Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: TYZtwfyCLepbgD001gqZbhWCBp9gjySHvHO6AV5g7KY=
Subject key identifier: DD:70:ED:98:A6:DC:68:65:18:2E:36:9D:61:65:9D:3B:EA:E8:0A:8A
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 0197B6A0C976944B3E13DE42D556C77B366D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: admfbbP+GJ5fsCFyjZtvC1m+DVC7MXcCiQf264Y8ANQ=)
2: gd86nab0qf28eq3d5pPFq5e9rZo.roa (hash: OleM9BzJjHgCcSMlxVVC1tH0LyJmqbhh/CO/g3APccs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c9:76:94:4b:3e:13:de:42:d5:56:c7:7b:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=dd70ed98a6dc6865182e369d61659d3beae80a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:9b:db:a0:7d:68:f9:8d:8b:12:4e:45:5f:
a9:b7:dd:71:77:23:37:f1:4e:4a:28:c0:7b:e7:b9:
77:63:3f:9a:0d:82:e8:68:bc:25:02:a0:ca:3d:c4:
bb:fe:a4:e6:43:1f:cc:49:ca:a6:f9:6a:8e:0e:94:
5b:84:c3:e0:95:51:11:d6:f6:97:47:c6:58:05:57:
84:a1:b3:dc:62:16:cf:30:7f:65:7c:8a:10:0c:be:
f4:99:4e:d6:25:89:99:4b:8a:2d:3c:ac:62:29:e8:
4f:d1:ae:a6:1d:d7:76:e3:d2:7e:59:da:fc:78:f8:
b4:85:05:8f:1d:e4:0b:1d:43:27:f4:74:f6:9d:4c:
7d:bb:88:1c:41:a0:b4:31:d4:df:16:10:10:a0:cd:
2e:4c:bc:8a:c8:8c:68:a6:cb:c9:8f:45:5e:e8:08:
74:75:4a:b2:12:d8:98:02:19:eb:19:f6:0b:93:a3:
75:84:e2:01:c8:bf:2c:5a:ca:66:7c:07:b5:22:2c:
51:74:0f:f3:38:68:e3:ad:a4:c3:d3:3b:b3:9b:31:
c0:cf:90:ed:67:22:ee:5b:b7:94:a5:e7:02:85:0e:
8c:f8:70:e8:c4:4a:5b:80:23:48:0f:28:1c:0e:92:
f1:1b:ed:09:08:cd:40:25:eb:20:76:ec:37:aa:a0:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:ED:98:A6:DC:68:65:18:2E:36:9D:61:65:9D:3B:EA:E8:0A:8A
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:83:b2:9b:7b:86:d3:83:70:4a:58:12:0b:d1:cc:ed:82:
0e:5e:7a:34:df:dc:f8:aa:87:e2:2e:a9:9b:19:ab:bc:d6:75:
18:8a:a6:55:f1:70:99:6f:b5:70:59:a1:7e:c2:22:c0:cc:0c:
34:d7:c7:d4:9b:e5:8e:31:05:03:15:a9:84:80:fd:ed:76:0d:
7a:07:ab:23:9e:04:14:06:d5:ab:05:89:35:38:d3:c1:0d:0d:
b4:fa:ae:23:b8:12:25:7e:a9:f2:8c:6a:90:b6:1d:50:7c:8a:
37:cd:89:5c:d9:ed:c4:ca:1e:c9:16:12:c6:39:df:e0:56:e1:
1f:bd:61:01:3b:08:33:2d:57:d6:bd:4c:65:81:af:df:43:ef:
1d:c9:59:12:55:76:a9:70:48:d6:5c:51:4d:71:18:65:ec:80:
33:31:eb:c5:ae:ec:3a:85:47:9d:67:9b:08:f1:0b:42:bb:c4:
88:93:5e:d1:16:88:3e:12:ab:be:ff:37:59:cc:cd:b5:9b:d6:
c6:89:81:e4:3a:40:43:c6:79:56:0f:3a:9e:9a:f0:0a:f5:a7:
38:99:67:3f:5b:0a:48:41:b8:cb:cf:14:cc:98:95:75:b2:33:
9d:a2:9a:ec:c9:bd:73:c9:ac:2c:77:4e:bf:69:39:f0:7e:f9:
ef:0d:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:30 2025 by rpki-client