
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: qmeZxhrXMIbAzz2HFJBZwQeq1VoUrHaMjpGNHXjsJuQ=
Subject key identifier: 87:FA:C0:6F:6B:C4:57:87:0D:ED:E4:9C:6F:0E:8F:FA:34:14:C5:60
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 019746D4E8B6D0EC1A8228E7892C8A7DF2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0CCE
Signing time: Fri 06 Jun 2025 20:00:47 +0000
Manifest this update: Fri 06 Jun 2025 20:00:47 +0000
Manifest next update: Sat 07 Jun 2025 20:00:47 +0000
Files and hashes: 1: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
2: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: rMfy+dzExk/R7VGmhVUHY6EbOYE5xPpKM8swqmjWOos=)
3: 8P6Z9Cx8SWSZTkyVumdiUHtewDA.roa (hash: TjOKj4a+PWeCDJb76vAZsC0563BFTc5omsFst4XIgOg=)
4: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (hash: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=)
5: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
6: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
7: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (hash: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=)
8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:e8:b6:d0:ec:1a:82:28:e7:89:2c:8a:7d:f2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jun 6 20:00:47 2025 GMT
Not After : Jun 7 20:00:47 2025 GMT
Subject: CN=87fac06f6bc457870dede49c6f0e8ffa3414c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:ba:37:60:13:ee:32:a3:b5:fb:fb:1e:31:
eb:8c:a5:30:98:16:26:7b:34:15:8e:c9:ad:60:f1:
dd:cc:06:12:bd:fb:80:d1:b8:58:08:54:0b:99:3c:
50:cd:84:bf:d3:3f:2e:b8:4d:cd:cc:aa:f1:f5:5e:
31:6f:95:bd:7c:41:c0:b5:f0:23:8d:c3:2f:20:56:
4e:ff:94:4b:6c:f5:ac:79:68:c1:ef:77:df:84:5a:
cc:2a:18:8e:f3:70:36:8d:ce:51:96:af:8d:a8:14:
35:3d:f3:27:11:e6:de:a0:bb:f0:93:c7:68:13:72:
ed:0b:a2:e7:29:35:f2:71:06:83:c1:e9:3b:f7:84:
43:1e:01:70:97:a2:09:da:5f:e7:f8:1c:6d:9f:7d:
30:ca:5b:3e:b3:49:61:2b:d6:c6:8d:fc:8a:c3:34:
5f:92:59:0c:ca:6b:15:01:9c:30:93:da:36:ee:c4:
56:42:84:bf:37:4d:03:7b:a6:1b:2c:8c:b8:ad:f0:
20:b3:40:d8:09:5d:c5:94:16:26:c9:7b:fd:bd:96:
63:8d:bb:6f:6b:ea:e8:fe:5d:98:6d:68:75:7f:2d:
96:03:6b:b0:1d:46:c5:5a:e2:3b:f8:2c:e4:59:ba:
77:86:bf:b1:28:ef:8a:57:e8:4c:b4:17:b4:ac:05:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:C0:6F:6B:C4:57:87:0D:ED:E4:9C:6F:0E:8F:FA:34:14:C5:60
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:50:3c:31:3d:91:38:70:0d:b8:9e:c5:b2:e8:c8:35:87:
3f:a1:4c:92:48:f5:cd:97:df:7c:6b:38:88:df:c9:82:96:cd:
55:37:f3:e9:49:99:15:21:d0:cf:8e:77:72:2d:91:f2:5a:5e:
f7:71:df:e1:ac:b1:12:04:38:87:97:35:7d:06:30:24:54:ae:
f8:70:04:bb:0b:a8:36:fa:3a:8b:18:cf:7b:1e:d1:24:91:f9:
df:12:a0:df:2e:3e:6d:21:ec:a9:58:df:f4:f1:48:ab:52:e3:
19:eb:19:ec:c6:46:92:36:86:35:30:d8:85:53:ff:e8:10:06:
66:a8:b6:14:7c:ca:3f:b5:e4:dd:72:42:0c:9e:59:16:84:98:
b7:6c:5e:73:8c:89:21:60:c9:3a:c6:e0:31:53:9b:9b:26:0a:
ed:3b:86:9a:59:7f:0e:05:ef:56:b3:a4:d5:57:48:06:09:fd:
e8:27:9a:23:62:97:08:74:e4:8e:d9:25:76:ea:c6:1a:49:df:
80:13:4b:b5:bb:ef:a3:84:9e:99:7f:9d:ed:71:21:23:04:83:
c5:1d:0c:81:d0:c2:9c:7c:4c:c1:a5:7f:1f:bb:17:fa:9f:76:
58:bf:dd:a2:8e:c8:0c:59:19:cd:bc:1a:6a:95:aa:2b:a2:20:
87:6a:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:06:04 2025 by rpki-client