:70:4b:50:71:2f:85:
7d:e5:db:ac:ac:42:0e:c0:a7:6f:e3:52:dd:25:54:2a:5e:9f:
2b:8a:bf:b8:5f:69:6c:bd:56:4f:6d:9e:d9:2d:be:db:7c:db:
c8:ac:85:53:7d:da:d0:47:9b:91:7f:bf:77:4c:68:c6:d5:78:
7e:2b:0b:33:32:fd:9b:ae:7c:9b:14:4a:e1:85:c0:89:8e:41:
f6:15:e6:23:09:89:f8:eb:f8:17:8c:de:e0:af:4c:16:cf:be:
c3:39:fc:5e:80:19:b3:2a:be:fe:ae:09:26:08:dc:4a:56:02:
a3:7f:67:63:b8:af:37:5d:b0:d0:8d:94:a1:85:9c:12:12:e6:
49:ec:ce:7b:5d:8c:1d:c7:5c:99:e4:90:d0:51:91:d5:07:28:
dd:43:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:30 2025 by rpki-client