
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: +LSwspGwzEglyvXFbhGpnkuPLR00I3JShgvZi5PLrmI=
Subject key identifier: FA:19:0D:8D:12:07:A7:9C:B6:22:8D:95:E6:77:52:50:E3:69:31:20
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0197507C6E61452EC88E221EB7387936A395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 17:00:21 +0000
Manifest this update: Sun 08 Jun 2025 17:00:21 +0000
Manifest next update: Mon 09 Jun 2025 17:00:21 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: /jIXwIlY8VROT7btselrmypJb7R6sly1lxlHaMqza+c=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:6e:61:45:2e:c8:8e:22:1e:b7:38:79:36:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jun 8 17:00:21 2025 GMT
Not After : Jun 9 17:00:21 2025 GMT
Subject: CN=fa190d8d1207a79cb6228d95e6775250e3693120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:c6:59:05:63:04:42:49:7f:19:c6:dd:43:
63:5f:d9:2c:cf:e0:92:f9:83:b7:bc:a5:32:c6:15:
f7:e1:3b:d1:1d:2f:51:38:75:ec:04:29:dd:b4:1d:
9c:1e:2a:85:e9:88:5e:72:ef:a4:4a:9d:12:2b:bd:
f1:3c:70:fd:7f:01:23:20:c1:32:27:7c:e9:2f:c5:
f7:29:17:76:fb:ae:39:4a:90:28:d4:c3:bb:09:03:
51:88:12:fa:a2:8e:40:ad:a4:09:57:95:90:34:fb:
35:f6:75:9e:25:aa:b4:2a:75:3d:ff:29:ea:66:60:
27:61:6f:8d:38:3f:f5:21:16:8d:87:e5:30:2b:2f:
66:ae:7e:86:2d:1a:68:8f:58:41:e1:c9:04:eb:5f:
a8:b1:d2:1c:58:53:56:b2:44:ea:ea:40:c8:96:07:
c3:42:af:b4:57:7c:49:e4:0a:05:52:c0:4a:91:1c:
d0:fb:58:a2:74:ba:b4:b2:be:f9:fd:5f:af:8b:43:
83:dd:91:d6:b8:4d:b0:a9:df:ca:d7:3e:63:3e:6b:
df:2e:e8:e4:bd:ba:d8:88:ef:19:54:7a:d8:fa:7f:
01:5e:25:77:9c:b3:84:12:a9:ee:e8:88:60:3b:bc:
94:cc:ee:ad:db:a5:71:a7:39:7a:ff:0a:eb:4a:d2:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:0D:8D:12:07:A7:9C:B6:22:8D:95:E6:77:52:50:E3:69:31:20
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ab:35:e0:56:2e:fa:d6:70:7c:f4:fe:3d:04:2f:9b:f7:03:
c8:ee:c4:2a:05:40:42:ee:ac:a1:52:7a:8c:2d:f8:f5:f0:7f:
a7:5b:a4:a9:44:59:f0:93:c2:7f:e3:ed:66:20:b7:16:16:a6:
4c:0d:96:24:d2:ce:2f:99:e6:44:7b:b4:a4:9d:20:0d:93:b6:
f9:e5:fe:96:ea:6c:2d:f3:9c:d5:9a:17:6b:40:23:41:16:e6:
69:99:1f:a3:55:0d:38:f7:b8:d1:59:2b:5b:1e:c3:fd:0d:ed:
bf:a9:b1:14:8b:34:30:51:94:7b:54:15:cb:d0:ab:a8:c6:65:
a3:78:50:f9:98:e4:ef:97:3d:54:cf:89:2b:39:be:72:9f:7a:
4d:4a:7c:c9:94:6f:85:00:ec:79:c8:12:86:4e:7b:a9:52:54:
a4:ff:3c:b1:5b:80:15:c7:83:3b:74:4a:63:9d:c7:ab:3c:b1:
79:6e:e5:13:16:11:ca:4c:59:2e:68:f1:fb:74:c9:d8:d2:9e:
56:b6:b2:3a:dc:79:07:3f:02:22:b9:86:45:a3:2b:be:98:69:
eb:13:2b:db:97:93:15:9e:d4:12:22:91:1a:1f:39:e5:1f:30:
05:50:65:7f:6f:7f:2f:0a:65:bc:01:1c:29:ed:fe:9f:10:cb:
80:7d:90:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:55:25 2025 by rpki-client