Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: bcxN4Qx/Ll0r7asEO7qFlhP3fiWwRgR5eOUgnFHEDP0=
Subject key identifier: CE:A2:58:29:B4:42:60:06:32:8B:F1:8A:8A:21:D2:AA:2C:4E:C7:ED
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 0197B9D8A38BDA9CAFDE254A946FF1DFEED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 04:01:11 +0000
Manifest this update: Sun 29 Jun 2025 04:01:11 +0000
Manifest next update: Mon 30 Jun 2025 04:01:11 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: rpV+C9shh/BDPgtuIhZ5yP1LXOQa22SwEKViK9zhaBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:a3:8b:da:9c:af:de:25:4a:94:6f:f1:df:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Jun 29 04:01:11 2025 GMT
Not After : Jun 30 04:01:11 2025 GMT
Subject: CN=cea25829b4426006328bf18a8a21d2aa2c4ec7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:0b:30:fd:6e:3a:d8:22:69:42:65:ed:aa:
1e:88:85:88:e8:0c:e2:0a:a4:e3:c5:44:02:2e:ad:
7f:9d:a9:56:c7:8c:33:24:cd:b8:b3:1a:47:df:0d:
bc:5d:2a:11:75:c6:67:f8:18:37:11:fe:ea:55:72:
c2:9d:cd:98:87:3a:3c:b3:9c:0c:b3:6a:c9:91:d7:
88:f8:db:9a:de:dc:bd:42:bf:05:ce:21:6a:0a:56:
a1:84:85:35:ab:91:7a:a0:90:7f:93:52:4c:76:35:
0c:e4:15:d5:70:d7:93:df:f5:e5:6d:c6:af:29:28:
01:b3:c3:66:59:1f:1a:e0:3c:41:fa:72:46:2d:dd:
27:f6:ac:98:8c:47:42:16:e9:ed:47:9d:e9:70:33:
50:ea:e0:e6:74:68:1a:ed:af:97:2d:dd:e7:63:bd:
60:87:7b:de:97:73:c3:67:91:87:e0:01:b5:8e:03:
cf:3e:1f:5c:b6:00:66:73:4d:99:5c:0c:64:5c:49:
d6:04:d1:ac:28:e4:25:0c:0c:ab:23:9b:36:70:d1:
40:eb:7f:17:92:a9:e6:4f:0e:6a:23:1d:01:db:bd:
f2:00:74:53:71:12:2a:54:9d:56:16:c3:15:d4:49:
84:65:c5:6d:74:05:ad:4e:58:b9:f8:df:dd:71:45:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:58:29:B4:42:60:06:32:8B:F1:8A:8A:21:D2:AA:2C:4E:C7:ED
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:bb:63:a8:fe:7b:9d:7d:85:a7:05:e1:93:db:1e:1c:89:
93:35:23:43:a5:a8:fe:02:a7:27:81:de:94:8c:f6:08:e2:c7:
e5:45:3b:39:b7:cc:03:e4:df:ec:0e:dd:66:8f:a7:7e:55:e0:
01:c7:3f:c6:79:e3:f2:61:40:b4:90:d5:f5:23:92:b6:a6:de:
1b:dc:29:28:5a:53:7f:93:82:37:e8:4a:87:5e:ef:45:84:41:
1a:5b:fd:16:12:65:12:b2:65:1b:7c:7a:bb:32:60:0e:16:13:
5e:b1:53:84:d2:3d:cb:37:36:c2:04:e2:e3:d1:f4:7c:a9:aa:
2d:bb:a6:16:7a:e7:f6:b5:6a:06:db:41:8e:67:35:49:4e:c9:
aa:fb:56:9b:7f:e1:4d:3f:6a:42:df:d3:95:b2:72:3c:3b:44:
fa:bd:f0:04:86:af:d9:ab:6c:a8:df:e7:85:f2:ea:60:4f:98:
64:3b:d1:5c:b8:b4:00:39:aa:4d:da:da:3e:2f:36:eb:66:fa:
78:ce:e7:48:58:12:9a:da:58:1f:28:78:f9:ff:43:ee:34:4e:
d8:94:f8:d3:25:e2:56:ec:22:a8:ff:fc:1d:54:60:e2:6f:15:
a0:98:45:81:ca:ee:ca:21:66:dd:21:e3:cf:0d:7f:84:0e:8d:
6d:58:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:42 2025 by rpki-client