Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: IkiObCmxEtnwbZy+hmfGy2MY6RoOfN/aYUa5tLGy+sg=
Subject key identifier: E2:FE:11:C4:18:02:A8:35:05:64:8C:8A:96:47:B0:4E:48:6B:43:ED
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 0197B7B321886B22686066B729D83B1EFA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 2B
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: D+q5JFYPIiNnQwckAE5L4oVHlseB3Q1DmIjU/wLh0eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:21:88:6b:22:68:60:66:b7:29:d8:3b:1e:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=e2fe11c41802a83505648c8a9647b04e486b43ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:6b:3e:67:be:f1:99:e6:e8:81:6f:80:4b:
e8:8e:f3:11:5e:c2:bf:f5:16:a8:f8:36:cb:9f:96:
68:7c:3e:99:89:52:6a:8c:38:9f:a4:a5:30:37:18:
0d:64:49:d5:3f:46:63:1e:41:3f:dc:44:95:2f:a8:
7c:9e:8d:fc:f4:17:93:e3:c1:c4:4a:eb:ee:8e:8f:
c5:36:ee:55:54:9a:fb:2d:81:e3:7f:71:02:1d:9f:
98:27:ec:2e:d8:38:d7:aa:87:21:88:e9:e8:18:e0:
1d:1e:15:4a:42:78:8d:df:73:16:b1:bf:c9:3d:b8:
06:2e:14:22:e2:24:a4:78:77:0e:ff:74:35:5d:b1:
d0:62:04:a7:f3:1f:bb:1f:a1:a6:dc:bb:b7:5f:67:
68:06:31:78:b4:e4:03:aa:f9:03:da:db:bc:be:be:
12:c0:8b:92:7e:41:53:dd:21:48:58:af:88:df:56:
e3:7d:75:1e:75:7f:b0:47:6d:81:79:13:a9:73:dc:
e4:db:8c:c7:e9:33:85:7a:ff:ae:05:a9:2c:53:76:
f2:1f:30:73:5e:1d:2a:aa:54:8a:45:11:18:e0:b1:
e5:c1:23:00:75:f7:54:19:02:b3:50:53:73:32:1a:
16:e9:ef:ff:95:53:93:05:f8:98:2e:0f:9b:95:d9:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:11:C4:18:02:A8:35:05:64:8C:8A:96:47:B0:4E:48:6B:43:ED
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:08:32:4b:77:35:50:ef:91:71:90:17:c5:74:5e:4d:f0:a7:
10:58:66:9c:52:b2:4f:57:55:3a:41:e5:3c:bd:1d:c6:49:e5:
91:6a:2a:d2:41:1f:38:32:39:8e:cf:97:4e:c1:b9:48:08:7e:
b3:61:30:3d:e6:aa:94:1f:07:8c:a6:25:28:33:fa:1f:a9:b8:
73:94:2b:a3:5a:63:3b:93:3c:89:95:2f:55:13:f3:66:31:d9:
07:4e:b1:45:70:b7:9a:d2:e4:0b:b9:05:f1:b7:73:ca:6e:f6:
42:95:90:fb:4e:cb:e9:c5:89:59:a3:9d:56:64:2b:8e:f5:ea:
2d:bf:12:7a:5d:fd:dd:5c:71:c3:40:45:85:a3:90:7f:67:9c:
33:dc:8b:29:65:45:a5:d9:c4:9f:b5:4e:d7:9e:c0:31:d1:67:
d7:e1:cb:2c:98:53:3f:2e:0d:c8:9b:ec:f3:99:94:8f:0a:fa:
2b:b4:3d:75:0a:78:a7:21:92:fa:28:2a:73:d5:a0:f8:f8:57:
c3:80:ad:bf:4e:49:b1:82:f4:4f:fd:3e:0f:2a:4c:11:48:a2:
30:15:06:d6:7e:06:d8:5c:f9:66:8d:eb:9b:a7:cb:05:95:f1:
56:05:a8:5c:27:42:f1:52:75:56:6a:52:27:b2:82:87:df:70:
79:13:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:22 2025 by rpki-client