Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: P+SIZy/pPdEUBDMgteR0E9iGWblp3LKCek1hC0lIg/k=
Subject key identifier: F6:AB:9D:81:24:88:91:CF:78:64:FA:B9:AA:E8:87:20:79:FD:D8:9E
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0197481E86BD13B62FC7121D6248BC0B4270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0642
Signing time: Sat 07 Jun 2025 02:00:49 +0000
Manifest this update: Sat 07 Jun 2025 02:00:49 +0000
Manifest next update: Sun 08 Jun 2025 02:00:49 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: FhGQ92g8RNqlc9WImuOzpw44+AbpnpWA+Ri0A+mwPNQ=)
2: cyuyDZqyNqr32xt6pp7fkVwfjYQ.roa (hash: mjUyO8BKv6+QwzitAcCw3kaT2KKB//HG+FQCsqxoBL4=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:86:bd:13:b6:2f:c7:12:1d:62:48:bc:0b:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jun 7 02:00:49 2025 GMT
Not After : Jun 8 02:00:49 2025 GMT
Subject: CN=f6ab9d81248891cf7864fab9aae8872079fdd89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:f0:81:6c:4e:70:ec:f9:99:2a:02:8d:79:
d4:c4:bc:6a:e0:43:6c:58:b2:3f:15:fd:34:86:65:
7c:cb:c1:d9:45:a3:85:73:c8:97:fd:46:e9:b1:6e:
0f:e1:1f:c9:f8:fe:33:37:9e:28:eb:b5:d3:b3:6c:
2c:33:a8:32:a8:33:dc:e0:31:b6:1e:67:54:2b:59:
ac:40:32:c8:37:0e:5e:ff:b9:da:85:d8:ed:15:f5:
b8:22:4f:d5:e5:e4:6a:6c:08:47:d5:da:ad:9f:63:
89:7c:7c:50:98:c7:ff:5c:12:16:ba:5c:fb:30:1d:
b3:21:43:e3:3c:67:9d:75:83:94:70:67:af:7d:96:
17:1b:36:6a:91:d6:57:87:de:d1:80:52:1c:4c:60:
44:88:e8:c1:12:cc:47:56:fa:91:3c:a2:a4:2f:07:
b6:bf:69:cf:30:13:b8:60:46:d7:3f:90:b3:fb:69:
59:0c:b6:bc:8d:a2:82:cf:b6:31:e0:26:da:eb:9b:
a4:46:3d:b0:0b:d5:25:2e:e8:18:8e:75:86:62:42:
42:b4:c9:fb:9a:4a:de:53:32:e8:5f:cf:38:0b:db:
2b:90:b3:e0:80:df:a1:bd:52:3e:45:6e:cd:29:38:
59:d8:f0:e2:62:76:10:dd:96:11:d3:ea:52:1e:62:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AB:9D:81:24:88:91:CF:78:64:FA:B9:AA:E8:87:20:79:FD:D8:9E
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:29:4b:a2:9f:9d:d9:a3:a9:b5:6d:57:d2:b0:6c:42:2e:
79:91:0b:84:13:67:e1:cc:b3:e4:81:4e:87:a3:f9:6e:45:27:
c7:e5:02:67:7c:d1:36:cb:cd:00:cc:e3:72:f7:60:db:73:0a:
4d:1e:b4:14:f0:41:60:80:5d:39:a1:bb:0e:89:43:c2:b7:30:
0f:d4:02:8b:11:5b:b7:2f:55:11:ea:25:2b:f3:60:12:30:08:
8b:f7:9a:bf:ac:e0:1a:29:54:c3:6b:9a:c8:af:10:93:ee:a9:
94:81:ea:e1:76:b8:8b:9d:a5:8a:a0:79:f9:1f:f0:8d:1c:08:
b5:a4:19:44:67:08:d4:61:2f:51:ec:17:fe:3f:5a:ae:1c:e8:
f5:7b:3d:ea:b7:41:71:bd:9c:34:f7:cc:fc:2f:40:54:0d:f3:
4d:ec:df:93:65:9d:f9:ed:2d:04:bb:d7:ef:bc:8a:ba:e4:64:
e9:23:cc:27:dc:0d:a9:7e:c2:3a:ea:21:b3:c6:8f:45:f0:96:
45:11:67:6b:4d:82:4a:ee:a3:4c:d7:f6:ba:f5:ee:84:7a:49:
69:29:b1:db:eb:d2:22:9a:78:76:3a:4c:ac:7f:60:a3:84:e7:
e5:09:d8:60:05:0d:3b:8e:a8:14:ea:af:6f:78:9d:0e:0d:8c:
23:4b:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:55 2025 by rpki-client