Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: mjVnegdLSp3OU/gSFDZsekX++8C2jOrkBG8eqjK6oRk=
Subject key identifier: 9D:5F:9E:0A:FF:82:73:BD:F3:6F:E1:EC:2C:9F:D1:D0:14:1D:79:B9
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 0197B5C4E8A4EADB3893B28F70DB4B28AA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0937
Signing time: Sat 28 Jun 2025 09:01:10 +0000
Manifest this update: Sat 28 Jun 2025 09:01:10 +0000
Manifest next update: Sun 29 Jun 2025 09:01:10 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: erfEiOK4aVUH05vwOATSoqwMSQ0kBEH+cJHDW3onU+Q=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e8:a4:ea:db:38:93:b2:8f:70:db:4b:28:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Jun 28 09:01:10 2025 GMT
Not After : Jun 29 09:01:10 2025 GMT
Subject: CN=9d5f9e0aff8273bdf36fe1ec2c9fd1d0141d79b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:60:fe:25:b1:8b:6c:e2:39:72:53:ff:04:
2b:b8:0d:d6:8e:16:39:aa:c5:63:a4:b7:c6:d1:b3:
e1:ea:bf:80:e9:e8:3f:77:36:7e:53:5f:9e:7b:51:
9f:8d:e7:c3:62:b1:30:db:50:4a:8d:ba:e3:26:42:
cd:d1:81:d1:e0:9b:83:73:9c:03:6f:b8:c6:6a:da:
eb:ee:1d:3a:f2:ce:8a:e1:be:1b:26:ad:65:a4:8a:
d6:c7:b2:9c:7f:5b:08:5c:59:09:ff:f9:d6:9a:00:
ee:d0:4c:c8:4b:4a:bc:f0:f6:d2:4b:f8:3b:6c:27:
b1:aa:4b:2d:c6:e9:35:8a:c4:1c:42:3b:91:75:1a:
a1:53:c7:d4:53:ea:4d:ce:46:73:0d:66:68:eb:cf:
75:00:51:91:b8:5e:ca:94:76:cc:74:3a:de:91:92:
76:17:b4:f4:5c:42:0b:36:c8:ee:96:8e:ea:6a:98:
ff:2e:52:aa:ea:2b:bb:85:6d:cb:60:5c:b6:0b:b7:
6a:a6:48:bc:64:34:50:62:86:da:71:54:17:4f:57:
80:b6:22:5d:c5:4f:0e:92:f9:f9:9f:c1:9d:97:88:
b9:c1:66:40:ff:b2:c8:3d:58:90:97:2c:a5:e4:06:
0c:d2:68:4a:44:a1:26:54:c2:d3:cd:86:c9:f9:36:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:9E:0A:FF:82:73:BD:F3:6F:E1:EC:2C:9F:D1:D0:14:1D:79:B9
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:93:f1:33:79:85:a1:61:e5:e5:70:82:c4:80:a4:06:b2:3f:
1c:70:a2:28:70:88:8a:74:da:ce:d0:02:03:ad:d4:2d:a3:c5:
cf:2f:a8:7f:d2:b6:d0:27:7f:88:40:4b:92:5f:81:eb:d9:d4:
4d:38:68:c8:e5:f0:98:e9:5c:b3:da:67:d7:02:41:c3:b9:a0:
41:61:b1:74:29:7a:2b:c3:f7:2e:66:4a:18:79:2f:f9:39:bb:
f7:e7:08:fb:20:52:d3:d8:ba:4f:d9:17:df:5c:23:bd:4a:26:
a3:bf:81:b7:54:fb:e6:2f:29:bb:de:18:cd:19:84:cd:6e:c2:
68:89:18:b5:2b:4d:ff:0f:ad:73:a7:f7:86:8e:a0:dc:c8:fc:
8f:a6:9d:94:c8:b5:b5:08:b2:02:8d:d9:3c:ff:cc:7e:e2:dd:
44:bf:65:f7:83:b2:6f:d3:df:47:10:01:15:e6:f0:d7:fa:77:
f3:3b:fa:ed:11:0e:a0:cf:be:8e:00:e4:60:77:00:b5:96:65:
2c:06:55:25:2a:72:1b:2f:17:b7:e7:b0:9e:3f:76:77:4f:51:
4e:31:2f:fb:f2:d1:23:16:9f:c7:01:44:9c:3d:c0:c9:54:d9:
6f:86:94:bc:c6:84:26:e3:9e:ec:cf:07:a7:ef:a7:00:25:25:
98:4e:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:19 2025 by rpki-client