Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: 3oeiVmDf6ufD5CO5j8E4S++xVpdYrgX6q2YINwmiVTY=
Subject key identifier: DF:56:6A:10:83:AB:52:6E:6D:A8:34:14:43:B6:7B:36:DC:D1:4E:66
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 0197B6A12575D55CBB496BAAFB667D511DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0575
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: tYB1memm4kv2eBNH8xlgkbNC/nNIY5/1FYWOZ6qHUI8=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:25:75:d5:5c:bb:49:6b:aa:fb:66:7d:51:1d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=df566a1083ab526e6da8341443b67b36dcd14e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:a3:80:ec:7c:2a:15:16:05:a4:2a:69:ae:
74:71:6c:61:af:74:68:4b:74:c9:1f:08:0d:ff:2c:
98:e2:70:c2:93:c3:99:92:f2:85:13:b6:c8:f0:0f:
a9:85:0c:20:fd:b4:44:e9:d2:0a:93:df:74:4a:3a:
68:51:14:fb:f2:5c:4e:8f:c2:91:e7:8a:cf:9d:bd:
db:f6:ca:a1:b7:50:b3:37:0e:ff:4d:1c:95:22:62:
12:04:f0:cd:31:5e:4b:c4:0a:cf:56:71:75:55:d6:
a7:64:66:2f:aa:a7:5a:75:2d:a5:d0:bd:fe:c7:58:
aa:0c:a8:9c:63:71:9b:d5:70:0f:40:08:b7:30:e1:
c9:af:77:21:dc:37:a2:54:ca:1d:c4:5c:c4:4e:64:
6e:2e:0f:c6:3a:a9:b3:75:e0:67:87:2e:5a:6d:0c:
77:eb:ad:30:2a:95:10:41:f1:5e:ef:c8:3c:c8:dc:
27:dc:08:3c:55:99:c8:e7:02:b5:c0:57:d9:39:d9:
15:26:61:17:aa:64:a4:b0:7a:52:4f:1c:a5:59:d4:
79:c1:61:10:35:6d:88:2f:80:43:68:71:96:99:96:
f6:9e:c2:e8:0a:9f:9b:c3:85:2e:a9:1f:f5:28:0b:
da:f5:33:d6:af:f3:e1:c6:68:af:fe:2b:07:76:96:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:56:6A:10:83:AB:52:6E:6D:A8:34:14:43:B6:7B:36:DC:D1:4E:66
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:fd:5d:a7:22:ec:81:2d:99:17:19:79:d9:7f:c9:93:4e:
56:bd:bb:6a:97:00:46:95:bc:f5:3d:e1:2f:91:74:ce:9b:bb:
6d:f1:d6:90:91:16:d5:27:de:2d:58:8a:9d:38:0d:aa:18:99:
40:c5:6d:10:d1:ae:78:61:a1:65:95:af:b2:71:3b:f8:0f:db:
78:37:ff:d9:0b:8a:2f:eb:ee:4a:eb:7e:14:f7:c6:43:3c:ec:
04:67:2d:c5:e0:7e:22:fa:55:a4:29:17:4f:b0:d3:fb:46:a5:
d4:19:17:54:24:3f:5f:ba:16:39:4e:81:3e:0c:10:88:ae:72:
0f:b0:75:8a:65:89:2f:cc:63:83:89:c3:1b:78:f9:8b:e0:62:
25:87:a3:c9:af:30:d9:2a:ce:e5:fe:d7:3f:e4:0c:24:73:5c:
21:07:b5:9e:52:65:98:d5:a9:5e:d9:aa:e9:4d:5d:c2:c2:bf:
a6:b8:cd:40:ae:90:11:6e:77:14:96:8a:3c:1e:a3:64:d8:1e:
dc:99:b2:5e:e7:f0:16:d8:a7:47:17:0f:bf:0e:8f:57:73:d6:
73:7d:c1:fd:08:4a:1c:23:14:53:91:0b:80:50:4c:82:af:be:
99:5b:97:10:05:b6:4d:85:7d:be:cf:2c:94:85:c9:03:dc:df:
ea:8f:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:00 2025 by rpki-client