Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: cvBLiFu6Kq24CrYzhQWMNgbNY4jDRFAM2cBlP0gRl3g=
Subject key identifier: B0:FE:B9:A6:7C:C8:F5:4A:5F:60:3B:B2:CB:E7:55:61:D9:A1:CD:1E
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 0197B7B2F539C21E7264EBEB8FB4739D3363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 30
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: v2l1K4Q2Efx8QaXD0MH7wip2fe4k0D9frD7IHTII8gQ=)
2: KIJNA59uDb5jeuperkH1ytHHaXY.roa (hash: FNj6mHvJhlFniaYHRv1Jg0zqnMbw0aJyG3OHR4imABM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f5:39:c2:1e:72:64:eb:eb:8f:b4:73:9d:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=b0feb9a67cc8f54a5f603bb2cbe75561d9a1cd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:76:a2:f0:0b:55:3c:6e:cd:45:a1:3c:02:
c6:66:5c:10:48:86:3f:2a:13:01:7c:b6:d4:88:70:
8d:32:73:f2:10:4f:ae:c6:26:5a:5f:40:c4:b4:a4:
8c:08:51:ff:da:01:d8:11:22:80:dc:1a:d8:81:4d:
31:cb:35:bf:c2:e5:78:db:c4:32:91:0e:98:f2:54:
6c:d3:84:09:a2:bb:33:6b:2a:55:ea:23:14:9a:5a:
2b:fd:a7:61:16:2b:98:7b:fd:66:43:11:75:23:6c:
de:5c:94:b6:a8:bb:44:6e:b4:6f:05:f8:63:19:b3:
c5:96:05:0b:5e:dc:14:19:c9:7a:e9:87:4c:a7:42:
63:3f:34:93:26:82:e1:e1:2f:06:a9:fb:ff:fd:e7:
ad:d5:e4:b6:0e:c5:88:af:64:27:80:4e:2c:db:3f:
78:c3:9a:21:3e:a8:9b:9c:fb:c2:04:54:7b:89:43:
7b:b3:9f:26:85:37:4b:b1:c1:98:16:9d:68:95:17:
dd:d5:f6:a3:04:36:30:bf:8f:18:6f:1d:d3:93:eb:
58:bb:55:45:4a:42:30:8c:b3:f9:b1:a2:64:64:0e:
2a:25:57:7b:9b:63:4c:1e:32:dd:2c:84:66:0c:c7:
4e:b0:e4:97:4f:06:6c:27:64:af:d1:37:1c:a2:0b:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:B9:A6:7C:C8:F5:4A:5F:60:3B:B2:CB:E7:55:61:D9:A1:CD:1E
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:43:14:1a:7f:f8:60:cc:f9:9d:7e:95:2b:7d:9d:29:89:27:
f9:fd:5d:ce:8d:71:2e:f8:5d:42:66:34:86:88:e5:a7:d9:9b:
77:15:d5:17:e8:36:65:1a:f2:08:04:ad:8f:c0:82:f7:f2:7b:
e0:bf:a9:1a:79:c2:37:be:95:90:be:a5:b8:ec:53:7f:44:c5:
66:01:81:9f:33:4f:ab:c8:af:41:0c:b4:15:d5:7e:9b:8b:bb:
e9:07:c4:9f:a7:6a:07:1b:71:de:f8:8a:f8:01:78:f9:91:61:
58:73:97:59:c7:70:8f:ce:03:d0:a4:3e:c9:d5:04:e0:65:cf:
18:59:a6:74:95:e5:27:11:d6:e5:1a:2e:fa:e9:3a:4c:7c:9a:
fd:1f:92:47:57:ae:3a:3a:1f:77:ff:a3:e5:18:c7:01:96:17:
2d:c4:85:58:cf:ab:50:9c:6e:e9:18:f5:2e:a2:ae:1b:11:af:
77:76:34:25:f8:11:6a:b5:57:20:9e:cb:c2:a4:ae:8e:e9:72:
cb:ca:81:62:ac:8c:59:2a:58:7b:2b:2b:f1:47:2f:c2:5c:19:
8a:91:c4:d8:74:9f:16:88:62:83:f7:85:99:c0:9e:f8:d7:e3:
46:b0:ca:20:66:3d:90:f1:d0:73:67:96:60:6a:33:50:7c:f5:
88:44:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:02:40 2025 by rpki-client