Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: HLHXaVdU3Q6SQ+ORj7FEEyY2ZDKLWPv8zhh9fRJ3pNc=
Subject key identifier: 37:14:69:1E:E2:95:4F:1A:E7:50:5D:A8:A8:1A:FA:68:62:07:95:21
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 0198D4725D3BAAEDCD7BA215F7ED3EA9B2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 12B0
Signing time: Sat 23 Aug 2025 01:02:01 +0000
Manifest this update: Sat 23 Aug 2025 01:02:01 +0000
Manifest next update: Sun 24 Aug 2025 01:02:01 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: KtfO75sxegJ7W5fZbQyQE3Jwv+bFabm5d37KzNh8oWQ=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:5d:3b:aa:ed:cd:7b:a2:15:f7:ed:3e:a9:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Aug 23 01:02:01 2025 GMT
Not After : Aug 24 01:02:01 2025 GMT
Subject: CN=3714691ee2954f1ae7505da8a81afa6862079521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:a6:6c:34:a2:9f:9a:01:08:74:9a:62:b9:
c1:02:89:fe:10:31:76:d9:35:a9:76:f7:77:62:be:
27:a3:8a:4e:9d:49:dd:6b:f6:43:b1:9b:9d:9c:78:
cd:d4:c7:70:92:4a:0c:e7:d4:51:07:13:8b:70:5b:
8b:d3:47:1e:7e:eb:77:83:1b:d3:b3:82:c3:b6:44:
d0:46:51:f8:44:d4:33:61:4a:12:5e:7f:18:04:55:
c0:45:64:12:ae:db:81:e6:34:52:22:49:46:e5:46:
a4:35:db:09:f4:c5:9d:bb:c2:89:70:45:2f:2c:1d:
0c:9a:2f:b4:68:46:8d:5a:20:13:e2:b5:15:05:b2:
89:c4:69:12:c4:c8:a1:ad:81:02:d3:23:0b:a1:db:
f1:53:bb:b4:d3:71:09:a7:f6:69:1b:a5:9a:39:1e:
10:92:6d:78:d4:39:42:5c:e4:10:49:5f:40:45:dc:
f4:25:1e:e5:d0:91:b3:fa:54:ad:87:7c:94:09:ed:
bd:ed:02:72:89:f2:be:fd:74:38:9d:a2:47:a1:3a:
2b:3a:aa:29:c8:76:3c:6c:d0:de:9f:f8:e9:05:ee:
84:69:02:0a:1b:5c:63:58:02:0a:c9:78:e3:5b:ea:
37:1a:1a:2e:29:41:fd:5f:25:f7:e7:4b:48:60:bf:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:69:1E:E2:95:4F:1A:E7:50:5D:A8:A8:1A:FA:68:62:07:95:21
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:1e:62:43:d4:cd:ed:c1:b0:3c:7e:a0:c9:d1:f9:7e:6e:
51:ab:ab:88:12:99:3b:b8:d1:b7:70:48:81:50:f3:0d:26:e0:
8b:a3:ae:ee:43:ef:99:55:1b:db:12:37:f5:c2:bf:85:59:bf:
32:c8:db:0f:1c:c7:06:7d:03:ca:fa:89:b5:13:00:d8:39:0b:
a2:7c:6c:10:d3:49:df:f4:0a:a3:a9:b0:2c:f7:30:9f:38:5b:
96:f8:57:ee:87:2b:d0:90:94:78:ad:2a:df:30:c9:44:28:60:
d0:19:a8:db:60:7e:fa:93:a1:41:34:75:9e:85:61:ac:ee:50:
da:f3:99:01:0a:38:12:43:09:30:d3:ca:24:53:59:e2:cf:77:
ec:1e:1c:4b:37:ca:66:bf:78:b5:0a:79:25:b7:a7:dc:16:a9:
a0:75:67:77:ce:09:64:c2:a7:35:d0:ac:c0:9a:ef:60:bd:9e:
ee:d5:05:a3:c7:7a:6d:b5:db:e2:38:06:1f:6e:84:5b:07:dd:
cd:8d:d0:ba:38:c4:52:cf:dd:c6:96:86:81:5e:84:3a:90:7a:
f6:ce:f5:24:cb:ec:4f:be:4d:27:fc:05:c2:97:bc:d4:d0:81:
be:5d:04:06:a1:0d:53:34:6f:2f:e7:6d:4f:62:09:57:54:1c:
14:bf:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:52 2025 by rpki-client