Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: 7SoAoMJkGJ+BSIneZiTeVsghNIAhxgkKG2WuS/Dj58Y=
Subject key identifier: 0A:DD:B5:3F:86:3A:56:7A:EF:88:2F:D3:63:0B:CD:01:CE:60:0A:74
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019922FA52260D01FA5F9755F7E12ECF56D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 087D
Signing time: Sun 07 Sep 2025 07:00:54 +0000
Manifest this update: Sun 07 Sep 2025 07:00:54 +0000
Manifest next update: Mon 08 Sep 2025 07:00:54 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: 0htyX0gKmiWzgbWo0lH1glru2UAtIFjmo0cedqjJSCQ=)
2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:52:26:0d:01:fa:5f:97:55:f7:e1:2e:cf:56:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Sep 7 07:00:54 2025 GMT
Not After : Sep 8 07:00:54 2025 GMT
Subject: CN=0addb53f863a567aef882fd3630bcd01ce600a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:de:6b:92:83:46:44:2d:c9:68:76:29:36:
24:1d:60:36:6a:1b:1c:d5:05:75:7a:f4:66:f5:9e:
db:f6:cd:5f:3b:56:f4:2d:73:b4:95:8d:7c:ee:d7:
f0:4f:83:bc:82:37:64:78:0f:57:88:dd:6c:28:eb:
f1:06:d6:f5:a5:e1:d4:9f:94:ca:c1:d5:70:97:1a:
c0:0f:53:cd:ff:3e:d9:45:07:26:c0:8f:c0:ac:a8:
0c:cc:42:87:96:ba:93:04:a7:42:47:72:9d:5e:a7:
80:81:bb:b8:3a:40:b0:f5:7e:d2:08:29:71:11:91:
54:54:a6:8f:60:f3:02:50:b5:37:12:61:fd:24:b1:
fa:1f:50:bf:75:56:1e:4d:b2:ca:b2:4d:e6:99:8d:
7e:33:43:86:73:ce:bf:02:88:b6:94:d3:43:a7:c8:
23:72:56:f5:fb:9e:3d:46:4f:45:fd:69:21:22:b3:
1e:bd:c0:e2:1c:53:4b:b2:ee:1a:7a:0b:24:42:1c:
b8:6d:a4:68:47:97:13:de:67:63:25:d2:eb:a8:ce:
03:1f:a2:08:99:b0:e4:7c:fa:e5:da:29:43:d9:39:
e0:2f:07:e5:af:ab:50:fe:27:be:04:3b:1f:9e:52:
57:56:47:cf:de:50:ee:21:9e:e0:a8:ff:4e:0a:b6:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:B5:3F:86:3A:56:7A:EF:88:2F:D3:63:0B:CD:01:CE:60:0A:74
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:e5:b7:ba:eb:58:2c:a5:e8:30:52:cb:f6:dc:bd:30:2c:
1c:72:5d:a2:6d:81:d9:06:0c:e4:69:ba:7e:1c:13:c9:d1:de:
52:ad:1e:aa:a4:bd:c2:f8:65:ba:12:66:1c:39:9d:5a:58:ce:
46:d8:4e:d5:86:d1:91:54:35:75:fe:af:e9:e6:99:7a:ba:b0:
cd:f7:58:58:b3:08:70:32:89:71:c6:90:7b:11:d2:d3:b8:64:
c8:cb:ab:ce:c9:6b:37:4d:7d:d7:ef:42:a1:9a:6b:37:92:dd:
9d:61:b2:ba:e0:25:8f:8d:31:3d:f7:c4:58:d5:56:73:c4:1a:
d5:7e:47:cb:ab:70:76:f7:26:1c:af:aa:f8:0c:e7:1e:82:62:
a6:e8:74:65:ca:7d:3d:91:a6:e7:d9:22:86:2e:6f:06:6d:f9:
4d:c1:88:2e:83:fa:cf:d1:f4:d1:62:1e:00:bd:d9:9b:8b:a7:
84:69:38:db:84:14:95:33:20:a4:88:26:15:6b:b9:83:9e:a3:
31:00:cb:60:70:5e:57:56:e1:35:90:51:bc:37:0d:61:27:ec:
ef:59:97:00:90:88:ff:6e:12:c6:44:e3:0d:cc:a0:47:82:c8:
70:fe:40:b1:3f:16:9d:ee:b8:57:58:be:9f:78:c9:65:6d:43:
70:48:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:59 2025 by rpki-client