Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: a9zmVpj5VPMWG92L151LWh8ZYyIX5k/57XfrNUznmpU=
Subject key identifier: A6:67:B5:EF:FA:FD:80:6E:C5:01:BE:5F:03:02:E8:0A:5C:7F:8F:FF
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 0198523133E7BC099F60444F46CDE9119D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 18:00:12 +0000
Manifest this update: Mon 28 Jul 2025 18:00:12 +0000
Manifest next update: Tue 29 Jul 2025 18:00:12 +0000
Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: oPC5EceaNvZzBLeTTfO/WC4EzLpJNs51WOQ+YBsOeOQ=)
3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:33:e7:bc:09:9f:60:44:4f:46:cd:e9:11:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jul 28 18:00:12 2025 GMT
Not After : Jul 29 18:00:12 2025 GMT
Subject: CN=a667b5effafd806ec501be5f0302e80a5c7f8fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:55:51:3d:97:79:80:ac:9d:cd:1e:a3:de:
ef:50:6a:b0:61:43:e9:00:0f:f1:93:16:5e:b8:ef:
81:e9:52:65:58:38:bf:09:f9:97:1a:2a:35:4a:4c:
17:10:e5:86:e6:82:88:91:a8:df:89:b7:12:fc:f1:
30:a0:6d:9c:13:e3:4f:23:bf:bb:58:e0:99:58:29:
13:b9:36:4e:ba:1e:4a:24:1c:14:df:de:bb:5e:06:
eb:46:7b:50:0f:0e:1a:30:29:8c:8d:63:eb:23:b2:
ab:80:66:91:8c:e0:04:45:61:30:6c:af:84:44:d0:
70:d3:0f:17:85:5c:6b:e5:bb:fa:8a:d7:f7:a6:28:
57:2a:07:48:54:33:9b:e1:f3:b8:93:ce:67:e9:e9:
85:85:cb:a6:ce:07:bc:f9:2b:57:cd:62:95:24:1a:
3b:2f:08:21:38:d7:47:42:ce:7f:d2:db:56:30:c6:
aa:ae:56:95:5e:63:76:b9:c2:74:1e:84:0a:be:03:
21:27:c9:a6:cb:19:5d:8b:df:6d:11:00:aa:56:39:
90:8a:63:a3:71:53:e5:90:cd:16:08:10:c5:1a:26:
49:22:15:89:a9:ae:f1:29:c3:13:08:07:e9:b4:8c:
96:df:57:d9:7a:82:5a:d3:f5:08:f3:e7:97:8c:00:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:67:B5:EF:FA:FD:80:6E:C5:01:BE:5F:03:02:E8:0A:5C:7F:8F:FF
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:45:7d:c8:a4:90:b4:ea:a6:5c:a1:1d:40:db:bf:e4:6c:
ff:c1:cd:7e:1c:5b:34:c6:ab:cd:7f:81:e1:bb:97:87:49:13:
09:16:6a:87:6a:fb:80:41:00:21:9d:d5:8a:40:5b:52:fc:3c:
c9:ea:f8:bc:0e:a9:2d:3c:36:8d:ab:08:55:0f:9a:d7:ae:23:
45:36:0d:fa:09:93:ce:5c:83:fb:bd:67:8a:3f:92:24:74:54:
af:c5:b0:ea:4d:09:25:ee:15:55:93:49:23:b1:f3:b6:f5:c5:
de:38:43:92:16:d7:0e:54:72:f7:6d:30:a1:c3:4e:e6:99:02:
7d:42:51:b5:a3:64:c6:75:32:59:1f:16:8a:57:fc:74:6e:4b:
cc:19:21:7c:34:f6:b8:90:1f:f0:0c:40:92:1d:d3:63:94:4a:
af:62:36:3e:b0:bd:09:11:77:60:72:19:fa:4c:69:28:f9:35:
42:6a:f2:16:a1:d7:f2:69:b1:2e:34:39:72:28:08:c3:6b:ad:
1f:74:7b:d3:eb:00:e4:b1:4f:cb:ed:69:2e:b2:c0:e4:e7:71:
fe:d1:c4:b2:8a:de:48:6f:6b:60:4c:bb:ed:ae:85:c9:b2:41:
cd:ac:aa:3a:0e:80:1d:91:3f:3e:68:d2:23:17:90:f4:b2:14:
a2:e4:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:10 2025 by rpki-client