Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.mft (raw, json)
Hash identifier: WSUasOHFu9ZfIBaWN9skhYRxsbyi5F3OaWB0/SYb/rw=
Subject key identifier: 0C:64:DB:97:11:BF:5A:D2:60:AD:26:3F:94:86:F6:86:64:2F:0B:57
Authority key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Certificate issuer: /CN=da296bd0031d6dada6c73073608f3d11e445ce44
Certificate serial: 01984965F6CF71F43B5D69ABE600FCBEEB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
Manifest number: 0443
Signing time: Sun 27 Jul 2025 01:01:15 +0000
Manifest this update: Sun 27 Jul 2025 01:01:15 +0000
Manifest next update: Mon 28 Jul 2025 01:01:15 +0000
Files and hashes: 1: 2ilr0AMdba2mxzBzYI89EeRFzkQ.crl (hash: vIyaXcj6zYTBUBZ01w2Zp5ttKehVcpwf11WoHb9U7tY=)
2: xbFh-XL0EOh1euSo-ddC7jaGUKM.roa (hash: 8IT/bBcEgFQE8EaggOanI6nAulFvf6rnXMDUQLI1njI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f6:cf:71:f4:3b:5d:69:ab:e6:00:fc:be:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Validity
Not Before: Jul 27 01:01:15 2025 GMT
Not After : Jul 28 01:01:15 2025 GMT
Subject: CN=0c64db9711bf5ad260ad263f9486f686642f0b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:3e:15:03:48:ef:87:dc:6b:5f:f4:e8:69:
ba:83:46:e1:c7:3e:1a:d6:a2:3f:91:86:28:d3:46:
00:12:f9:32:0c:90:23:55:c7:ed:1d:df:57:29:82:
4f:6b:63:9b:fe:60:02:b4:a9:1a:b4:40:26:27:63:
e2:0d:f6:cb:ea:3f:d5:44:94:90:32:41:58:d0:45:
c1:23:96:73:7b:44:08:d9:af:11:d1:4e:39:40:a5:
c5:ae:92:97:c8:78:94:ba:c9:60:bf:9a:0d:7e:b6:
6a:f3:45:82:91:37:7e:fb:22:0a:fb:1d:6d:ef:f1:
42:74:22:f4:a3:2a:de:2b:3c:28:d2:76:a5:3a:45:
da:33:4e:fd:a0:be:23:3e:89:61:6a:4e:ff:98:99:
63:94:14:1d:52:96:c0:50:ed:cb:4d:d8:c3:83:2a:
7b:f5:e9:69:e1:a3:7d:a5:6f:c5:29:3d:30:5a:da:
eb:50:10:a3:e0:ed:f3:79:e1:fe:37:40:bc:61:3c:
bc:e8:2c:f4:78:ec:cb:1e:88:e0:bb:4b:1a:25:fc:
b2:6b:35:aa:59:7c:7b:33:d0:72:da:03:aa:4f:31:
48:d3:b0:2b:c2:72:87:04:d3:d9:21:8e:ad:30:f8:
fc:39:59:ec:5e:45:ba:60:a3:94:71:82:de:0f:33:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:64:DB:97:11:BF:5A:D2:60:AD:26:3F:94:86:F6:86:64:2F:0B:57
X509v3 Authority Key Identifier:
keyid:DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3e:cd:b0:99:5e:6a:4a:6a:43:18:bb:4a:b7:8d:7a:84:dc:
bb:aa:32:2c:31:68:fd:e1:fd:4e:66:cf:d5:b7:00:ff:51:0f:
d9:4a:a0:3a:5a:fa:84:42:2f:75:55:b8:cc:70:05:86:cd:76:
bd:b2:a7:a0:92:ca:c7:7b:e9:36:05:2e:64:4b:72:7a:27:58:
4d:c7:20:79:45:f0:16:e1:d2:43:2a:87:5f:b3:b5:d3:58:0a:
ed:8a:29:db:ff:79:45:72:67:76:9b:78:b9:79:8e:3e:dd:23:
e8:24:44:52:01:44:2c:ca:d2:a4:af:c0:e5:93:8c:6d:6b:57:
4e:4d:e5:5d:73:d2:ae:9b:a5:11:ee:98:b9:f3:59:c7:16:2e:
78:67:58:60:e4:0f:d5:20:74:3e:78:64:9e:3e:a6:e1:67:11:
44:7b:a6:dc:e6:3d:48:4a:da:9d:f0:76:51:31:66:71:19:75:
bc:54:a0:85:45:56:39:78:fd:e2:c1:72:aa:b9:3f:81:98:e9:
db:4c:35:ea:0d:c4:ad:cf:d7:50:52:7d:38:3a:11:b3:e1:56:
41:1f:6d:15:f0:a6:a4:46:b6:63:a6:99:e4:84:45:07:10:9b:
a7:89:8f:8d:aa:c6:1d:b2:61:56:8c:f1:9b:6a:55:92:19:09:
2f:ca:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:33 2025 by rpki-client