Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: W9D1K1qHRXiMNDjuPRPp0suUtvsx71RZZwgzoGjQlXk=
Subject key identifier: 6D:38:17:6C:F3:70:F5:FB:7D:36:11:7D:22:87:3B:AC:19:5E:2B:4A
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 0197B6A22EDCE17B2725312FD44EF9C421F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: sFrEuFlY6Xz8uf1SW/4qm/o2hcmww45LSbWIdDNXOXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2e:dc:e1:7b:27:25:31:2f:d4:4e:f9:c4:21:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=6d38176cf370f5fb7d36117d22873bac195e2b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:99:5d:03:1e:4a:28:28:5c:8a:39:7b:d7:
e6:7a:76:d3:d2:4c:b4:77:5a:e8:48:fe:47:32:96:
f8:42:25:00:52:91:df:9b:33:d4:bc:ed:de:65:88:
f1:f5:47:49:41:e8:ef:27:84:45:fc:00:06:f0:b8:
82:ad:b8:36:a4:bd:ef:03:fb:c2:b0:56:ae:1c:bb:
bf:51:96:19:fe:65:1d:46:1d:78:7d:c8:2b:f5:ed:
04:ed:d6:7d:b9:68:1e:bc:a6:42:f1:b8:f6:f0:5a:
5e:ed:16:da:bc:91:31:b1:6d:d8:15:ee:5e:19:f9:
ba:a8:5d:70:b6:6a:22:93:c0:c7:c4:14:46:d9:88:
df:06:b2:52:4e:67:70:c1:e5:6b:6f:ca:cc:7f:fa:
1f:08:73:a3:56:b5:f7:e8:18:b0:2c:2c:fe:0a:b5:
ea:d6:d4:77:21:aa:af:32:bd:85:a7:cc:71:1b:22:
d1:b8:40:62:eb:87:a8:f9:ba:3c:42:8f:d8:04:ae:
b0:8d:f0:a3:00:1e:73:15:4d:59:9f:5f:9e:8a:1d:
63:e6:9b:c0:ca:18:0b:38:c6:16:9b:c5:b7:01:82:
3e:9e:57:e7:59:d3:76:21:1f:71:90:55:3a:d1:10:
58:97:5b:46:c5:e5:93:61:46:bf:52:64:98:fb:15:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:17:6C:F3:70:F5:FB:7D:36:11:7D:22:87:3B:AC:19:5E:2B:4A
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:43:53:0a:4c:63:8e:81:ab:5b:f0:f7:b6:0d:5b:8b:66:41:
71:c6:d6:71:bd:9e:f9:9c:41:58:9a:a9:7f:c8:10:a4:e4:bd:
db:9e:87:59:4f:70:5e:d8:12:14:a7:95:7e:83:63:1d:e0:dc:
b6:c2:4f:6f:8b:5d:35:29:58:f8:83:30:53:05:6e:cc:d5:42:
97:5e:a9:d2:cb:80:21:da:f9:d0:dd:a2:33:00:57:91:0c:a4:
ed:5d:ad:01:93:29:00:42:57:dd:23:71:95:0c:c3:ab:dc:a8:
47:80:c3:97:f5:30:3f:c7:9b:95:e7:ce:eb:6f:1b:1e:02:87:
b2:c4:38:ec:6a:53:60:9a:e0:eb:64:c4:31:d0:f3:7f:71:0d:
a1:59:78:22:eb:ae:e6:1d:f0:1b:71:ff:52:05:8e:fd:4d:2d:
bb:c0:f9:5a:39:a4:ea:1f:b0:d3:56:83:de:10:8b:99:3e:b6:
c1:46:95:e8:b7:6d:29:5e:77:33:b2:69:df:5a:07:f3:db:ab:
3a:87:41:32:2d:e1:ba:70:38:65:f5:85:63:c1:9b:7d:04:1a:
5e:14:0a:c1:ab:a2:63:da:55:2c:04:bc:1d:b6:24:d4:44:a8:
1e:a2:99:50:63:25:4f:8a:6d:be:6b:cc:22:81:8a:d8:ed:9f:
75:a5:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:43 2025 by rpki-client