Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: zU7P9EUPzVPGDoc6He8e/kJaB1LeTc99nXJIPU8FGhE=
Subject key identifier: 54:45:00:36:86:F8:E6:4B:FA:0F:B1:D2:BB:AB:8E:95:F7:59:DF:D7
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 0197B6A17551828BB2CA7D90A08F18F98547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 06BB
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: W9zzIAYAW1G7FXx7Tx4tYfCrKYHYNIcUbL0bVoNvE44=)
2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:75:51:82:8b:b2:ca:7d:90:a0:8f:18:f9:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=5445003686f8e64bfa0fb1d2bbab8e95f759dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1e:17:91:e4:42:fe:44:8f:e2:32:62:c3:1a:
71:f4:c8:37:b2:a4:a7:11:83:b4:f5:79:83:f9:d5:
f0:7f:51:87:8a:25:2a:44:d0:3f:1e:5f:e8:fa:5a:
1d:86:81:5c:0c:bc:2a:45:d2:ab:03:f7:10:f7:e2:
b4:0b:52:5d:d4:d5:4e:f4:d1:d2:c8:bd:01:cb:b9:
9f:54:56:19:ce:83:48:96:72:22:79:2d:f8:29:13:
8d:36:a1:6a:2a:1b:03:3a:17:53:5c:04:70:35:82:
f8:a1:6f:84:e0:f4:0f:28:bf:c7:50:83:15:36:25:
e7:bc:ac:d5:ba:ce:11:fd:da:cb:3a:39:9a:b7:74:
d4:0d:c0:c6:73:5b:d9:12:a9:26:c3:79:ad:c1:43:
66:25:98:0b:f7:45:90:35:02:30:3c:9b:5f:2d:25:
97:65:f8:02:e9:27:19:52:20:27:a7:44:03:5e:d0:
2a:38:83:f6:41:44:89:8e:dc:f9:69:b2:97:a5:dd:
43:03:f4:36:5d:c7:ea:05:a8:95:71:57:fa:21:76:
f6:fc:1d:79:51:5f:cd:30:48:83:9a:55:75:53:e1:
1b:b6:68:d7:55:86:7b:b2:54:e7:28:24:2b:47:ed:
15:85:8f:e2:51:0f:f3:49:93:02:5f:eb:30:b8:ab:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:00:36:86:F8:E6:4B:FA:0F:B1:D2:BB:AB:8E:95:F7:59:DF:D7
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8b:1f:0b:9c:e5:6e:13:25:b7:fd:20:86:4f:20:43:48:62:
8f:83:6a:25:f9:7e:28:b5:fd:a7:4b:6d:64:97:3c:fa:3e:80:
7c:81:ea:b4:5c:ae:b3:93:d9:31:e1:09:68:fb:55:ce:cb:6c:
f5:49:df:81:c2:f6:28:9d:e6:aa:8c:50:a7:79:ef:34:e0:04:
f6:7e:b3:de:d1:27:fc:3a:ce:b7:1a:61:44:b1:cf:46:07:4b:
58:55:5f:04:e8:ee:2c:0a:54:42:6f:b2:2d:b0:80:f2:71:68:
0b:11:9c:ec:69:07:31:d2:ef:8c:ab:eb:04:fb:ef:fd:9b:bf:
5a:66:86:08:ed:b8:fb:c3:fb:fc:3d:8e:65:e5:97:98:cc:8b:
9e:d6:61:ad:1d:31:54:d1:6a:96:1b:b0:b1:ba:06:26:2b:64:
7e:ed:b4:85:25:36:10:2b:c2:02:6f:38:2e:0a:d2:4e:dd:b8:
06:19:6c:45:1d:f5:f9:e4:77:82:f3:cf:a7:73:c7:7b:e2:4e:
d5:a9:f7:c5:d9:02:2d:e6:cb:dc:62:9a:dc:8b:dd:f6:19:71:
e3:51:60:4a:e2:14:fa:8f:c5:9c:83:cb:37:56:7d:2d:0b:be:
9c:79:69:ac:b1:f6:ce:35:11:f3:96:28:36:05:a3:31:ff:dc:
6e:ff:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:13 2025 by rpki-client