Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: XP9xZyFZergeNcPyJY0FOIH9vXaORW0MUBpNS8oBxTU=
Subject key identifier: 64:54:F0:0F:5D:0F:B3:D6:06:5F:2C:35:0E:85:CA:DE:14:9B:C3:57
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 0197B820D41695361E52B3E9DC50E4923D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 12F2
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: yl1GjMxNgFqEninU3dpvjhYQ0yTCJOJWPUBWiZzHm5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d4:16:95:36:1e:52:b3:e9:dc:50:e4:92:3d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=6454f00f5d0fb3d6065f2c350e85cade149bc357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:84:53:85:6a:ec:88:66:19:36:79:d7:c2:
de:ae:c6:db:6d:ae:46:d7:59:0d:93:ad:03:0e:51:
7d:3b:cb:86:0d:e1:e6:88:3e:65:13:8b:c0:66:6f:
3f:06:39:e5:02:c0:6a:b6:ad:4a:a6:fb:e8:54:e6:
69:bb:f0:f9:c9:ab:cd:dd:d5:ad:7d:1f:6d:f9:c3:
47:05:fa:6d:e2:00:bf:ea:34:c2:96:5d:44:2a:38:
e0:73:60:fe:8a:21:39:bd:b6:03:2a:01:6c:f8:b3:
e0:f8:6b:73:63:7e:45:25:94:16:cc:c8:3d:54:ce:
bd:8c:cf:bf:06:98:a9:a0:c9:93:b6:ac:93:1c:a4:
7d:8e:a7:56:14:a2:03:d8:b2:a4:ac:6b:55:65:89:
c3:4c:29:17:8f:cd:90:1d:5f:ac:25:14:b2:76:3b:
ac:17:10:95:0f:fe:89:4d:0f:ab:d5:ba:53:90:59:
d2:7f:57:98:42:3c:b7:0a:b2:85:7e:d0:51:80:e8:
72:e1:9b:13:ab:b0:98:6c:04:53:ca:60:64:cb:e8:
b9:70:a0:d9:c8:e5:d2:19:a5:53:3f:97:67:35:26:
8b:6b:8f:55:79:65:e7:95:47:0d:ba:ce:27:ac:39:
1d:2a:e5:fe:8e:95:52:e8:2e:3a:7d:aa:cb:f7:82:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:F0:0F:5D:0F:B3:D6:06:5F:2C:35:0E:85:CA:DE:14:9B:C3:57
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8a:e9:15:fe:5e:70:f4:e9:7e:94:7f:ca:cb:c3:3d:53:a8:
20:a6:83:99:0d:10:8d:ff:a0:7e:4b:af:65:cf:85:c0:54:63:
ba:d4:7e:8a:5a:0b:58:a2:97:0c:82:31:b8:4b:b3:fe:2f:a5:
8b:ad:e3:b2:8a:1b:37:fd:ea:67:36:7a:42:ef:be:30:96:1a:
fa:fa:54:6d:78:1f:eb:56:f5:0f:be:98:a1:dd:96:dc:a1:e4:
a7:3e:50:5c:c3:02:38:fc:c4:4a:c7:d6:07:0f:c7:48:5f:89:
8b:9c:69:88:f5:1a:3b:d5:50:6c:21:3a:29:36:3b:e6:7a:bf:
0e:fa:82:24:a1:94:5f:06:e4:b0:c1:37:3d:ab:8e:a4:a1:50:
74:d3:6f:76:07:10:25:03:42:5e:4d:11:33:de:e5:dc:6b:eb:
7a:c2:6b:48:6f:50:15:34:32:b8:57:3d:f0:7c:30:41:2c:a7:
2c:68:ac:92:3a:5b:71:b0:47:29:92:62:17:7d:51:d7:2f:c7:
d6:76:14:e9:ef:aa:ae:1a:26:5d:17:02:1a:81:9f:2a:72:ae:
98:94:19:5e:d6:8d:8f:98:10:f4:82:1c:3a:80:b5:9e:1e:35:
c7:9b:70:f5:cc:d5:11:db:26:92:02:fc:85:8b:7d:dd:fa:12:
06:46:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:33 2025 by rpki-client