Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: 3gg1B5k5rEBr1xE4ZYM2jogDfr0aS5sZPPIlfdHpmS0=
Subject key identifier: BA:54:1C:3B:E2:DD:EE:06:8A:23:E9:6B:10:FF:FA:E0:D9:70:F0:CB
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 0197B5FC382E80D56E2FDFB43F7F4F3137EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:34 +0000
Manifest this update: Sat 28 Jun 2025 10:01:34 +0000
Manifest next update: Sun 29 Jun 2025 10:01:34 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: z1EkiCF1Zwzi32JzCH5OlYJBuufTBC3fDogYCwtctRQ=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:38:2e:80:d5:6e:2f:df:b4:3f:7f:4f:31:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Jun 28 10:01:34 2025 GMT
Not After : Jun 29 10:01:34 2025 GMT
Subject: CN=ba541c3be2ddee068a23e96b10fffae0d970f0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:f2:de:c6:15:5e:1b:2c:99:b8:fc:e0:e7:
ec:52:54:75:d2:54:b6:58:d4:99:a9:ad:43:54:fb:
ff:f2:a0:df:3a:e2:c0:86:91:9b:c0:8b:59:7b:82:
1d:0b:4c:0c:c1:bb:15:3d:21:86:3b:fb:fe:0c:6d:
10:88:74:63:a0:f0:43:76:f0:0d:41:33:2e:0c:0c:
71:b3:1b:1a:3a:ec:08:77:77:14:1a:cc:90:df:ec:
76:5a:98:72:4c:cd:8e:f1:c8:3a:b3:fa:9f:e5:ad:
a6:e8:9a:cb:d8:c6:eb:d6:37:62:51:e6:1c:eb:c7:
9e:db:53:22:82:ef:0e:1d:6f:d9:59:c6:91:d9:f7:
a2:32:65:7d:bc:0c:83:e8:64:0d:42:1c:ca:67:31:
8b:17:40:03:dc:e2:5d:78:3e:ae:63:9a:0e:64:a3:
3f:e6:37:94:89:14:3c:64:7c:c9:71:25:2d:dc:20:
40:49:2a:67:74:c0:0d:9e:04:5f:03:08:10:aa:f1:
aa:53:6d:96:23:40:95:06:8f:83:e6:24:92:b1:a7:
55:f3:78:76:f2:b2:b7:2b:38:9e:68:62:54:2f:9c:
d6:1b:4f:ab:f8:b8:d7:e8:1a:2e:e7:76:d9:45:9c:
47:6b:42:4b:ca:48:ad:c6:23:7e:84:a5:54:b6:96:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:54:1C:3B:E2:DD:EE:06:8A:23:E9:6B:10:FF:FA:E0:D9:70:F0:CB
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:34:f0:42:0c:14:8a:67:a1:ae:3e:e5:4a:13:c1:28:54:
e2:2c:87:f2:cf:6b:66:3a:45:d8:6a:2d:bc:f2:f6:4e:cc:9a:
c4:1a:0c:fe:d9:c3:d1:2a:2f:1d:e7:cc:e4:dd:3e:cd:00:4b:
8b:81:bc:8f:e7:ef:97:93:f4:be:e9:00:a7:8d:dd:31:e9:17:
0e:de:c7:15:2f:87:17:4d:dc:c5:18:3c:ca:4b:f8:1d:de:b3:
58:47:a2:39:c6:aa:42:18:2f:a4:f5:f8:db:e8:ef:9d:b7:a0:
64:e3:89:ed:de:97:a5:d1:e6:ce:4c:f0:4d:2d:06:07:17:1a:
4b:f4:ca:f6:96:b1:81:1b:c6:cb:ce:8e:b6:1e:fa:36:3d:df:
c3:97:ab:ac:ff:76:34:b2:41:26:30:c2:c7:2a:ea:d3:f3:a1:
2b:f9:56:ed:fb:41:42:88:ab:74:d6:5a:0a:b9:a6:c2:ef:07:
5c:80:86:a0:ea:d0:ea:a4:b5:96:e9:22:3f:bf:98:da:bf:0c:
ee:8d:69:4e:5e:80:6b:1c:6f:b9:f1:3d:dc:53:23:05:d2:1e:
d8:5f:6e:55:a7:39:d4:bd:84:13:56:01:1f:6f:27:45:21:d4:
d0:4b:35:4b:83:bf:3a:25:0e:f2:3a:26:fc:c1:e0:b9:f9:bb:
9e:e5:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:05 2025 by rpki-client