Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier: SpSMaFP9P26A/flRbsVOdYPSVhqibCDiz8kV8ZxWYAs=
Subject key identifier: FC:54:AC:BF:EF:2C:E8:43:95:78:94:8A:B8:B2:EF:B5:AE:73:FE:1A
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer: /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial: 01984AE60386081FBC330250F4E589C4861D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: O2guvFKTmpUVyYZManAI00wLerZ2iddQvBnlhD4hAuw=)
2: aVrm11uPiyldKPviAWZVNw7mX_s.roa (hash: +aUpO78+V+9JLiQkkmCO8C80eoccRFxUM2jJ9r7mFkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:03:86:08:1f:bc:33:02:50:f4:e5:89:c4:86:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=fc54acbfef2ce8439578948ab8b2efb5ae73fe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:6d:00:31:11:91:a5:37:69:a7:3a:c9:a0:d5:
4e:99:8b:20:19:6d:af:42:1c:37:76:bb:68:04:04:
f9:f4:f2:f9:aa:98:86:77:56:1d:25:29:97:3a:86:
41:83:47:bd:bc:8f:c9:3b:b2:ad:eb:2a:62:35:31:
c1:cb:90:11:b3:0c:4e:3c:1b:c7:5f:c4:89:95:3d:
72:c6:4c:8f:cc:e1:af:7d:7f:d1:1a:30:5b:09:d8:
97:a3:25:97:8e:2b:31:9b:2e:e2:84:b5:3c:2b:55:
0c:f4:16:97:98:f2:ff:b3:f4:e2:3b:34:9b:a6:fa:
00:8b:d8:25:5a:19:09:56:37:4d:15:f2:f4:12:ee:
d5:c5:57:c6:8d:c4:3a:fd:93:d9:3c:87:59:83:9b:
f2:27:b3:bd:6c:c6:fb:ad:36:74:07:96:a0:cd:c5:
88:96:c2:de:62:eb:23:e6:40:a7:ca:9a:b8:d9:40:
2f:99:7a:9c:2c:e4:f9:45:ea:6a:41:e7:55:bd:db:
6d:86:ce:89:1b:f6:92:4b:79:bc:89:f5:02:f4:8c:
04:cf:bd:61:39:94:ca:be:6b:53:6a:9b:de:3a:21:
52:5c:2e:c3:42:cb:84:ba:c1:30:8a:d0:3d:10:03:
07:71:21:fa:51:ab:15:52:08:23:d1:c8:1d:2d:67:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:AC:BF:EF:2C:E8:43:95:78:94:8A:B8:B2:EF:B5:AE:73:FE:1A
X509v3 Authority Key Identifier:
keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d5:2f:04:12:c3:32:30:3f:6f:8f:9d:9c:58:7f:b7:dc:4d:
54:b4:70:f1:63:4d:a0:86:1b:1a:f9:d6:44:44:91:6d:77:82:
7c:4d:c5:43:25:62:51:4d:0d:0e:e9:a7:82:8c:60:4b:e4:e9:
66:05:66:71:f3:63:0e:de:ff:29:99:cb:1a:2e:4e:b8:f0:4c:
d5:e5:8c:43:d9:49:1d:6f:4a:ae:54:45:ea:57:8a:5a:78:99:
e2:40:39:cc:78:94:6d:75:0e:b7:af:b4:75:c9:d2:eb:29:e3:
d4:14:e8:ef:13:88:54:1c:e3:0a:a4:e4:28:5f:31:ed:a0:49:
7f:32:50:78:87:78:7e:2a:c4:7e:e0:26:46:1a:d8:fe:97:2f:
42:07:59:15:12:c2:fa:c0:5a:24:e5:22:61:32:91:d0:db:8b:
b0:8a:89:e8:52:e6:88:d1:40:bb:68:e2:d2:8e:0d:d7:ea:35:
12:f8:02:be:1d:1f:66:e0:48:e8:65:46:07:4c:82:22:63:48:
a8:7a:84:3d:ef:e5:a1:46:a0:e7:1d:39:48:52:97:d7:91:69:
be:ad:bb:e0:1d:b1:f4:d6:d4:41:4f:a9:f7:23:83:e4:db:f9:
4a:7d:d0:53:9c:27:6c:6a:6d:f4:13:62:4a:03:c7:72:ac:c0:
0a:ef:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:50 2025 by rpki-client