Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: pIBV64ijYYE0mztysuZm49rzMxZZbOa4xwd0IvS8W7k=
Subject key identifier: BE:81:B4:F5:5A:33:53:C2:08:DB:35:CB:D3:A2:BA:C7:CA:69:56:91
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0197597FE4E2C915DD99CAAAE897A0A95681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 138B
Signing time: Tue 10 Jun 2025 11:00:43 +0000
Manifest this update: Tue 10 Jun 2025 11:00:43 +0000
Manifest next update: Wed 11 Jun 2025 11:00:43 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: 4b2qm6O+gHpT8QWvsjWug2xmH1Dr3W+3U+d/KxvYBdg=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:e4:e2:c9:15:dd:99:ca:aa:e8:97:a0:a9:56:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 10 11:00:43 2025 GMT
Not After : Jun 11 11:00:43 2025 GMT
Subject: CN=be81b4f55a3353c208db35cbd3a2bac7ca695691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:f3:f7:1f:95:5e:9f:20:17:8d:a9:73:23:
c4:59:f7:82:f3:f2:3a:2d:d0:da:19:79:c5:4d:8a:
5b:28:0c:6e:54:cf:94:c9:27:3e:e2:b4:4a:f8:67:
6a:eb:02:cb:fe:04:52:a8:ba:3f:02:1c:75:c9:71:
f8:ba:c7:57:ca:82:85:19:55:4b:c4:e1:42:cd:97:
11:c1:d5:d7:e8:89:05:eb:e6:92:17:e5:c7:6a:c2:
ac:a7:f6:c8:df:55:c5:4c:5e:2b:32:95:27:9b:90:
26:9c:98:e7:12:08:cf:66:e2:23:78:30:64:32:1a:
11:12:d0:fb:b3:43:25:48:f7:61:6e:48:fa:6a:49:
80:8b:d5:27:57:81:c2:65:50:d7:ca:d5:0e:91:9c:
b7:b5:f1:17:05:2e:2f:2b:05:93:12:61:df:6f:2f:
8d:77:56:72:22:15:8f:9e:44:79:b0:b7:2a:3a:cf:
25:e7:3c:90:23:43:3a:b6:b5:13:6e:73:8e:eb:9b:
49:ad:3b:87:55:39:e7:62:93:ff:4c:8e:43:41:48:
45:40:b0:bf:ed:65:24:17:b8:0c:74:bf:05:14:cc:
b0:3a:e4:44:51:60:d5:de:26:d9:9a:2b:89:9f:df:
47:22:0a:db:7c:5d:8f:01:78:26:68:b6:76:1d:b5:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:B4:F5:5A:33:53:C2:08:DB:35:CB:D3:A2:BA:C7:CA:69:56:91
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:c9:09:f7:e0:99:64:6d:a4:60:d7:23:34:d2:b8:cb:b6:
13:d4:90:d6:23:3d:c2:3b:93:47:ee:87:28:cf:49:49:38:40:
9f:69:b5:d1:50:ab:23:0f:d5:7d:31:8c:6f:c5:fa:1e:0f:2b:
d3:41:2a:91:e9:60:87:ff:64:b8:22:92:9f:68:a9:70:c4:42:
37:b5:5b:d4:bc:36:1b:bc:80:d2:69:8a:64:19:7f:93:d1:8b:
51:cd:1b:55:ee:f4:e6:b8:83:3a:de:b6:5e:01:2b:00:cf:66:
49:fc:cd:65:34:c5:a6:0b:f5:24:c2:1d:73:3f:ec:c5:1e:7c:
69:32:d6:71:9c:4d:8a:ba:64:59:d0:13:2b:eb:43:88:15:09:
5a:0b:3f:99:bd:be:79:65:0d:9e:8b:9d:d0:ae:37:07:9a:8d:
30:5a:64:b6:be:bc:78:30:95:1e:8c:0d:f1:9a:c9:51:a7:83:
3b:b0:ed:97:7f:f1:19:b4:c7:36:f4:b5:71:af:36:ab:91:20:
12:89:aa:32:f8:b3:65:cc:fd:3f:9b:db:c5:f9:8c:8e:98:d0:
0d:7b:6e:51:6a:98:df:5b:b1:a2:d1:3a:c1:2d:87:ee:da:6a:
bb:05:e8:bb:04:cb:7e:9b:cb:51:a6:e4:25:15:3d:fb:8e:39:
c4:cb:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:14:59 2025 by rpki-client