Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json)
Hash identifier: j8QiCKE9cSrAKgX6OD/QtCWch1ft9Tm0jFsg4q85n7o=
Subject key identifier: C7:E6:02:77:0C:93:34:E2:26:1F:BA:2B:9C:81:82:BF:C1:DF:7C:0D
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 0197B820E0340C142FA70F2F0DF8A1CE6984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
Manifest number: 7D
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: LLJibeesQNZxmfLkmxT9YNgcJiToBtptY6iQPZSG6bU=)
2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e0:34:0c:14:2f:a7:0f:2f:0d:f8:a1:ce:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=c7e602770c9334e2261fba2b9c8182bfc1df7c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:71:83:82:99:d5:14:e2:3b:1e:bd:05:ff:
ed:b1:d5:a4:46:8b:df:9e:5d:a4:69:a5:f6:28:bd:
d9:a7:ec:62:17:4b:47:97:22:df:f2:5f:de:93:7f:
d5:39:5b:88:b9:98:05:9d:26:fa:54:9c:ea:b2:5b:
37:2a:cb:84:a5:bd:e4:43:42:0b:1e:6b:e0:30:e7:
a1:8f:a5:4f:49:9b:19:4d:56:4f:71:f6:00:31:c1:
c4:af:fd:0b:79:90:f1:0c:dc:b7:ab:e4:e5:5b:88:
dd:b2:2f:43:30:07:79:9d:f7:b9:a1:e9:66:7c:48:
95:e9:f2:18:b6:d1:33:d0:b2:15:b1:87:f6:a2:d9:
a1:c6:d8:44:80:9c:6f:68:6c:ec:68:78:0f:d5:ff:
1a:94:5e:70:58:5f:ea:90:3a:e5:39:6e:b4:79:83:
e0:24:31:99:54:8b:e8:46:8a:41:71:e9:de:89:5d:
21:b5:bf:8a:8d:06:ee:1e:6f:85:ca:cc:61:46:87:
60:cd:09:84:cf:bc:09:ff:e4:9a:72:29:a1:73:38:
b9:e2:d2:c9:2b:5b:8a:c8:15:b7:8d:34:8a:7d:d4:
d4:53:7a:2a:ad:46:bc:d2:d9:7e:8e:c4:f6:cf:09:
3e:76:5d:83:34:95:84:93:cf:bd:ad:32:da:49:f0:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:02:77:0C:93:34:E2:26:1F:BA:2B:9C:81:82:BF:C1:DF:7C:0D
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:3c:e4:60:b2:e3:e5:04:4c:2d:cf:24:0c:8c:8c:8c:91:
68:45:5a:da:2a:8d:d9:f2:e3:06:25:5a:ab:1b:20:93:41:04:
87:58:35:54:03:8b:f3:4b:83:24:9b:07:e7:b9:65:28:ca:c8:
e5:31:be:5e:71:18:86:e1:bf:79:19:d9:c5:19:07:7c:ca:cc:
1d:16:f0:73:09:c7:8d:86:37:a2:ed:73:fe:ee:22:fc:78:3b:
02:c5:12:bc:1e:8d:e4:a3:58:db:1d:ab:aa:58:cb:cb:b4:3b:
df:03:3f:e2:19:de:3e:c7:47:3b:24:64:cb:11:32:17:ff:ea:
4f:7f:8a:b5:9f:13:b4:fa:3e:48:0a:08:49:ea:8e:f8:b4:4e:
af:03:01:bd:ac:ea:f4:24:9f:14:77:74:a0:91:06:d8:02:87:
d8:ec:2d:e6:17:a1:74:f0:7f:b0:40:5b:48:44:1b:7b:98:e0:
de:b3:a9:3e:a7:b0:f4:0e:87:01:f9:12:3d:bd:c6:2e:4e:c9:
d3:0e:03:64:f0:ad:a0:4e:4e:54:99:75:22:1a:37:a6:3a:25:
d3:a9:18:35:b2:ec:dc:34:61:fe:69:b3:c6:42:20:17:d4:64:
07:66:b4:f7:33:35:fa:2b:c7:77:08:84:0e:12:bd:53:09:43:
c7:db:54:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:20 2025 by rpki-client