Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: Piim2PZor2m5i3eDOwDpp8qv6QzGFFFyd2ZPnd3ng0s=
Subject key identifier: 8A:EA:01:BB:BD:BE:E0:08:6C:09:3A:71:B8:12:37:7C:DE:33:2E:C1
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 0197B6D7AD9F294E810E57839CE0139C369C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 0564
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: RIYr950qHLu8DE+ac5JmVxKzIR0O/A7CSavJaBEWE/k=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ad:9f:29:4e:81:0e:57:83:9c:e0:13:9c:36:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=8aea01bbbdbee0086c093a71b812377cde332ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:ae:8d:9e:b0:47:ba:1d:be:f8:4e:92:6a:
25:23:38:21:eb:5d:b0:5f:12:42:ff:e2:c5:f8:21:
78:c2:b2:af:4b:91:2b:0c:23:b2:16:29:e0:71:ff:
fb:de:a9:78:1e:f6:b6:4c:c5:22:cc:a5:3c:7a:6f:
3e:30:5b:bb:6f:84:01:10:c2:e2:63:b4:bb:b9:07:
a6:fe:0e:63:b3:eb:4e:19:d5:39:47:d3:05:89:e0:
00:54:bd:d3:6b:b8:d4:9e:f7:98:81:b6:fd:9f:a6:
6c:4d:94:0d:87:91:ec:78:e6:5d:6b:39:e2:51:2e:
ea:37:ee:35:e8:77:db:7f:1e:b2:b7:b2:68:ae:40:
90:84:eb:73:bb:d6:3a:88:2f:3f:cd:92:94:d7:3a:
20:2d:5f:50:49:e0:77:f3:3d:72:35:a1:7f:7c:ab:
bd:f0:76:7b:fe:21:18:27:ec:87:b4:43:92:cd:4d:
7c:72:b7:f1:43:b6:ad:fb:7c:97:95:cc:15:bf:f4:
26:5a:0c:47:d6:0d:50:b7:f7:e5:ec:4f:01:88:cb:
69:9d:e5:43:07:89:d5:36:cc:04:81:7e:72:74:a8:
e4:ec:93:47:84:64:f7:3b:f2:f4:8c:28:c8:1f:b9:
ee:14:55:7f:56:12:43:14:2f:ed:8a:b9:d8:59:b4:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:01:BB:BD:BE:E0:08:6C:09:3A:71:B8:12:37:7C:DE:33:2E:C1
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:22:13:09:56:99:52:37:4c:45:d7:80:b3:2f:32:fb:06:
e2:de:5d:58:6e:cc:0d:9c:ef:05:ab:1a:4e:33:3d:44:44:3a:
25:66:37:5d:68:e5:84:ed:0e:e9:4d:eb:3c:b2:5f:64:25:3e:
2b:a8:61:9f:73:c8:3f:c1:62:9a:a1:01:05:f0:0d:78:c9:34:
7a:58:c4:70:77:a9:84:f7:b0:e5:d5:91:9b:8a:ff:e2:55:f4:
5f:de:74:0d:c9:63:d4:90:13:a5:1c:57:56:64:b8:3b:68:8d:
65:80:48:3c:f2:35:67:f1:32:d0:19:03:ac:33:16:82:99:61:
88:3d:cf:29:59:b1:b6:a6:97:9f:b5:cb:3f:59:06:10:d9:76:
3f:62:6f:2c:d8:9f:96:0c:42:83:19:fa:63:65:ab:41:66:65:
cd:fe:cf:9f:b7:68:1a:01:15:53:7d:82:1b:45:40:bc:ce:fb:
94:6c:02:ae:71:b3:83:75:f5:9d:32:bd:9e:38:98:81:82:1a:
d0:4b:db:78:67:e0:49:a1:6e:99:65:28:9d:aa:3f:8b:80:20:
55:27:0c:05:35:7c:38:32:3c:77:cd:0b:c5:51:7b:ce:3f:ea:
b7:d2:95:ae:3e:af:82:c9:30:92:ee:45:30:e9:c5:ba:cd:71:
82:48:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:17 2025 by rpki-client