Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: obzL09M5evGSGm2Tx3A2AXA5O7n0WymcoKLw8Urop4E=
Subject key identifier: B4:EA:51:B8:42:64:43:D5:ED:80:B7:37:5A:13:45:CE:9A:3C:91:99
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 0197B70E6FA14CC8966BA43672EF213BE239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0714
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: +ZUGEnXRwccAX9JpdODJyNmCfDpPmpWy9h0QDCXau5k=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6f:a1:4c:c8:96:6b:a4:36:72:ef:21:3b:e2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=b4ea51b8426443d5ed80b7375a1345ce9a3c9199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:43:23:5a:1d:15:00:aa:6e:b2:78:d1:e4:
f0:25:15:45:c9:44:da:74:af:b6:0a:bf:c0:50:0c:
7a:51:88:53:8a:fd:76:81:55:81:72:04:8c:70:3e:
07:a7:b2:50:89:75:47:8a:7e:07:52:7b:bd:f3:ef:
1b:c0:11:1d:e1:72:d0:fb:8e:21:49:d0:93:b7:bd:
09:9a:48:0a:5d:20:0c:53:61:6c:8f:e6:50:0c:41:
cd:a8:f1:51:74:07:25:1b:90:c4:81:98:48:28:09:
9f:a5:c0:19:28:36:fe:fd:29:6f:90:f7:0b:90:0f:
1e:77:9e:a5:db:6b:a9:f0:02:4c:dd:21:3a:2f:bb:
ac:fa:b1:57:bb:0a:bb:5f:0d:9b:e2:52:5d:6c:33:
a5:f1:84:54:ac:77:95:0e:34:4d:45:06:0a:ba:3f:
63:71:02:39:cc:5e:a8:9d:8c:67:a3:60:1d:a8:22:
41:58:be:d0:fe:2a:78:51:19:78:e1:d4:7d:63:68:
0c:09:f3:05:b8:5c:4a:89:5a:89:09:af:06:91:a5:
a1:0c:28:fc:af:e0:9b:61:3e:a9:79:a7:a0:65:eb:
b2:25:e5:d0:6b:7a:42:36:24:ad:f7:ef:cf:67:d5:
38:42:a3:27:f6:d2:f7:59:6d:4f:a9:f4:4c:2c:87:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EA:51:B8:42:64:43:D5:ED:80:B7:37:5A:13:45:CE:9A:3C:91:99
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:12:1a:92:84:3f:31:ff:96:0a:57:c3:98:cf:59:bd:6d:
92:fe:ff:7d:2e:f7:d7:f5:c0:ed:8b:91:cf:78:e7:1f:1e:c9:
df:7a:8a:76:1f:fa:d7:82:5b:1d:af:c6:20:a9:00:ea:f8:cf:
56:0a:c9:d5:2d:4f:f1:41:e0:e4:74:89:e9:17:52:f0:1f:e4:
45:06:40:da:86:73:5e:68:1e:f9:01:04:48:3e:d8:6d:e9:db:
4c:55:6d:33:85:21:c5:15:01:e9:da:1d:cf:a8:cf:7e:8f:3c:
a5:51:9d:8d:3f:c4:26:ef:b5:80:cb:06:51:a7:00:78:ca:62:
01:66:c4:7c:a5:a2:52:d4:e9:bf:57:5b:d2:04:0a:52:1b:a4:
60:a1:02:18:64:5c:d2:31:23:8f:d4:a8:ac:cd:24:fe:49:22:
46:13:37:b4:c6:28:41:5b:ed:1f:ae:5d:8d:1e:ce:03:b8:a2:
31:8b:a1:67:3c:60:16:2f:93:2b:aa:a1:a1:5f:b2:10:30:a2:
b5:45:46:f1:86:1e:9d:10:4d:9a:a8:b3:17:44:8a:b9:6d:e9:
42:30:27:5b:56:78:35:bb:c0:c8:fe:d8:5b:64:e9:c2:b0:8f:
83:be:8c:7a:c7:21:7f:eb:c9:57:1b:fe:ae:4b:50:bf:ee:08:
10:6f:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:38 2025 by rpki-client