Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: uRwOtkgLkE3mpLJUy/+nYJpVJil2vhuOsqsJCRCkZnc=
Subject key identifier: 72:FA:A0:ED:FA:9F:1E:12:52:39:E3:C2:18:39:BB:7C:C8:4F:C1:65
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019750EA83349902D03CE316920A856E4708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 06A5
Signing time: Sun 08 Jun 2025 19:00:35 +0000
Manifest this update: Sun 08 Jun 2025 19:00:35 +0000
Manifest next update: Mon 09 Jun 2025 19:00:35 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: WrnaYJzZiS8z1XNIPWxws5Dnp4YNdCjPUm/c7127Pqc=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:83:34:99:02:d0:3c:e3:16:92:0a:85:6e:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jun 8 19:00:35 2025 GMT
Not After : Jun 9 19:00:35 2025 GMT
Subject: CN=72faa0edfa9f1e125239e3c21839bb7cc84fc165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:db:ea:8f:5d:70:0b:f7:f1:81:df:6f:0f:
e9:32:6f:fc:30:1a:9a:d0:05:8f:67:d9:e9:bd:af:
aa:51:7d:77:f0:2d:a3:c7:28:78:71:be:0b:be:bb:
5d:45:79:2c:e4:ab:44:56:20:68:5a:9d:63:38:34:
44:c2:38:d3:f1:74:3b:7c:b1:07:2e:e2:a2:31:6a:
12:b6:17:3b:de:f7:2b:76:ae:da:06:36:e3:a6:e4:
94:e1:09:35:b2:09:8c:b9:b6:4d:e3:13:94:4c:2a:
2c:7d:09:49:bd:da:b7:61:b6:c3:3a:ad:f9:41:1c:
63:51:b1:cd:03:e7:e7:b1:85:a9:e3:7d:2b:b8:a6:
8c:76:33:9e:42:f8:db:28:d4:91:31:5a:1c:8a:f4:
b7:7b:95:b0:3b:8a:54:ef:ec:8c:0f:22:e5:b0:2b:
20:6c:ca:a2:3f:e6:10:eb:5f:33:b1:bd:72:9f:ca:
1c:26:20:23:60:a3:bc:3c:fd:05:19:cd:ea:6c:4c:
4d:76:31:f1:09:82:fd:11:b5:ed:bd:a7:e5:a5:14:
19:19:40:9b:80:66:7d:ac:b1:5a:8c:75:90:50:6c:
22:04:05:93:bd:17:88:9e:4f:40:ad:90:48:c4:f5:
34:65:eb:dd:cd:ea:84:a1:89:b7:e3:44:f7:41:40:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FA:A0:ED:FA:9F:1E:12:52:39:E3:C2:18:39:BB:7C:C8:4F:C1:65
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:71:77:f9:0d:d5:3a:e3:ef:c7:6a:21:e5:11:0f:d5:92:51:
f8:4e:7a:1e:6d:b6:7f:a5:4e:81:01:c3:b9:31:97:7b:6b:e8:
43:0b:bd:0b:06:18:6d:b3:de:b7:31:be:da:96:eb:9b:a3:72:
e0:fb:e8:d1:88:0d:70:e0:99:9b:5a:de:6b:c9:a8:02:f8:0b:
4e:4b:db:0c:66:6b:39:95:48:2e:97:bf:8a:45:13:26:f0:df:
af:35:2d:c2:38:94:8c:f7:49:f9:f7:f9:37:ff:dc:69:27:82:
56:79:32:8c:1f:88:04:c0:b6:08:fd:5a:0b:d2:d6:11:a8:c7:
a6:10:ad:68:19:66:9b:ba:73:53:af:5a:cb:26:19:52:66:42:
00:cc:de:9c:15:cd:6f:40:bf:e1:3a:c9:72:84:a8:41:e2:61:
71:a1:22:07:e7:8f:a0:9f:5c:b5:70:2a:ee:93:dc:fa:eb:26:
3a:e8:53:16:d5:92:33:bf:cc:6e:c7:18:1b:d7:72:21:53:2e:
24:70:a3:5c:65:a8:76:f1:e4:c4:31:9f:5d:85:cf:e2:02:87:
57:3f:fe:36:23:c5:90:fe:c2:c9:8c:45:32:13:da:43:d1:59:
fa:6c:66:d3:48:67:52:65:34:43:a7:b6:94:f0:2c:8e:fb:9e:
56:15:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:30:35 2025 by rpki-client