Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: 444ZC1OP3S01E7TdUkHrSkeYU5ELFtMM/mE6NfDBrLY=
Subject key identifier: 1C:2A:D1:70:F2:2C:D1:31:65:C3:7C:23:71:1E:7B:3F:19:FC:1E:91
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019848C069B6464285154E4B29D6F7E49F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: thz0N1guVILW9eotHFXHS1JlGwPyuSe4KHHkZINp5YM=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:69:b6:46:42:85:15:4e:4b:29:d6:f7:e4:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=1c2ad170f22cd13165c37c23711e7b3f19fc1e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:a8:a5:9a:f4:32:3d:8c:97:2d:b8:e4:7e:
cb:dd:1e:27:33:4e:29:2b:f8:f7:d5:95:4b:6b:e0:
ae:39:96:3e:54:85:95:6a:00:1c:cc:a0:16:86:18:
29:aa:21:09:6c:f8:b7:14:99:2d:59:32:ba:53:9f:
d0:63:4e:02:5e:51:60:57:7d:d0:55:1c:79:e5:71:
1c:5b:81:b7:75:c5:9c:67:6b:2c:53:5b:76:fe:c4:
2c:33:40:4a:71:89:f6:99:23:9c:d5:c3:b3:f8:d2:
d6:d5:08:30:8b:a4:f1:a2:67:c0:c1:10:6f:60:3a:
78:3c:f7:25:42:3e:e0:b9:d4:f8:b5:85:d2:56:54:
08:a9:dd:e7:f6:74:26:c3:39:db:87:0b:77:f5:b2:
48:89:d5:a4:fd:8c:8e:87:a1:5f:35:9b:50:61:46:
11:2e:a7:f5:0d:56:b0:2b:91:de:cd:23:69:dd:1a:
24:d3:25:2c:16:07:bb:bf:20:3f:79:a7:f7:d6:8f:
86:40:43:f1:70:d3:9c:89:92:57:38:2a:7a:c2:af:
84:40:27:cb:72:20:7d:0c:35:a5:6b:85:fa:95:ff:
ea:6a:89:6d:26:33:ea:c5:8d:41:0f:2a:25:93:89:
62:aa:d3:c1:32:ea:14:1d:04:47:65:34:f1:d3:b6:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:D1:70:F2:2C:D1:31:65:C3:7C:23:71:1E:7B:3F:19:FC:1E:91
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:78:04:08:41:02:af:e3:0b:c6:b4:e4:f7:59:8f:d7:09:
f2:3a:7b:86:9a:f2:04:e0:fb:52:f9:f2:35:bd:fb:d7:1e:73:
ac:9e:91:28:df:3f:36:68:dd:ff:72:9b:ac:c1:fe:a4:c3:54:
15:25:b8:02:26:c0:5a:28:00:b2:92:89:af:47:41:79:86:54:
59:96:e7:0c:d2:4a:e5:47:10:3e:42:29:e8:55:db:57:ca:f5:
e9:40:59:75:d3:80:95:cc:8e:5e:6c:4f:17:2d:ed:17:d4:9d:
7d:2a:e7:31:e7:c6:7e:91:91:57:1d:55:5a:ff:a3:08:27:85:
43:a8:e3:49:96:08:e2:7c:fa:19:05:b7:51:91:6f:14:1f:24:
f2:51:49:54:98:ea:e0:00:f4:73:49:88:89:80:fc:1e:75:91:
67:16:2c:41:10:85:d7:dc:85:24:55:57:d6:a0:9a:78:3c:1a:
45:12:d8:2b:43:ff:eb:2f:60:3e:5f:2a:c4:a1:7b:19:eb:50:
55:7e:d3:7f:c6:59:9d:ad:28:65:a9:48:4a:b9:7a:66:fb:ab:
15:b6:31:f0:b7:53:76:1b:37:14:e9:7b:6e:18:ff:45:0a:68:
f2:41:b8:33:47:e1:0f:db:00:4a:a0:a4:41:8c:39:8e:ef:d2:
b9:81:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:08 2025 by rpki-client