Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.mft (raw, json)
Hash identifier: M5toAS4QFm8RiUdr5fOMlFJAPiMYLPiKnI+2ITFRODU=
Subject key identifier: B0:98:6A:D1:7C:C4:D8:C0:71:FF:08:DD:20:97:9F:3C:54:03:0E:46
Authority key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Certificate issuer: /CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Certificate serial: 0197B6A1462C32DB0BA56895C050520F3D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
Manifest number: 151F
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: 2NIjgppmhuxRYrz3DLITLBRmQ5Y.roa (hash: pfK3DW+mhfPMlrHb+zKcoWL6SLQiJQcLNvXFegBqlig=)
2: 2wpVo-1qrv-asCJTkXrJnRU3Amw.crl (hash: N4Sqbl4p9LFSwxIhgqg7kRL4b5VmHbrLSINIOCWaHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:46:2c:32:db:0b:a5:68:95:c0:50:52:0f:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=b0986ad17cc4d8c071ff08dd20979f3c54030e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:ef:dd:61:8e:84:3d:8b:af:15:30:fc:c8:
17:11:b9:d4:ba:81:2d:59:f1:53:52:c8:38:a5:d5:
cd:cd:7d:b5:23:02:9f:53:50:c6:d4:9f:a3:52:af:
11:82:51:b7:25:d5:ae:77:29:0e:9f:88:aa:28:55:
66:0a:a5:97:b6:c7:3c:e4:6a:ea:74:03:ac:b7:30:
52:6c:f6:a7:4b:0b:bf:9b:d4:e6:9b:fa:33:03:04:
e2:07:8f:60:27:1b:69:b0:39:48:7a:40:77:5a:1c:
9b:c5:91:c1:a7:1d:56:2d:fb:b7:5c:a6:f9:f2:b9:
ed:40:05:c7:66:56:1e:46:35:ab:5b:8f:66:1d:48:
d8:eb:1c:b3:43:0e:c6:74:d8:dd:7b:53:15:59:82:
9a:ca:3c:d6:86:b1:19:5b:bd:4a:a9:4c:b4:3c:b8:
09:cd:00:8c:90:f8:50:e2:67:4e:44:2a:7d:23:0c:
cb:9e:fd:1b:71:be:60:de:76:f4:b3:6f:af:a3:a3:
b0:3d:e1:cc:32:c8:27:52:de:29:19:46:bc:ac:98:
00:da:03:51:40:85:04:ec:54:8e:d6:7f:2b:a8:c6:
7c:57:b5:28:c0:27:a3:78:5a:3e:08:05:00:8a:cf:
b4:81:ab:f2:09:b0:af:a6:bf:bf:29:f9:6d:e6:cb:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:6A:D1:7C:C4:D8:C0:71:FF:08:DD:20:97:9F:3C:54:03:0E:46
X509v3 Authority Key Identifier:
keyid:DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a5:cb:6b:e7:d9:97:93:95:b3:02:17:51:36:28:8b:0c:27:
00:fe:47:75:b5:50:3f:68:53:3a:06:31:8a:54:bb:02:85:3c:
1c:3d:76:be:64:77:f6:64:4c:2f:1f:84:b3:ca:ab:08:78:77:
cb:0a:a4:cd:a8:db:0a:02:ee:c3:4b:9b:b0:12:41:17:ea:fa:
6f:1f:6f:33:94:70:4e:9d:a2:d6:f3:e5:84:24:40:fc:00:c4:
f9:ed:44:de:3c:02:33:66:11:a4:47:6f:82:4f:e7:40:fe:5b:
e3:79:c3:ce:15:74:d7:cd:54:2c:9e:f3:c0:be:dc:3b:ee:84:
11:51:95:6d:60:85:18:37:2f:29:2c:cf:a0:47:34:34:9a:f4:
67:c4:d0:ba:7b:c8:07:4a:4e:1a:aa:91:38:67:98:36:03:01:
d2:29:68:f0:7d:38:16:1b:a0:96:dd:ac:e7:0f:0c:4f:fd:66:
e3:35:fd:9c:25:5a:b3:56:1a:a8:7c:64:13:1a:7d:f7:44:fd:
71:fc:45:ce:98:79:b5:ac:14:8a:49:53:02:33:49:61:47:1b:
83:5b:94:7b:72:da:54:e3:66:25:f6:0b:f8:3a:04:8f:03:a5:
5f:cc:aa:81:c2:54:97:03:45:8e:c5:fd:5a:b7:f5:1f:e3:ca:
db:cc:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:19 2025 by rpki-client