Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier: aK5Jvl6wpCFM6RzTBnwaeqmkSUZ/H8aQVeuqwlv91WU=
Subject key identifier: 67:5A:07:27:73:54:D1:63:2B:01:20:23:64:8D:4F:24:34:C5:8A:76
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial: 0197B5C5293B0DCDCD26CD0B251761585178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number: 0C7F
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: E9jkY5tSQCuboyexpt6cEjspVs9YWuHxaeMqeyu3pwI=)
2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:29:3b:0d:cd:cd:26:cd:0b:25:17:61:58:51:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=675a07277354d1632b012023648d4f2434c58a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:de:d0:dd:80:1e:b7:0d:45:16:83:ff:5a:
4e:db:72:c6:f7:24:a5:81:5e:4e:51:32:bf:e6:03:
e8:d4:4f:9a:b1:e8:f2:dd:0d:6b:77:c6:fe:68:72:
e8:44:d9:a2:4e:7c:d6:a3:b6:26:a4:fa:ba:ea:4a:
04:e1:7b:f9:38:94:a1:03:20:26:b7:fb:b2:ce:87:
ca:04:4e:72:9e:42:74:cb:36:6f:2b:99:c3:5e:1c:
9d:8e:ec:80:96:03:37:b7:ac:db:86:db:64:29:84:
36:59:19:15:68:39:28:fd:3b:4b:b7:8f:8d:e2:ff:
e6:a0:ef:10:15:a3:4f:b1:58:3f:81:12:ae:97:e4:
48:2a:35:37:50:ca:62:a2:f6:26:c5:04:09:c9:cb:
dc:70:1a:67:03:98:aa:d3:01:76:e0:37:8a:7b:22:
2a:ee:89:45:e4:b7:34:2d:09:35:f0:0c:3d:75:33:
08:59:2c:62:cd:dd:fd:45:d5:2f:49:03:df:42:cf:
be:fb:9c:3b:b8:34:16:89:f5:7e:38:df:9e:b6:b2:
05:38:8c:bb:62:c0:9d:62:dd:e5:14:01:9e:b0:8d:
10:9d:12:b6:2c:db:3f:02:61:02:c6:3b:e0:dd:7d:
de:4b:31:a5:cf:b4:9f:77:6e:ec:d0:05:04:c7:ac:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:07:27:73:54:D1:63:2B:01:20:23:64:8D:4F:24:34:C5:8A:76
X509v3 Authority Key Identifier:
keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:42:10:4a:e0:ae:2d:49:92:e0:29:32:7b:c6:0d:f8:c2:53:
bf:7e:6e:25:4a:fc:2f:ce:fd:ae:45:aa:9a:f4:41:30:79:d4:
06:a9:bb:2e:25:3b:8a:f7:b9:e8:27:a0:36:e7:67:d4:7a:0a:
b7:85:19:43:12:d1:69:19:76:68:bd:03:42:43:b3:fe:bd:dd:
e7:3d:52:2a:5c:ef:1a:a0:79:60:a4:f0:02:2b:87:32:2d:ea:
ac:ca:e1:d2:83:f9:e2:3f:9b:cb:14:fa:ad:93:81:cd:21:bb:
80:f3:4b:2a:fc:cb:37:75:d3:d3:d7:0a:b2:4f:ba:da:bf:a3:
15:b1:dd:a7:7a:a9:e3:df:2b:c6:66:a9:c4:27:7b:f3:a8:61:
57:e6:21:70:7c:49:4d:e5:ad:3e:00:03:9f:e3:72:12:ee:a9:
43:c2:82:8e:73:e3:08:4e:9b:af:d4:1e:99:29:42:5a:ef:c3:
71:4c:cf:62:12:0b:a7:1e:58:2d:9c:fd:19:89:b6:3f:e8:80:
41:48:13:e5:d4:5d:6d:0a:19:28:1e:8c:e1:ef:35:b4:3e:58:
c8:94:df:e2:c1:66:9a:3f:2f:68:76:8a:0c:df:f8:a9:ae:f2:
69:2c:71:77:c9:06:55:b6:c6:0a:75:9b:77:2f:02:16:a6:88:
4d:44:cb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:28 2025 by rpki-client