Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: IhEUopUAySl97CJdpO5Bd9GSi+DvUsNcCRbVEaGyDMA=
Subject key identifier: 22:32:86:5D:18:F9:54:79:E3:FD:5E:E0:AA:9B:76:2F:77:A0:D7:44
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 0197B9D8B62052116D975A6E1D4B71B68146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 08D6
Signing time: Sun 29 Jun 2025 04:01:16 +0000
Manifest this update: Sun 29 Jun 2025 04:01:16 +0000
Manifest next update: Mon 30 Jun 2025 04:01:16 +0000
Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: EX9oDhM8Q8syexhDlgLdoEfKyxhWeQCiLZTzSnnrq34=)
2: 5Y3Jwmte8A-d_YlOn8cgBr_VO4M.roa (hash: vSY895Pgffq53GRNLVm1t6+gWyyWT9dNx713Rvp80xY=)
3: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=)
4: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=)
5: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=)
6: bf7MiBVtuN_VY-lMeIniqJDCBns.roa (hash: m1U+Cy0bI+/dKIetpHKZZ9yo7LVmFreBiQ7nhZy+5Fo=)
7: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=)
8: djyQgKDBzjTtDqekGHCbyDvwrGE.roa (hash: cybcX12xZijqQUsvS6pf9buN4wQXxjv+dDk5QDV0/Ys=)
9: meKHpovGdB4bkHh1XXR1ExLPB-w.roa (hash: fUS6khGidxNfptHJmzXmdTQGgfqFk4mALBHny815Klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:b6:20:52:11:6d:97:5a:6e:1d:4b:71:b6:81:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 29 04:01:16 2025 GMT
Not After : Jun 30 04:01:16 2025 GMT
Subject: CN=2232865d18f95479e3fd5ee0aa9b762f77a0d744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:67:05:34:8f:ba:7c:22:c1:fc:a2:e4:ab:
bc:10:9a:01:e1:c6:92:cb:55:bc:27:9d:ee:ed:61:
2a:35:2b:cc:66:75:4f:88:69:82:e1:16:f7:da:9a:
60:6c:e9:e5:ff:7c:c2:9b:07:84:fc:cc:41:a8:fd:
b7:ea:67:a8:e8:ea:c7:c6:cf:56:d0:1c:b1:39:23:
54:4f:9d:99:1c:ff:fc:67:90:d4:e2:ff:bb:df:fd:
60:f3:6e:5f:6c:53:43:d2:3b:00:5b:3d:ca:3c:30:
d8:8e:98:3f:49:0a:a1:0b:d0:4c:00:95:3a:ec:54:
ce:ca:45:d9:41:31:a8:38:e6:d5:41:55:be:10:04:
22:37:e1:04:74:0c:de:43:5c:9a:f0:d6:5d:4b:b5:
07:f6:16:92:5c:a8:1f:fc:b7:49:f6:c6:0d:38:fc:
4f:f2:5b:f8:18:59:10:74:2e:39:ec:1f:cf:1f:13:
13:c4:4f:c6:78:73:ff:2e:68:c9:59:e1:14:14:3b:
b6:6e:7e:30:e2:c2:13:d9:bb:7e:54:bb:de:5c:cf:
73:1d:14:f4:28:bb:a1:33:87:76:f3:ca:d0:9a:30:
79:f9:f7:87:d8:f7:ae:a4:96:32:a8:e8:e6:89:b0:
d9:98:d1:2c:b8:1b:24:57:29:7c:27:3e:ff:e2:9d:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:86:5D:18:F9:54:79:E3:FD:5E:E0:AA:9B:76:2F:77:A0:D7:44
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:79:4d:b6:d0:ca:cd:14:33:69:f3:28:9d:e1:cc:67:83:ca:
5e:b0:7f:65:40:4e:f6:1c:12:1f:f3:49:12:59:44:78:bc:2a:
f8:3a:49:59:2d:d7:75:04:9c:09:a8:d1:1a:d1:65:25:1c:d3:
a2:6c:11:86:ea:1f:c3:e1:90:94:d7:54:c8:4c:8f:71:ae:c1:
cf:b9:da:87:94:e8:77:15:b8:d5:0e:0d:15:6a:62:c4:42:e8:
57:85:c0:69:36:a6:5b:99:ca:24:9a:91:64:ba:0b:dd:70:74:
83:ac:e0:fd:a5:d3:8c:eb:8c:8d:86:aa:29:cc:0a:dd:f6:a8:
da:9b:91:4e:97:71:c0:a9:a5:b3:e9:02:1c:43:32:cb:3e:9c:
45:d6:27:06:33:b7:ae:1b:b6:e9:67:93:30:69:3a:58:d4:af:
d4:13:ee:59:53:f7:ee:cd:93:a3:d9:5d:f4:f9:30:ea:49:1a:
9e:99:83:55:80:5f:0d:4c:9f:d4:ff:ee:4e:a5:2f:0c:4f:c9:
d1:c0:5f:93:5e:e5:6f:ba:b8:34:9c:e8:28:62:b4:c2:2d:3a:
1e:06:73:4a:99:f8:c4:a9:b7:68:ce:f1:f8:73:e1:c0:c6:5d:
66:1a:91:2d:d8:41:15:22:4e:9c:f4:3c:8a:fd:c5:2e:1f:e2:
6c:6d:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:27 2025 by rpki-client