Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: Er1tlD5Vr2uyt9zHHAhkMmuhBQfKOylCqCXdBRzezLw=
Subject key identifier: A3:50:65:4C:47:08:E4:0C:A0:15:F7:6C:B8:D5:D1:09:2C:62:6D:85
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 0197B6A1A407911717018F727B8E74075511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 0F52
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: cUy2nwut6z20vXjFp1AaYW7qSudj7ETGlK3Dfn/Gnd8=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a4:07:91:17:17:01:8f:72:7b:8e:74:07:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=a350654c4708e40ca015f76cb8d5d1092c626d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cd:6a:5c:2d:f6:99:d7:26:0a:30:2f:96:95:
33:67:41:b5:9c:2d:19:bd:f8:7f:cf:b7:e8:57:c6:
50:18:86:0f:16:58:62:c6:ac:ec:e8:6a:37:f0:93:
21:15:3b:c7:36:5a:5b:d9:ac:1f:75:1d:7f:fc:c6:
c6:18:0a:41:a6:25:32:74:da:b1:41:d9:12:a1:3c:
2b:29:bf:c9:98:82:46:b3:54:95:c3:0f:b1:30:b6:
3e:c3:d9:7b:44:4e:14:cc:7f:20:78:22:8e:4c:57:
e9:bb:ca:19:7a:71:5a:95:02:68:28:78:12:3a:16:
75:71:b2:f1:d8:2f:04:08:3a:40:c8:34:4c:d2:0d:
0b:14:7b:32:15:07:8a:64:f7:94:40:d5:6d:25:b1:
6b:eb:0f:1c:23:ba:fd:aa:07:4b:17:3a:55:3b:eb:
f0:60:bf:be:dc:59:02:25:7c:78:fd:48:af:bb:d6:
07:af:b5:c7:9c:d7:35:11:a4:39:ac:3c:c4:8c:8a:
21:a2:5b:49:7b:53:c1:7f:e9:ae:19:0f:67:61:69:
31:9d:37:b6:91:ec:03:bb:39:00:42:dc:57:32:f5:
5f:b1:0a:45:ab:02:fb:f0:af:ad:9c:f2:61:3d:69:
df:56:40:11:a3:fb:83:a1:20:c7:88:81:7b:38:9a:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:50:65:4C:47:08:E4:0C:A0:15:F7:6C:B8:D5:D1:09:2C:62:6D:85
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:08:46:a8:f5:97:1d:a3:b7:28:e4:42:0c:c5:2d:f9:b9:0a:
b4:a8:f3:a1:15:d7:3d:ff:61:ee:1c:da:4b:2e:55:6c:51:0e:
08:fd:a3:a1:f1:b1:5c:69:b8:fb:24:f5:5a:e9:12:4c:b4:14:
ee:60:61:90:a5:1a:2f:40:e8:1f:07:53:09:48:35:7a:8d:93:
d1:9d:5a:a6:73:e4:f3:16:ec:f2:61:26:ee:2e:df:35:1c:fb:
d6:9e:a7:63:86:14:f9:c2:c3:73:ad:15:c4:99:a5:01:e7:2d:
62:99:7f:b3:74:6b:1f:9d:5f:d8:91:e7:41:2a:21:56:c5:03:
c9:e1:4f:31:94:df:f7:62:a1:b9:84:c1:ac:7e:c4:e1:78:b0:
03:83:c8:c7:d9:e7:47:ad:63:c4:ed:98:da:ba:4f:be:66:d9:
0f:85:b3:a4:e7:1e:d9:b9:2a:a4:e0:23:cc:82:73:a5:0c:81:
e2:df:0d:b5:87:da:04:fc:39:f0:be:7c:93:b0:83:99:bb:b3:
a4:37:15:c5:31:fc:b7:38:6c:9b:cd:26:71:28:22:42:3f:2c:
01:23:d2:a2:2b:c9:ab:cb:cd:5a:1f:7d:40:b2:b4:ef:15:8e:
15:9e:05:79:33:c4:c2:c0:08:ba:f4:fb:d6:c7:10:8f:29:3c:
b3:78:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:11 2025 by rpki-client