Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: UlKuTrIVmCWruh3GSZ7YOW9vBuQM1eLckXVLzMINO3U=
Subject key identifier: 82:37:FF:73:1D:D6:81:23:AF:C4:98:52:51:F5:B6:27:5B:72:26:D7
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019748558292C56115EC1F9F5495EE66BACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0CBE
Signing time: Sat 07 Jun 2025 03:00:52 +0000
Manifest this update: Sat 07 Jun 2025 03:00:52 +0000
Manifest next update: Sun 08 Jun 2025 03:00:52 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: JJW27o4ELk5TCy5Dx4gDEKx+sOoQK8sJpeD2iZh0l40=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:82:92:c5:61:15:ec:1f:9f:54:95:ee:66:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jun 7 03:00:52 2025 GMT
Not After : Jun 8 03:00:52 2025 GMT
Subject: CN=8237ff731dd68123afc4985251f5b6275b7226d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:da:dc:2a:d5:27:31:7c:82:85:0c:95:6a:
7e:88:74:49:19:36:9a:19:e9:6a:a2:d0:12:92:85:
ce:40:6e:77:49:24:af:87:b6:2c:4f:be:4a:cb:54:
c7:1b:57:a5:4f:1c:34:27:e8:dd:c0:72:f0:1e:7c:
f9:ae:1f:27:03:a7:2a:74:78:a6:3f:d6:9a:14:cd:
ae:18:81:b7:a7:f3:95:a2:30:bb:60:c3:ba:56:31:
96:62:54:d1:07:b9:fd:f7:38:81:ed:be:b2:e8:06:
ee:88:c2:a3:a2:d7:d9:f7:3a:0c:0a:4f:4e:8f:d7:
91:8d:96:58:ed:f7:c7:5e:fc:76:b9:d0:2e:4f:c3:
ad:1c:dd:09:65:56:ad:89:77:6f:eb:15:4b:0c:b7:
fd:57:23:18:1c:b9:69:ae:4e:1b:6e:e7:f4:07:27:
6b:56:f9:76:75:8c:24:1c:85:80:17:fe:5d:72:fb:
b4:00:5d:7a:b4:6f:e6:fa:7d:b9:a6:6a:dc:20:f7:
d5:2b:fd:79:0f:25:c6:fd:a7:a9:80:41:d0:08:ff:
be:66:99:c2:f5:cf:5f:f3:d9:be:83:f0:77:83:5c:
59:57:10:f3:14:3b:58:6f:35:ae:e5:b5:dc:ac:14:
9f:b8:01:c4:f8:d6:59:bd:4f:6d:c5:1d:c0:f1:75:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:FF:73:1D:D6:81:23:AF:C4:98:52:51:F5:B6:27:5B:72:26:D7
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:86:e7:6f:79:40:34:e1:de:39:6e:55:dd:65:2b:94:12:
d3:6f:52:1e:24:8b:2a:42:0a:44:d9:c4:de:2b:f6:b7:49:60:
9b:c7:c9:3f:d7:b8:47:06:a5:54:d1:23:9c:8b:26:6b:27:0a:
27:34:97:19:d7:29:1b:d9:c5:4d:c1:48:be:6e:d1:89:1b:c8:
71:3b:55:80:28:fe:3d:42:74:be:2d:a2:ff:cf:04:02:16:d2:
14:9f:7b:04:a5:66:9e:71:58:26:e1:b4:a8:fe:4e:4a:6c:ca:
52:a1:08:ff:28:47:27:17:ce:75:d9:8f:03:c7:46:d3:e2:0b:
68:49:40:0f:71:8d:ee:38:47:5a:ae:33:a8:bf:4c:c9:f3:4a:
dc:70:cc:f9:9d:c6:fe:18:52:f4:34:c5:25:2e:8a:30:1b:2d:
bc:5b:c1:9d:ae:aa:54:4d:5c:1d:2a:47:46:4f:ac:69:ea:87:
7e:c1:c6:f2:43:20:a5:aa:67:66:16:15:4b:e3:80:15:a1:69:
be:27:d5:c3:78:b3:24:73:23:24:56:56:71:6a:4c:2b:26:ac:
5e:e8:af:f7:7c:20:4e:2a:c4:53:02:93:3d:5a:3f:6b:9d:27:
05:ad:bc:9e:a6:eb:7f:34:29:a5:00:93:44:6b:f5:e6:3d:51:
ac:2f:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:36:04 2025 by rpki-client