Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
File: 2afNm3hyoceqJis_rRqQdlAlKDI.mft (raw, json)
Hash identifier: +D/H2Aon7abk30LGjG3lb+hf3T9MLTVaUExtaBlB62w=
Subject key identifier: 59:2B:17:D9:64:01:DE:C1:A8:C9:CB:BC:3C:25:C0:38:AA:A5:18:D5
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Certificate issuer: /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial: 01984DE6EBC1554D0940CF0BDF98ED534182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
Manifest number: 0429
Signing time: Sun 27 Jul 2025 22:00:35 +0000
Manifest this update: Sun 27 Jul 2025 22:00:35 +0000
Manifest next update: Mon 28 Jul 2025 22:00:35 +0000
Files and hashes: 1: 2afNm3hyoceqJis_rRqQdlAlKDI.crl (hash: mdXvA2iU6fFoh7NUzt6cQ6Zjq8wB6/hwp0XHXKWGa2I=)
2: 8xRb-DPzCzHiHinhBGSiJKFCfq0.roa (hash: A9plqAZ6tW823XWa6YGs85LIMKZtOqJdz/q0S+8zYRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:eb:c1:55:4d:09:40:cf:0b:df:98:ed:53:41:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Validity
Not Before: Jul 27 22:00:35 2025 GMT
Not After : Jul 28 22:00:35 2025 GMT
Subject: CN=592b17d96401dec1a8c9cbbc3c25c038aaa518d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:24:0a:36:c4:30:98:d5:9b:d6:7f:e8:bc:
eb:c9:9f:d3:30:cc:d8:4a:8a:5b:c0:04:23:d7:b5:
01:60:b0:1e:de:56:ed:34:73:37:1c:57:df:e0:3a:
a6:29:8f:96:0d:21:e1:2f:01:2b:0c:22:cc:e2:b3:
7c:41:ec:83:1b:88:f9:34:ec:d3:a8:25:46:2c:50:
35:aa:89:cc:18:2d:be:13:b3:f2:48:9d:cf:10:4c:
47:c4:c5:82:ba:a3:f3:32:23:e9:15:2a:b7:af:29:
55:47:b9:ce:bf:85:6e:e3:16:f3:d2:75:62:e2:22:
54:3d:46:2c:5a:11:9b:09:41:52:0d:16:34:28:b8:
8b:74:bb:d7:76:ed:46:c4:74:4d:13:b8:6f:d1:ed:
38:bf:80:27:4c:1d:56:8a:0b:d2:a6:7d:6e:40:8b:
2b:48:6b:6c:a3:9d:ab:96:32:2e:30:3b:cc:19:ab:
5c:46:8b:88:28:46:67:93:72:13:39:e0:77:4e:65:
28:91:67:ab:aa:ec:6d:a0:87:ec:77:c6:78:94:99:
db:1e:33:4d:81:09:3b:c1:21:7b:25:56:d4:ef:e7:
ee:3f:e9:77:18:07:78:71:72:33:b6:e2:7f:40:a3:
c8:06:54:0d:38:5a:9e:c9:3b:1a:7f:ba:1c:25:5b:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:17:D9:64:01:DE:C1:A8:C9:CB:BC:3C:25:C0:38:AA:A5:18:D5
X509v3 Authority Key Identifier:
keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:79:fb:b7:01:de:40:76:51:fa:67:1e:bf:0a:e8:9a:cf:db:
6e:6a:8e:a4:44:2e:19:21:78:e7:f9:fd:f9:34:f3:64:42:3b:
9f:d1:1d:51:38:23:cd:16:82:a3:b1:3d:bc:b1:a0:04:4d:c5:
b1:e0:b0:25:2b:d3:78:d5:ca:7c:1c:30:80:b7:d3:74:73:f4:
37:05:6e:c5:ba:c7:02:e5:ac:2b:78:a3:f0:af:34:b9:d0:45:
9b:b5:c8:fd:bd:56:dd:15:0e:ab:4f:52:bf:c4:dd:ba:23:32:
fd:93:ff:2e:0c:08:4a:c5:f2:c2:7a:13:15:59:ea:96:29:31:
fa:79:76:0c:d7:eb:27:c5:fa:3a:d1:44:99:17:55:e4:4d:30:
91:78:5b:f4:8c:66:08:8c:9c:47:0f:42:d3:01:37:5d:5e:68:
8b:0e:ab:44:98:e4:f3:df:84:c1:a5:1d:f4:02:2a:62:57:a2:
fc:b2:00:c8:82:39:a5:3e:0d:0e:97:18:e1:d6:b8:3f:b2:30:
c3:a9:46:cc:ab:7f:e4:ea:3a:75:20:71:56:7e:15:6a:be:63:
67:f4:c7:1d:b9:1c:71:57:0a:4a:69:3a:ba:36:18:7c:4f:b9:
e9:9a:d7:38:b3:32:15:01:37:8d:1b:18:de:4c:a7:e1:15:f3:
3e:55:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:43:03 2025 by rpki-client