Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: 7ngQlRg/KwYcnGNE6vBv9fDpAs2WpAxlGza10ooTyfA=
Subject key identifier: DA:F0:7C:89:4C:DF:67:E8:D0:15:9E:DA:55:5E:EC:A7:A0:BD:86:1F
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0197B5C526F786B758DCD5D4CBA17BA23127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 15C5
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: YfCP2J+MmGRrwcCNVmgMXVzGvb64kR5my2EbXOXllWA=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:26:f7:86:b7:58:dc:d5:d4:cb:a1:7b:a2:31:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=daf07c894cdf67e8d0159eda555eeca7a0bd861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:eb:25:ee:0f:22:f9:74:4a:28:cb:0c:fc:
3a:52:88:90:6d:ee:d8:b0:f1:14:bd:d4:94:0b:5b:
b7:26:a4:ba:60:40:4d:01:54:cf:05:27:ab:2b:28:
d7:83:05:96:26:a5:43:b3:82:12:e2:04:01:71:f5:
d1:85:bc:f2:fa:25:ec:b7:72:16:30:b3:5c:1d:d0:
48:d9:23:97:a9:5f:b9:20:fb:d7:33:5b:2e:65:8b:
c0:2a:a8:dd:c8:cf:1d:6f:ae:b3:82:21:fd:d9:f3:
45:2a:7f:de:0a:5e:a2:79:34:1d:d7:84:a5:d5:06:
54:17:48:be:60:be:6a:23:f1:95:f3:1f:54:fc:21:
c9:2a:da:0d:ab:99:2f:04:e3:14:14:8d:5f:db:2b:
63:5f:5b:a7:70:03:8f:89:5f:8e:e5:1b:97:5c:1d:
1f:5e:57:59:a2:9b:f2:0f:99:88:f7:2b:24:59:8e:
cc:8f:c8:a5:e0:f0:26:c7:7a:bf:f8:2b:4b:45:44:
e3:a2:a7:25:52:94:f6:25:ff:8f:a4:87:9a:8d:f9:
6c:b2:85:1f:22:b9:7e:f4:cb:e5:87:b6:de:39:e0:
76:13:46:15:03:2a:31:5b:b4:a9:13:4f:82:1f:9d:
67:9c:ab:43:57:d4:0b:b3:b2:6b:e0:c9:8f:a4:3b:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:7C:89:4C:DF:67:E8:D0:15:9E:DA:55:5E:EC:A7:A0:BD:86:1F
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:41:55:fa:1a:da:05:64:77:56:ee:8e:cd:f3:88:ab:48:
95:de:8c:cf:84:e2:3f:a6:26:70:7f:86:d4:45:24:ee:dc:a3:
c4:9f:b8:aa:ec:8b:57:d7:74:24:65:ae:ad:e3:0a:60:85:72:
8d:10:68:3a:f0:62:ca:c4:b6:cf:e8:c9:28:f7:8d:25:03:b2:
d2:03:3d:12:02:2a:16:af:a5:61:6a:a0:c8:dc:f5:84:83:70:
9b:80:09:5e:a4:4f:b4:36:76:e9:c0:ca:ee:cb:73:b6:40:ed:
42:5c:51:41:2e:2a:da:75:86:1d:4d:a7:4a:7e:d2:5e:8a:0d:
fa:02:3c:42:3c:13:99:05:e9:b6:d2:29:b3:f8:cf:d9:24:9a:
d3:b1:23:33:67:4f:61:93:68:7a:b0:4e:5f:e9:81:25:de:eb:
18:7a:7f:b1:0a:f2:fd:01:ca:d7:f7:3a:e4:71:32:46:01:17:
97:8b:74:19:e3:74:b3:e6:48:08:34:83:d3:73:df:c5:33:4b:
8b:d9:79:ac:7f:b0:5d:22:59:91:b0:42:18:b0:16:c3:65:47:
5b:46:d8:72:08:7a:46:61:55:4b:b7:f7:52:7c:96:ee:af:9c:
2b:dd:e7:3f:76:30:70:5d:3a:ba:f3:af:2b:f0:8f:bb:23:02:
69:32:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:48 2025 by rpki-client