Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: D9+mwmZoMlREX5kVAQFxDf6kGqm1GMdprwgPQCFD228=
Subject key identifier: 5A:DD:B0:6C:54:39:D8:91:0B:7C:CB:B2:F7:05:85:6F:67:96:0D:64
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0197D0CDF6B05C6D7A2643E1DAABBCC7CF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0473
Signing time: Thu 03 Jul 2025 15:00:48 +0000
Manifest this update: Thu 03 Jul 2025 15:00:48 +0000
Manifest next update: Fri 04 Jul 2025 15:00:48 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: n/MKp0wrRfO55eXW7xKATt5cf6Z634n2BtxtDX7dDlU=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:cd:f6:b0:5c:6d:7a:26:43:e1:da:ab:bc:c7:cf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Jul 3 15:00:48 2025 GMT
Not After : Jul 4 15:00:48 2025 GMT
Subject: CN=5addb06c5439d8910b7ccbb2f705856f67960d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:d3:42:19:9e:b4:88:83:02:1d:c9:7f:91:
50:47:04:d1:59:76:2d:29:63:24:a1:d3:a3:1a:86:
8a:e8:50:40:ab:0a:d7:30:56:06:7c:ba:ab:77:6e:
0c:67:8f:51:5b:8d:13:26:6d:db:19:89:11:f1:a8:
48:76:02:a8:a4:c9:40:de:06:82:ef:b6:aa:c3:8e:
06:4e:07:8e:cf:96:be:e6:12:31:dd:7e:b7:ea:e9:
dc:9e:2d:d3:8a:fb:a2:9e:33:af:84:d1:aa:be:51:
a3:4e:68:10:64:68:ef:f3:3d:54:26:7f:97:92:ae:
e5:88:0d:32:a1:ab:3e:a8:b8:77:af:ee:e4:f9:22:
8d:b1:69:6e:2c:7f:31:b4:7e:93:01:a9:3a:a4:1e:
b6:8c:97:43:05:99:17:ba:a5:5d:c8:e0:7d:25:d1:
85:4c:88:3a:89:6f:02:55:a5:9d:71:8e:ef:af:70:
7d:bb:46:bd:48:26:af:73:f9:c4:4e:99:06:00:dd:
ed:b2:f3:e5:66:a0:44:b3:c5:a0:22:bf:2d:c9:fa:
e3:5b:67:ab:b2:de:7f:09:9e:fd:51:61:84:26:39:
3a:6b:34:6a:a3:b5:6d:0c:7d:44:55:d6:82:23:57:
a9:57:2d:e7:48:d3:b1:15:07:5a:04:2a:6b:a0:4a:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:B0:6C:54:39:D8:91:0B:7C:CB:B2:F7:05:85:6F:67:96:0D:64
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:73:23:1b:95:d4:5b:ae:6f:8a:ef:62:13:9b:7c:b6:c8:99:
b5:1d:91:dd:01:0f:ef:ba:37:01:b2:83:5d:ea:e5:ce:6f:f9:
e9:de:44:a7:f9:03:9c:0e:8a:19:33:6b:ec:73:2c:b9:92:0a:
d2:c8:68:e7:95:0f:6c:ca:d3:f9:da:d9:6c:4f:84:f8:10:64:
62:c0:07:8c:6b:d3:a6:cb:e1:86:c4:6e:c8:9a:d4:94:50:fa:
cc:fc:95:dd:bb:6f:ac:3d:0b:40:15:f4:54:ef:11:e9:1f:eb:
a9:d1:96:5c:32:03:57:5c:19:0e:3c:c7:54:45:be:4f:41:f5:
53:82:6c:6a:71:68:fb:ae:c0:61:9f:87:a8:9f:5c:e1:da:89:
4c:b2:99:44:51:9d:a3:e4:92:5c:c1:e5:a1:47:73:ae:ff:da:
d7:e9:49:e8:62:fc:9c:09:96:19:73:bc:55:42:3a:31:24:91:
67:d5:0b:b7:71:a5:cd:41:5c:a6:32:51:05:0a:37:38:a6:9e:
b0:82:64:37:72:d7:02:4d:fa:ea:c9:17:dc:ac:37:91:4e:4d:
33:71:21:fc:ea:31:72:8d:62:05:14:ae:58:6e:0c:23:93:12:
84:59:99:67:86:24:25:bf:7a:80:ca:47:26:c5:7e:90:40:77:
fa:d5:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:15:10 2025 by rpki-client