Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: Hhnm9ro95Mmz0bK8rGFaq943RMYVOTAXAMLsGF3r8W8=
Subject key identifier: 06:4C:47:42:D3:63:AB:AA:53:BC:79:ED:EA:03:EF:AD:DD:BA:21:35
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 0197B70F213D577025D1DF7FEB69285C567D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: bSH+gQBGYzvcp+zRq8d2PJE6K10Xmm/0KI6/yw76/MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:21:3d:57:70:25:d1:df:7f:eb:69:28:5c:56:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=064c4742d363abaa53bc79edea03efadddba2135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:c3:c1:46:fa:3a:4d:d6:b6:64:1a:f1:1f:
66:3e:8f:22:9f:66:97:ef:08:2f:4c:2f:1e:1e:9a:
96:41:4c:61:b0:ec:1f:f8:38:49:1c:06:2a:b9:1c:
72:ac:6e:99:a9:62:b0:1d:74:36:30:5c:a7:4b:83:
2d:b9:9b:66:27:f6:cc:d4:ac:b7:dc:3f:0f:68:5d:
6b:49:a7:c7:0b:d6:6d:b9:02:69:fd:da:2a:ff:f7:
ef:da:e5:ae:45:0c:84:48:4b:27:3b:cb:74:3f:62:
c3:e9:74:be:f3:be:36:69:86:1a:2a:9b:d3:81:11:
4d:51:b3:fe:d6:65:35:59:cc:10:0d:0c:6b:ca:61:
93:b8:55:e5:9f:3d:1f:30:a3:76:32:6a:27:aa:6e:
84:92:42:d8:bf:22:8f:2e:fc:07:06:af:b8:01:cc:
df:1a:fa:93:5e:9e:f2:e3:0d:14:5d:ba:54:fe:3e:
9f:3b:3f:cf:c6:ed:0a:85:e2:5c:2c:4c:d9:4e:28:
e3:88:02:1e:9c:39:be:72:2d:68:e7:3a:9a:e1:3c:
21:e2:a4:b2:37:f4:08:47:33:db:58:79:44:7b:91:
e0:7a:b1:00:f6:ce:b4:10:16:86:66:05:b0:17:85:
45:07:0c:1a:df:99:40:e6:c2:4a:4f:41:49:fa:9b:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:47:42:D3:63:AB:AA:53:BC:79:ED:EA:03:EF:AD:DD:BA:21:35
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:29:5d:23:b0:71:bb:fa:de:dd:14:88:61:26:57:c8:b1:
f5:9a:6e:08:3a:f7:9e:c2:ea:47:9d:6a:1a:42:7b:17:c7:ab:
d7:02:d2:a3:2f:f5:40:6c:0d:7a:da:8c:71:56:8f:73:fd:ef:
ad:d5:ba:78:c1:51:b5:2f:5e:7e:87:9a:8f:00:f8:42:09:70:
7b:73:d7:fe:f0:dd:b3:d2:4b:ee:12:c0:54:99:a7:80:68:04:
1e:d1:3e:21:bc:6b:ab:86:87:dd:db:e0:a8:2b:73:33:84:f3:
cf:95:6f:12:9d:fe:46:c8:be:01:36:14:4a:72:d5:7b:ec:01:
60:fe:84:65:d3:ce:67:e0:13:f8:23:73:63:e6:21:f4:eb:56:
06:18:10:11:7b:6b:c9:1a:09:1a:36:2c:37:4c:cd:d2:ea:a7:
a1:25:5e:f9:1b:8f:3f:db:c5:34:90:a4:61:0c:b8:b9:08:aa:
1c:27:e3:d1:66:9c:4d:84:e3:d2:53:b8:42:51:33:88:60:18:
c8:df:e5:44:db:d1:d5:33:68:94:ef:6e:50:2e:4c:fd:1d:c1:
4d:88:3d:4d:6a:bd:c7:1c:59:b2:e9:26:cb:28:9c:ea:79:76:
59:ce:83:7d:3c:3d:6f:db:ed:d5:65:50:ad:0f:f9:96:c2:4c:
84:ac:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:18 2025 by rpki-client