Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: dtio7SCREI3EYSY9myr2w8UGJ0yawf/KfLwFs9nEa4A=
Subject key identifier: 18:44:20:1C:10:3E:78:15:18:0F:F1:AB:EA:BC:6A:96:8A:52:51:1D
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 019745C28827CDCA96FC20F24048353B794C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: FA
Signing time: Fri 06 Jun 2025 15:01:05 +0000
Manifest this update: Fri 06 Jun 2025 15:01:05 +0000
Manifest next update: Sat 07 Jun 2025 15:01:05 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: r4I6MH5FsPNCmrPO8kfpTNkNQG+0HGS6xMkIhvI2s6A=)
2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:88:27:cd:ca:96:fc:20:f2:40:48:35:3b:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Jun 6 15:01:05 2025 GMT
Not After : Jun 7 15:01:05 2025 GMT
Subject: CN=1844201c103e7815180ff1abeabc6a968a52511d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:ce:51:6c:12:8b:32:04:7a:ba:9f:d0:fb:
33:2b:d8:6c:9d:a4:21:e2:5e:0a:d0:2b:fa:a3:a1:
a5:9a:9f:be:de:8e:8d:4d:77:f5:0f:96:8a:20:f5:
79:b5:12:4f:c8:ec:60:fc:f6:f7:0e:89:55:86:04:
fd:23:f2:4b:5d:98:0b:2b:2a:23:62:37:d3:6e:ea:
5a:05:26:f0:18:c2:04:58:ca:3c:05:f8:5b:97:48:
55:42:2a:3c:93:a1:b6:e3:82:e8:17:8e:77:8e:a7:
c7:fe:c9:5b:f8:dc:7e:65:ca:e1:0f:cd:bd:67:ac:
00:36:4e:32:02:ae:23:e0:de:06:3b:c1:6f:58:b2:
0a:f6:d5:af:13:e7:a8:5a:55:c6:2c:66:2d:0b:e7:
f6:8c:38:b1:48:42:cb:6c:da:75:b7:ff:f5:9b:b1:
93:08:3c:99:ef:e2:5c:90:76:c4:0e:62:f4:a0:cd:
18:3b:ee:39:c0:8a:b9:13:a6:8c:9b:f3:a6:36:51:
bb:58:12:62:27:cd:3a:b4:33:d4:53:97:d8:bc:8f:
09:68:12:ea:10:b0:16:45:78:ca:db:ab:14:c1:0d:
ed:ef:3a:07:f3:53:ae:7f:2e:0d:74:a3:b5:88:e5:
6c:d9:76:a7:dc:b9:55:80:8f:4e:5a:7a:5c:b0:8b:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:20:1C:10:3E:78:15:18:0F:F1:AB:EA:BC:6A:96:8A:52:51:1D
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:61:57:a7:64:a0:ac:6d:3e:68:f4:bf:e2:de:80:b6:be:
d4:95:55:30:24:38:94:e3:0b:b9:9c:54:b3:a9:48:78:2e:63:
9b:af:86:ed:2a:86:65:90:0f:c2:c5:ec:59:c7:32:b3:79:15:
1d:6b:4d:e7:f4:b2:e4:d6:bd:f9:7c:28:62:44:e1:fd:a5:dd:
52:a9:d8:4c:f6:ab:b2:b7:bc:e2:45:96:4d:27:70:08:a1:f7:
50:56:f3:90:17:b2:31:0a:42:2a:83:ac:85:5e:e9:41:6e:3e:
17:fb:96:e2:1f:f5:20:ee:50:2e:76:75:8e:8b:13:34:ae:81:
f6:d1:fe:3e:78:99:11:fd:ce:fa:ab:39:d7:1f:21:3b:4e:9b:
4f:6f:60:18:bd:66:fe:7d:92:41:c0:88:b0:ba:12:7e:85:6a:
8f:13:ee:7c:1c:bc:22:03:96:4e:bc:25:c3:0b:a9:e8:a1:09:
80:2e:94:29:0b:d7:bf:bc:36:e3:21:ab:94:ee:3a:e5:ec:87:
08:50:23:a6:9f:b3:cd:c4:82:95:02:c6:1b:4a:3a:2c:56:3f:
21:c2:85:21:3f:66:9b:b4:a1:66:2f:ab:81:ef:46:f3:2f:ac:
2a:7b:83:bf:be:74:89:9b:59:84:f7:b7:fb:6a:59:03:b5:e2:
14:b4:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:13 2025 by rpki-client