Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: xz6rn2DIfGiEqvPC5JXyGAekqltE4/IWUtduXGmYCUs=
Subject key identifier: 40:9B:C0:3E:13:68:04:10:84:47:79:5C:F8:6F:02:FD:65:13:74:4D
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 0197B5FBD0B251A9352A3A4DCC0F9526D5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 10:01:08 +0000
Manifest this update: Sat 28 Jun 2025 10:01:08 +0000
Manifest next update: Sun 29 Jun 2025 10:01:08 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: tZXKXYSlXCr/t74b7t7XxdR+U4qVU+qJjRSafxY4L8Q=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d0:b2:51:a9:35:2a:3a:4d:cc:0f:95:26:d5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jun 28 10:01:08 2025 GMT
Not After : Jun 29 10:01:08 2025 GMT
Subject: CN=409bc03e136804108447795cf86f02fd6513744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d0:75:46:f0:10:93:4d:38:07:21:c7:76:a2:
46:4f:33:2c:a7:2c:c2:e9:9c:43:18:1a:2f:58:88:
4b:1e:d2:c5:cf:f1:29:b3:ce:a8:1c:9e:4f:61:8f:
47:dc:56:32:a9:68:f7:c5:54:c3:e1:33:ef:32:64:
19:e4:a9:41:0e:dd:1c:ac:29:52:75:66:01:81:83:
17:2e:06:9c:19:de:e8:6c:9c:92:e4:c3:1c:51:64:
90:f8:4d:9e:03:0f:57:ca:14:48:44:af:75:91:0f:
d6:db:66:22:c8:af:85:17:b4:75:c6:d3:62:2b:71:
48:6b:bc:c7:9a:2b:7d:38:90:49:86:28:3b:2d:9c:
88:a5:0f:2e:4f:07:39:96:22:17:66:f2:76:bf:10:
2d:79:06:ad:03:f0:9d:db:ae:f7:b8:85:50:4d:6e:
8c:9b:eb:2e:2b:c4:2f:a3:3d:9e:cb:cd:84:40:1e:
b7:ed:3d:98:37:7f:28:be:bd:e4:6a:3a:d9:bb:a3:
13:5c:64:d6:ba:c7:de:8c:f5:3c:c9:1e:75:29:35:
be:e0:3f:1c:0a:21:f7:46:7f:ba:2e:96:e9:6f:8c:
cc:28:ee:e7:13:01:e0:7a:98:b1:69:a2:22:0f:f5:
86:78:8e:2e:da:ea:a6:7c:ca:40:8e:5c:b7:22:96:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:C0:3E:13:68:04:10:84:47:79:5C:F8:6F:02:FD:65:13:74:4D
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a4:fa:ec:25:d2:4b:fe:38:d6:d0:3e:fa:07:1b:fc:8a:e0:
4a:84:41:b0:f0:75:bb:42:b9:ee:19:4a:f2:06:da:65:89:42:
ad:6a:2e:6c:3a:bf:e0:f7:26:85:53:49:f5:77:a1:37:d0:43:
a7:b9:13:ef:80:bf:8e:3f:e8:ed:92:63:2f:d6:bc:50:16:ff:
c1:38:a3:78:10:3e:8f:07:f0:5f:9c:45:6f:43:e7:3f:d7:23:
d2:7d:ac:5c:cc:47:09:36:62:c7:30:93:75:41:74:8b:9b:d5:
45:1b:43:eb:2f:8a:9a:45:e1:90:f3:8b:45:db:bf:e1:90:c0:
6a:99:5d:aa:1c:3d:87:4e:a1:14:74:df:41:d1:4a:7c:47:26:
e2:3e:be:b8:c2:aa:7b:dd:b4:be:49:53:ab:29:9d:e5:b1:53:
e1:f1:65:93:1c:59:e6:62:dc:47:14:1d:44:6c:ef:88:47:f8:
24:12:a8:b9:26:7b:cf:82:47:57:5b:ec:4d:39:4d:b2:8a:33:
12:c2:b4:aa:cc:bd:d3:87:7e:71:97:d5:3a:7b:b5:69:3d:b2:
de:d8:36:ae:91:19:6b:86:dd:63:42:a4:af:64:41:a1:41:8c:
12:e8:56:4d:6c:2b:21:41:97:35:b5:4e:0b:a0:d3:a6:67:e2:
9a:ec:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:14 2025 by rpki-client