Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: iBBSYD2N5aKx0BRfbfisWUgww9Y/klwzqwX8bx/BxPc=
Subject key identifier: 87:7B:EE:E1:86:3C:7B:3D:C1:EB:A1:4B:20:01:35:D4:5D:F8:08:C9
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 01975B6E4702AD4B17648459963DEA491D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 138C
Signing time: Tue 10 Jun 2025 20:00:43 +0000
Manifest this update: Tue 10 Jun 2025 20:00:43 +0000
Manifest next update: Wed 11 Jun 2025 20:00:43 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: WlpG81eAIrjr7IcbT+ejJUE4iAfjim90nd1XH7bXWqQ=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:6e:47:02:ad:4b:17:64:84:59:96:3d:ea:49:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 10 20:00:43 2025 GMT
Not After : Jun 11 20:00:43 2025 GMT
Subject: CN=877beee1863c7b3dc1eba14b200135d45df808c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:6f:83:40:94:02:11:e1:3f:56:ed:9e:ac:
92:e8:cf:bb:33:67:83:08:dd:06:8b:10:7e:ac:07:
27:fc:7d:3f:3f:e6:44:4b:03:5a:07:32:4d:4d:20:
2c:d1:fa:20:08:86:a9:6f:7d:63:c5:33:e5:3b:89:
9f:f5:ac:10:86:2a:5b:36:15:3f:05:f6:00:8d:4e:
3d:83:d2:aa:b9:be:f5:39:a4:a1:19:40:a4:d3:7d:
a2:3f:a7:5c:ad:ad:85:13:b2:dc:8c:9e:c9:64:6d:
de:68:32:e7:4e:c4:c5:14:84:15:d2:6b:31:e7:36:
bb:a7:cd:36:d4:ac:6c:89:90:a2:7e:1c:9a:20:c9:
81:d3:9f:64:a3:d5:4a:67:a4:12:5b:37:55:91:b3:
0c:ba:f0:a7:5c:ac:91:03:bf:f4:8a:f7:95:47:af:
60:11:fa:db:a7:9b:f5:43:3c:c1:9e:05:b8:78:ca:
32:6d:d1:a6:23:ac:df:72:7e:7d:40:06:dc:b3:d0:
58:a7:20:51:a4:6b:84:44:a0:68:87:bd:3a:19:b1:
6c:8c:75:7d:c9:75:0d:fa:76:4a:db:22:21:c5:66:
9d:a9:31:d8:9a:1f:84:ec:b2:d6:f5:b8:c8:7d:7a:
2b:79:05:40:37:d7:4a:ca:ba:ea:ff:9d:e1:6d:bb:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:EE:E1:86:3C:7B:3D:C1:EB:A1:4B:20:01:35:D4:5D:F8:08:C9
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:cb:be:54:48:dd:5a:f4:2e:c4:7a:3a:d3:62:4f:23:87:e9:
14:35:79:81:ec:a0:91:d3:f9:ec:fd:94:e3:9f:ec:c0:09:9e:
1c:59:3e:88:bd:a4:a4:77:6b:4e:cd:66:68:e4:48:a8:a1:95:
f6:be:f1:69:7d:18:8a:bd:ed:1f:15:15:00:c3:74:e4:6c:e8:
02:2b:70:9c:f7:06:87:d7:8f:4a:f5:97:82:a4:49:e7:09:5e:
85:4f:57:fb:d7:ea:10:ca:5c:a4:3a:3e:b2:0f:06:02:ed:c2:
b2:8c:f1:20:3e:e9:79:01:18:24:a6:b3:36:20:5f:9b:6e:67:
33:36:a2:12:86:02:6c:3f:ee:75:39:2d:2b:fe:fa:df:13:a1:
76:4c:e4:91:c5:db:5c:a2:52:bf:e5:4b:72:d5:cc:1e:9f:e2:
e1:be:fd:3e:a0:b7:64:2d:1e:d8:c9:7d:07:00:1a:db:c0:c4:
6b:b2:b0:14:35:fe:fa:27:a2:ff:c9:85:b5:ef:b2:02:d8:cb:
71:53:1a:7f:fc:79:e4:9f:69:3d:5d:92:7e:19:76:a1:f3:6e:
a9:24:3d:5c:2f:88:dc:26:c8:a5:34:a3:1c:c0:9e:e0:b1:17:
70:fe:84:03:67:ca:05:b4:19:87:ae:5a:b5:4b:2c:e4:17:50:
70:ea:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:45:13 2025 by rpki-client