
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier: 59EzzBIcKpohLH6a7NHF7NuCToeX90yyLCdQ6BEPOSo=
Subject key identifier: 2D:36:DF:C6:F8:7A:91:35:EA:16:61:3E:7D:0C:69:A7:FA:FA:F6:3F
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer: /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial: 0197B6326F7A7EC8955EA89B508454813575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 11:00:47 +0000
Manifest this update: Sat 28 Jun 2025 11:00:47 +0000
Manifest next update: Sun 29 Jun 2025 11:00:47 +0000
Files and hashes: 1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: h7oivVpFqt0h2GO03kOULfPKbi5i7zUlBh54yV0tjOM=)
2: aVrm11uPiyldKPviAWZVNw7mX_s.roa (hash: +aUpO78+V+9JLiQkkmCO8C80eoccRFxUM2jJ9r7mFkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:6f:7a:7e:c8:95:5e:a8:9b:50:84:54:81:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Validity
Not Before: Jun 28 11:00:47 2025 GMT
Not After : Jun 29 11:00:47 2025 GMT
Subject: CN=2d36dfc6f87a9135ea16613e7d0c69a7fafaf63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:07:b6:0a:fe:24:90:11:71:ac:90:33:4d:
b2:70:fb:3e:26:13:1e:0b:de:e1:ee:c2:4b:cb:7d:
69:e9:a1:d0:b5:38:02:ff:90:23:e4:93:30:50:13:
97:19:e7:cb:66:53:04:f3:f8:cd:04:5b:5f:29:34:
d4:ab:87:e6:0e:08:37:c0:0a:06:e0:b0:49:2a:34:
49:33:fb:d7:70:1b:43:47:f1:ea:d7:50:6e:b8:01:
56:f8:fd:11:07:95:d0:82:57:28:11:88:9e:55:4e:
c6:02:c6:41:c6:f8:78:01:a6:89:a4:39:e9:21:f4:
a8:0a:da:b7:8f:05:50:0d:54:8b:67:47:1e:76:7a:
5d:67:5b:02:e6:ea:b9:f6:1c:0c:3b:e0:67:a8:31:
e1:c3:e6:ab:56:84:51:eb:51:f7:79:5a:e5:bc:04:
e9:73:c6:76:61:94:d8:2d:5c:29:b3:af:cd:87:10:
3e:b3:6d:91:75:d4:68:79:b0:9d:2d:a9:c3:73:65:
ed:b1:08:07:f1:eb:96:59:cf:02:d7:60:29:1e:55:
1c:98:50:51:e4:b2:ab:cf:f5:56:a9:a4:bd:c8:0b:
40:83:18:6c:1a:86:a4:e4:01:88:16:d1:c0:a1:aa:
f6:1d:1a:cd:36:91:2e:27:c6:49:78:31:23:42:6e:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:DF:C6:F8:7A:91:35:EA:16:61:3E:7D:0C:69:A7:FA:FA:F6:3F
X509v3 Authority Key Identifier:
keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:3f:f9:67:95:73:20:e0:23:6d:c2:3e:44:55:40:e4:dc:
6e:b3:d8:41:5d:a6:a6:0c:eb:4b:6b:80:d6:66:37:f4:93:40:
f4:2f:2b:0b:e7:9b:5c:52:af:5b:b6:77:50:60:67:ab:9b:6a:
02:e3:da:76:1e:df:9a:54:cb:09:01:6a:8b:4e:8a:bd:00:32:
1b:7d:de:03:bb:3e:8b:89:33:25:9b:57:d3:3a:54:9e:b9:82:
49:5f:3b:01:a8:bd:19:d7:d7:13:13:b4:ee:17:db:cb:e4:97:
90:8c:d3:06:fc:bd:08:a5:30:ec:ee:b4:33:1f:23:87:95:3d:
67:a4:cf:be:c0:b6:a4:06:4d:05:03:f5:ed:ef:b9:20:c4:94:
98:84:d7:17:77:7f:e0:9f:b7:fe:ee:cf:4c:b1:8b:34:3c:81:
8d:a8:8a:11:87:b9:d5:b6:48:b8:78:58:be:27:e7:ed:d0:e3:
06:32:fd:16:a6:c8:1f:d1:eb:3a:e9:6a:32:14:5b:09:60:13:
9b:89:88:29:bd:dc:48:fa:fc:74:59:e4:bc:c8:c0:ca:b5:62:
07:55:5b:88:46:81:09:3e:cc:26:46:e1:bb:5d:c5:2f:4f:25:
35:fa:72:c2:4b:ed:5d:92:a8:30:20:19:f5:bf:27:64:8d:17:
9c:7f:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:29 2025 by rpki-client