Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: x4bbwdHe6kt1aEQFOlN4sQfejiktAHGr1j7CvzrFn+I=
Subject key identifier: E2:4E:8F:9D:54:85:87:C3:21:97:72:F1:FA:AB:1F:2B:3A:7D:34:CF
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 0197499F3CFF185D59977DDE14C4BF182A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:01:02 +0000
Manifest this update: Sat 07 Jun 2025 09:01:02 +0000
Manifest next update: Sun 08 Jun 2025 09:01:02 +0000
Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: GYQkaxMAt46fxqQeLUGxasiHcCnFUgtcAAVX1wGabl8=)
3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3c:ff:18:5d:59:97:7d:de:14:c4:bf:18:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jun 7 09:01:02 2025 GMT
Not After : Jun 8 09:01:02 2025 GMT
Subject: CN=e24e8f9d548587c3219772f1faab1f2b3a7d34cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:d9:e6:17:37:2c:f9:ec:65:63:01:89:1f:
99:1e:c2:f7:a1:42:eb:32:47:c0:14:22:73:64:9c:
cd:fd:32:75:99:9d:1d:3c:42:35:21:51:fd:0c:e8:
07:a2:31:f3:11:aa:67:c5:99:bc:19:11:1f:8c:d3:
c1:48:3c:84:e3:4d:e6:fc:59:da:0e:52:5a:04:cb:
a2:70:e2:b0:46:54:03:70:6f:0a:4b:b9:29:a9:2f:
35:ae:dd:bc:30:b1:c3:52:51:bf:86:07:35:fa:7b:
70:6e:87:1d:da:9e:e3:86:41:5e:08:bb:17:8d:8a:
11:a5:26:11:d1:57:a5:9d:46:b2:8f:89:59:b3:11:
fa:9f:76:f8:76:73:b4:ac:45:1c:cb:6e:0c:a2:28:
80:0a:f8:20:bf:60:09:1c:e5:d8:f2:2e:1e:9f:ff:
cb:a5:6f:8b:8f:a3:6c:ba:d2:0c:6a:d0:d4:c2:64:
da:e6:5e:c6:29:2e:5c:6a:f6:75:74:ef:42:4b:34:
f6:88:dc:26:42:83:36:e9:f6:53:b0:d8:12:99:c2:
6a:de:02:20:80:00:91:94:fc:af:b7:5a:ec:0f:98:
87:af:47:dd:aa:06:ef:7d:19:0b:4e:55:f7:11:93:
76:01:3d:d2:2d:b7:4f:74:26:e3:ad:54:fa:58:a1:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:8F:9D:54:85:87:C3:21:97:72:F1:FA:AB:1F:2B:3A:7D:34:CF
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:26:fc:ee:f9:a2:2c:13:b6:b3:7a:3b:af:d3:5d:91:64:51:
30:bf:ac:1d:29:d7:23:23:85:f8:13:c3:ed:6e:b9:6f:2c:19:
82:35:e1:a6:c1:a1:b5:6d:df:43:a2:34:60:e9:d6:12:57:61:
5d:90:5c:da:1f:86:b6:03:4e:a8:a7:54:e8:be:53:d7:aa:71:
0e:f6:11:2c:54:93:2e:16:0a:e2:6e:43:e4:fb:38:5f:fd:5e:
bb:fd:96:b1:0d:1d:fd:bd:a9:82:b2:82:35:f2:8c:3a:06:ef:
47:3f:de:ed:28:4e:0b:e0:a0:04:86:89:fd:fa:32:3e:18:4d:
91:ce:a5:a3:8b:1a:6f:82:98:87:99:d8:43:7b:02:dd:e7:54:
c1:6f:13:88:23:ec:7c:98:7d:f5:aa:20:94:54:8a:0f:a6:2f:
c8:1f:ff:d4:6d:f1:5a:bf:cd:ec:81:80:5f:15:a7:e3:3e:e6:
14:7f:41:93:8b:51:5a:c6:4f:da:66:03:6a:17:87:2b:89:a1:
e9:ef:b6:aa:69:3e:95:57:ad:40:2b:2a:85:e0:be:b1:0c:58:
e3:22:6a:ca:db:62:9d:8b:e9:9e:3e:b8:0d:2f:15:3a:df:d1:
e6:3e:85:2e:7b:9e:dd:5e:1a:cb:2c:46:1f:85:1e:9e:d6:ec:
6f:c4:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:21:31 2025 by rpki-client