Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: H27T33gi+kHHFK21+lUZCVMKE/rdp1409PVKgyKUOyQ=
Subject key identifier: 71:13:97:DC:16:E2:8B:51:5C:8F:73:45:2A:FA:15:92:90:19:A1:ED
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 019858DAA6E2FA9EDDE76A4B5998825983C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 1270
Signing time: Wed 30 Jul 2025 01:03:01 +0000
Manifest this update: Wed 30 Jul 2025 01:03:01 +0000
Manifest next update: Thu 31 Jul 2025 01:03:01 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: nsSmS+XwiFcogobGfXH2cYlC3ADg0eUSaH8IAa3dl50=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:da:a6:e2:fa:9e:dd:e7:6a:4b:59:98:82:59:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Jul 30 01:03:01 2025 GMT
Not After : Jul 31 01:03:01 2025 GMT
Subject: CN=711397dc16e28b515c8f73452afa15929019a1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:88:1b:93:7d:f9:e8:1a:99:30:c2:9a:ff:
ce:3e:af:d7:89:90:ae:8a:d6:4b:fa:4a:7f:f0:2f:
31:f9:ca:f0:d7:ab:13:01:dc:06:2e:4f:17:7a:ee:
f3:b4:f6:b0:27:6a:d5:0b:55:78:da:48:a4:0a:db:
ff:c8:80:7a:f5:7a:fb:0c:64:b4:f0:af:66:a8:c2:
8c:7b:f8:4d:42:b8:1c:79:fc:6b:99:d5:3e:99:99:
af:cb:e3:a4:38:fd:d3:03:22:fc:84:52:b1:f5:f3:
62:c6:6c:41:a1:2e:fe:22:be:50:ae:0b:a4:d5:68:
52:29:d2:e3:2c:74:07:39:cb:1b:6e:b4:1c:79:0d:
22:51:d5:33:e1:67:eb:61:19:30:9e:40:a9:27:d2:
60:33:b1:08:58:af:1f:88:c4:63:43:06:b1:9f:73:
22:c7:25:72:97:c1:64:08:5a:82:d9:27:34:29:22:
9d:c8:3a:ee:aa:58:87:d0:c4:d0:cf:b3:f6:f3:d1:
92:43:94:d2:e0:60:9f:20:eb:b2:cc:b6:a6:f4:77:
10:21:ce:7c:f5:13:fe:5d:7f:da:a7:23:e5:7f:93:
52:7c:a3:52:eb:23:a5:4c:68:70:96:3b:a7:46:f2:
47:9f:67:e4:ab:92:d9:66:c4:a0:07:bb:d2:7a:57:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:97:DC:16:E2:8B:51:5C:8F:73:45:2A:FA:15:92:90:19:A1:ED
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fb:04:6a:b5:8e:20:a0:e6:ec:e0:b0:b0:22:62:9c:c5:f9:
36:ff:ba:93:4a:cd:86:54:cd:1f:85:37:96:e4:46:8a:3a:aa:
56:59:f3:42:25:85:cd:0c:a6:35:33:ff:04:ea:67:9b:11:b2:
d6:ed:33:75:d6:d4:a8:b8:ad:27:e5:77:52:23:63:ad:64:41:
e7:39:85:99:02:2d:9a:3b:66:34:fb:4c:ef:d1:49:55:29:e2:
13:73:4b:23:2e:ef:8f:b2:e4:fc:5f:f8:d3:3d:ed:29:6b:36:
1a:10:1f:4e:ea:d9:86:52:00:0d:bc:89:fb:4f:dd:fa:4b:25:
8d:b3:fe:69:18:d3:81:b4:09:c9:bc:bc:fd:a0:30:96:d0:c1:
25:41:1e:0a:fb:f9:9f:79:02:92:26:3e:2e:cb:94:4f:06:2b:
d2:fb:60:be:c2:3a:0e:bb:76:ce:a4:7e:21:26:38:17:10:76:
4b:bd:3e:2d:bb:c0:fa:5e:88:26:8b:77:91:db:12:9c:91:fb:
de:42:22:a4:b5:06:d6:39:3e:3f:36:7b:d0:d9:3c:17:fc:db:
e8:8a:42:3c:72:c8:86:d4:81:c2:b9:72:9b:22:b3:28:ac:ad:
94:ca:77:ed:74:e9:88:69:7c:d4:cc:a6:75:8b:01:79:c7:01:
3e:50:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:27:21 2025 by rpki-client