Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: ITeLlIgIDzZeKvrJ3jgB0F29KwtJICBdmzRz66uAJM4=
Subject key identifier: 0A:72:AC:85:8D:37:22:62:D4:FB:29:C7:F5:8F:E2:E0:1D:63:79:35
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 01974DB2C1C7FE70433FF9D29E8E7F617885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0500
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: HnWbhRjq0GmXsfUpDhtazIV6wqeRAgtllCy2w7ikVvk=)
2: JfVg2a5pAi61HF6W0lENi_X8DUc.roa (hash: Mi/UBjA1CVg3EI0zZ/Mvz8hNoPR4p0IzucKiACeunmw=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c1:c7:fe:70:43:3f:f9:d2:9e:8e:7f:61:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=0a72ac858d372262d4fb29c7f58fe2e01d637935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:68:22:c6:c8:fe:b8:fd:df:5a:ab:e0:8b:
14:93:ff:ce:6f:b4:1c:24:ae:b6:c7:85:46:f9:01:
25:bf:20:46:61:e8:9a:51:24:06:95:ed:22:57:45:
91:22:41:6b:98:d4:bf:91:e2:da:71:d2:87:da:9f:
54:ea:ff:33:c9:71:9e:cd:41:dc:5a:83:e6:84:13:
0e:45:20:f1:ff:fa:82:e0:5a:46:98:29:8e:a8:42:
55:50:f7:3a:bb:bc:c6:67:76:af:96:a9:03:98:6b:
70:a2:28:53:74:db:7f:fe:96:6f:ff:7b:e2:17:bd:
d2:1b:ae:e6:fb:7f:f5:e3:68:c6:7b:eb:61:dc:7a:
5d:d7:fd:4f:a0:53:47:55:60:31:a7:09:91:dd:15:
74:3b:ca:08:ea:da:52:67:4d:24:c2:6b:2a:0e:cf:
7d:c1:08:bd:71:ca:85:6a:40:82:f1:35:f8:82:1b:
2e:05:47:47:1c:b0:49:f8:d4:e1:29:37:81:ba:af:
9c:08:1f:61:fe:be:14:5c:b2:3a:2b:19:ee:df:c3:
3f:28:a7:d7:2b:22:d8:4c:73:b5:19:c3:23:1c:50:
03:4b:32:aa:bd:32:09:68:b4:11:86:96:ae:f5:41:
53:08:e8:ac:44:18:f3:8e:18:b6:03:39:e0:41:55:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:AC:85:8D:37:22:62:D4:FB:29:C7:F5:8F:E2:E0:1D:63:79:35
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:23:b8:90:1a:39:0d:ca:27:14:af:1b:24:8a:b6:36:05:6b:
b7:cf:f2:da:92:c1:c8:30:48:4d:4a:1f:b2:88:1b:59:46:4a:
8a:bd:16:9a:23:05:3c:dd:7f:13:f0:f2:5f:a9:f6:d7:50:5a:
c8:b6:65:c3:21:c6:44:ea:01:de:dc:4f:46:d1:64:6d:4f:f2:
bb:62:12:47:ae:1e:1f:70:33:59:66:16:ed:11:bd:a6:1c:11:
8e:cd:98:a9:c2:89:7b:79:1e:88:36:35:5c:34:f5:c4:d2:eb:
af:65:be:c5:a2:4f:6f:08:9c:d4:1e:e9:d7:e8:71:d5:f9:cf:
eb:fa:b2:98:36:0d:f5:29:4c:5c:6f:9e:fd:e9:09:22:e6:63:
27:13:b7:7a:df:d4:d2:cc:2e:be:2c:a6:f1:5c:f9:98:3d:0a:
46:b2:67:bf:e9:37:2f:65:9f:bc:a4:30:20:94:df:f1:41:b2:
a7:7e:a6:2c:68:46:73:af:48:bf:54:d2:2d:79:c7:e6:04:ed:
75:ab:8d:a9:c4:8f:62:fb:a6:3b:a4:50:8a:7a:45:51:c3:d8:
af:65:eb:8b:5c:8a:7f:2b:32:78:dd:1e:16:12:51:bc:92:a5:
7a:67:25:ad:2d:5f:d7:9f:f8:62:22:7d:06:5d:a7:74:f1:f7:
d6:f0:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:23 2025 by rpki-client