Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: 3eq9FrStZ1F7+JbKGuqnnHGFZSXlwwwYs0oCvBtekyA=
Subject key identifier: 12:DB:54:ED:D7:7C:F5:0D:E4:B8:F9:0F:B3:35:DD:5F:07:28:86:FE
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 0197B745A6CE2880F8E02E2C964EA50C91BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: szkqe30+RnzXUAVAJuX2CrBTK5jmrPHTJk+wQcrQs6I=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a6:ce:28:80:f8:e0:2e:2c:96:4e:a5:0c:91:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=12db54edd77cf50de4b8f90fb335dd5f072886fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:48:c1:93:cb:2d:c3:70:80:12:45:4a:5b:
81:bd:9f:00:9e:3e:32:f6:1c:6f:3e:48:7c:88:72:
c5:40:e3:f6:33:f9:bb:c6:df:f5:8f:fa:cb:d7:26:
71:99:50:3f:3a:ae:d7:c3:6e:35:50:5c:dd:6f:ce:
7e:77:4b:98:d8:cc:68:bc:5b:70:e4:bb:25:4c:43:
37:92:01:30:d4:fe:e1:f1:0c:a1:54:1d:f9:be:29:
bc:21:6e:f8:6e:c5:ab:c6:df:e3:ea:17:91:1e:ff:
7a:81:53:aa:d1:ac:47:b0:7f:c9:74:17:32:63:79:
86:a6:f2:68:a3:50:03:d3:5b:68:77:e5:ef:3b:1d:
27:51:2f:ad:ed:8f:f6:20:d7:49:15:27:cd:b2:2d:
15:5e:9e:5f:a4:e1:bb:f1:c0:ef:d4:3d:a1:c8:aa:
91:b3:73:b5:ef:92:a8:aa:89:98:47:43:16:ad:56:
98:85:3c:c6:5f:0c:27:52:99:fa:38:71:6b:69:1b:
4b:2a:12:b5:58:c8:88:ab:3c:1d:6f:ff:f2:d4:99:
e4:63:bf:e6:5a:f7:87:de:6d:10:5a:d5:73:6c:04:
35:5f:15:a0:c8:5e:a7:c8:8d:6a:c6:d6:97:1c:33:
e8:0d:ef:85:48:1c:0a:22:8e:74:01:2b:28:9d:10:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:54:ED:D7:7C:F5:0D:E4:B8:F9:0F:B3:35:DD:5F:07:28:86:FE
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:42:38:90:10:46:7a:3a:20:8e:a0:a5:5d:8d:ae:e3:ad:
79:81:2f:66:52:5d:40:96:c1:6d:59:23:1b:47:2f:29:f8:db:
27:f9:59:44:2d:cb:5a:5f:d8:82:4c:43:7c:f0:aa:d6:14:8a:
20:a4:7e:ae:36:e8:7c:57:37:79:3c:c3:51:a5:97:d4:f5:4c:
54:c7:6a:cd:99:c9:94:85:bb:0d:0d:fc:57:3a:80:07:e4:01:
a1:52:00:d2:69:aa:4e:f7:dc:a7:b0:d3:e6:e5:56:44:fd:e7:
4e:58:34:db:c2:d8:40:09:49:af:db:b2:24:bc:81:c5:f3:b7:
5a:ec:96:87:c6:ec:2c:78:c5:1f:c0:15:02:b2:fe:39:f6:3e:
10:54:7f:57:37:36:4b:62:36:e4:e9:ee:d9:db:08:5f:fe:a4:
2c:b7:80:c0:2c:86:44:b6:e3:c9:ba:b3:c4:e9:eb:7c:91:b7:
7a:15:17:d2:7f:ee:51:30:5e:7e:0b:f7:3b:14:11:72:69:63:
eb:98:6b:db:f3:19:9d:60:3e:02:39:1f:b6:23:52:6e:79:46:
ff:11:4b:96:26:e8:2c:5a:e0:8a:c3:8b:17:1e:e1:17:93:9b:
4c:01:f4:11:f7:3d:a6:bd:94:fc:83:4c:41:0e:c1:1b:c0:c4:
20:76:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:23 2025 by rpki-client