Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: 2B2tid+6iHJOegByNQQQNxIL6bb5BZ/uGm6s3Oi90lY=
Subject key identifier: 28:F6:54:12:A0:4C:BC:1C:A1:AC:C0:12:1A:19:02:5B:AA:49:D2:62
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019748C2EF8CE25697ECB7FFB7FEFA3F66B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0DA3
Signing time: Sat 07 Jun 2025 05:00:24 +0000
Manifest this update: Sat 07 Jun 2025 05:00:24 +0000
Manifest next update: Sun 08 Jun 2025 05:00:24 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: LjgA8OuZxhArpj+XUhbgtpmUkzHuajGXJkUvnzc6nbQ=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ef:8c:e2:56:97:ec:b7:ff:b7:fe:fa:3f:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jun 7 05:00:24 2025 GMT
Not After : Jun 8 05:00:24 2025 GMT
Subject: CN=28f65412a04cbc1ca1acc0121a19025baa49d262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:c3:98:f5:c0:af:5c:80:cf:65:f6:cd:d8:
9a:e0:ea:29:72:2a:f7:ed:8f:24:6b:44:6b:b8:af:
49:cd:2c:2e:3c:ef:a8:4f:dc:5c:bf:c2:0c:0d:e9:
91:81:8a:b2:a4:20:e8:80:f5:c5:0f:a7:42:73:b9:
ca:c7:21:68:8d:d8:b9:d9:0d:2a:3a:65:0b:12:8f:
41:7a:24:af:c4:6a:49:68:83:63:5f:a9:42:44:aa:
98:6b:f8:8c:2b:d1:d2:c0:39:15:79:25:38:af:f1:
05:54:8c:2f:fd:5b:5b:3e:31:80:eb:85:d8:52:fb:
c8:bf:65:04:78:2a:79:ee:97:5e:0b:7b:2e:6a:58:
b7:47:ce:d3:2d:2e:fd:b0:dd:ad:c1:c4:4f:a1:35:
56:9c:92:90:c3:fd:d9:79:6d:2c:b7:c9:a5:22:b5:
d9:79:fb:54:91:f9:83:eb:ae:8f:22:9f:93:3c:74:
76:9b:40:d4:54:6d:d5:16:d9:4d:11:a8:eb:79:99:
ea:8d:0f:0b:d2:29:40:4a:89:60:74:e5:b1:cf:45:
64:88:bc:08:59:80:2e:76:46:53:d1:e9:e7:4e:88:
17:30:91:16:3d:0a:c5:f1:2f:a6:81:85:94:b7:a7:
2d:91:ae:64:c1:48:fa:6b:91:35:00:03:88:15:84:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:54:12:A0:4C:BC:1C:A1:AC:C0:12:1A:19:02:5B:AA:49:D2:62
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:63:02:39:37:1f:0a:c0:68:e1:be:21:f5:83:5c:ce:37:
63:35:64:cb:1b:28:46:08:64:e9:23:b9:0b:20:aa:ac:bc:38:
15:3e:0e:0a:72:fa:26:e9:e2:37:54:9b:78:aa:c9:f2:65:ca:
bb:bc:92:93:11:f6:c6:f4:62:9d:d6:4e:48:9a:cb:af:b6:d0:
66:be:50:c3:61:53:87:63:85:6c:80:1d:4a:d9:b3:dc:e3:e0:
25:00:05:e9:3e:de:b7:eb:18:32:ed:9f:9c:19:93:ff:3c:9d:
cd:44:d7:9f:c3:fc:b0:78:29:25:f2:d4:ab:ba:a0:9b:70:84:
5e:ee:b7:90:40:65:d2:a3:d3:1b:14:c5:09:5d:df:6f:4c:dc:
88:6b:34:ea:ec:9d:9d:e1:d1:fc:eb:32:88:7c:1e:ea:5e:87:
8a:c0:0a:5a:ac:c0:d3:e2:0e:6e:89:b2:07:d8:93:20:7e:2d:
d5:3e:54:71:3f:a8:88:04:f0:45:34:09:5d:4a:83:3d:8d:bc:
a5:e6:41:ec:ad:19:e4:a1:68:15:45:e4:6c:6f:47:a1:d5:d5:
ac:5e:43:4d:bb:49:f4:ae:34:da:cf:ff:d1:99:53:ab:5a:dd:
e6:0d:e8:72:bc:2a:ff:b7:b4:d9:0a:3b:fa:bc:23:67:02:e5:
18:15:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:37:27 2025 by rpki-client