Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: Chy2Attkr2yBhJG/5LSJn5TskFpWaQkS5F05kzAJ8AI=
Subject key identifier: AA:30:C5:50:8A:D1:2D:55:18:8C:03:0B:77:44:52:99:96:F3:C1:1F
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 0197B7EA9A7E199BBAADC975C0485D537138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 0D4A
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: a9alr9w5tnfNIrqujwivpQ6lXHE/6H5qVHddQe6+qtM=)
2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=)
3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=)
4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=)
5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9a:7e:19:9b:ba:ad:c9:75:c0:48:5d:53:71:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=aa30c5508ad12d55188c030b7744529996f3c11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:25:4a:3b:78:2f:b0:2e:55:8a:b1:34:30:
d4:f0:99:65:aa:83:87:a6:b0:f9:c9:7e:83:3c:03:
a3:50:56:b0:58:70:32:d4:04:bd:53:93:10:41:f7:
8b:a8:b9:89:52:08:71:e8:b6:0c:d4:22:97:5f:8f:
3f:60:b6:d6:f8:5a:d6:97:9e:19:88:d8:c9:e6:04:
17:a4:f2:f2:78:d2:0c:94:91:44:d4:f6:b8:8d:0e:
e7:ab:90:95:3c:68:00:d6:ef:9c:ab:2b:82:59:db:
da:65:6d:81:c6:e1:a4:16:b3:30:c4:92:92:1f:bc:
64:21:3f:5e:8f:81:3d:4d:c6:7f:c1:07:5d:ef:27:
1a:c1:a2:33:50:5a:2a:b9:48:00:f0:ad:a3:6a:f5:
42:78:38:46:8d:b9:f9:e4:25:3e:61:d5:20:07:87:
4d:30:6f:d6:f6:40:80:19:52:c8:6c:3b:b6:25:86:
42:2e:85:e8:05:b3:e6:01:9a:a6:ca:3c:40:ef:e2:
9b:c3:ec:0f:dd:91:1b:32:d9:75:61:c3:c0:7c:ba:
69:dd:d9:48:ba:3c:79:d0:f0:14:f9:da:55:e7:a5:
a0:ec:39:f9:85:b3:3e:fe:04:ff:fa:6b:04:83:f7:
67:c5:ed:01:f4:ea:37:b9:3f:10:b7:89:88:32:36:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:30:C5:50:8A:D1:2D:55:18:8C:03:0B:77:44:52:99:96:F3:C1:1F
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:4f:93:f3:f8:35:75:d2:a9:58:ca:c3:16:a1:cc:ee:0e:e4:
a0:80:a3:fc:4d:d3:15:b4:52:40:d2:d9:72:01:1c:f2:f7:ed:
c8:6d:c1:ba:92:76:ff:5c:46:8f:a7:22:f2:20:b3:6c:8b:d9:
d6:58:e2:9e:17:2c:d5:71:5d:22:62:c1:ac:df:72:cd:c2:7b:
34:61:dd:c0:77:e5:6c:ba:31:5f:81:f7:eb:99:9e:6e:f0:6f:
eb:77:47:6f:88:2a:29:c0:63:e7:a6:87:19:fd:3d:65:fc:54:
c4:3b:1f:b6:b9:c0:46:d3:ed:68:bb:32:ad:01:ec:46:e3:9d:
85:31:9e:30:f7:f4:d4:f6:d3:3c:36:51:56:3f:4b:35:d0:55:
d5:5c:f3:43:41:5f:9c:e8:53:78:95:f4:4d:04:74:1e:74:2f:
a4:53:72:10:16:cc:77:21:7c:7b:2d:8f:b8:f8:2e:4d:f5:ac:
4a:90:43:96:e9:7e:88:21:84:59:36:07:27:dd:b7:de:3b:10:
fb:4c:c0:50:be:0b:ca:3e:ca:63:ee:28:3a:7d:ea:f6:f0:6f:
2c:8a:7c:d6:15:de:ea:e1:5f:5b:1a:3b:dc:db:dd:97:82:81:
f9:e6:a7:12:62:9b:87:47:41:fe:c2:c3:f1:2f:8d:88:ea:b3:
72:e9:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:54 2025 by rpki-client