Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: v5x5gOPRgB5aW75LC4CNM3VcMKtusmZRzXCB7K+nxMg=
Subject key identifier: 40:05:B3:86:1F:D3:09:E9:65:F5:A9:50:31:AD:B6:CF:60:CC:6D:DA
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0198D58398613FD692929A040445120B1625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 06F5
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: v44Gh9geyPKkRcFt2rIGzBywQlOd8z07OOsHQJwjzQQ=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:98:61:3f:d6:92:92:9a:04:04:45:12:0b:16:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=4005b3861fd309e965f5a95031adb6cf60cc6dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:71:13:d8:38:16:fc:d6:d0:1b:60:9d:55:
0f:ea:ba:a6:b1:99:c5:cb:e0:61:1f:e8:af:b5:3f:
06:2c:5c:6a:f6:fb:44:82:3c:fc:57:ae:78:d9:27:
bd:41:25:a6:ab:8d:31:8a:82:95:06:95:f8:40:9e:
26:05:5b:e1:d3:f7:27:ce:c0:55:f3:05:90:ab:ad:
23:13:2a:d1:55:26:30:95:c9:18:f6:4e:13:e0:ba:
b5:0f:c8:14:aa:b2:58:86:2d:76:b3:8a:43:2b:f1:
c2:c5:32:0f:f5:5c:b2:f4:f0:67:50:20:73:5a:32:
46:8d:4d:d3:73:85:3a:88:85:7c:84:14:9a:0f:e1:
5d:1b:3f:d0:b8:ee:1d:6a:eb:2d:b8:18:72:ea:12:
38:28:cb:4d:3d:37:0f:06:ab:26:ad:5f:3a:9d:af:
f1:01:05:59:2b:43:3a:72:9e:bc:16:25:47:b1:d3:
0c:20:ac:82:a8:70:72:71:ed:50:d4:8b:80:c6:d2:
50:16:55:ce:93:06:82:f9:d2:f7:0c:50:d2:bc:d3:
64:b0:82:e5:ab:60:8e:16:0f:9f:fc:cb:d6:d6:82:
e2:32:d2:7a:ea:e7:98:ae:22:22:b4:c7:d6:a4:91:
be:4b:27:34:83:5b:be:d2:ca:14:b9:63:80:c8:db:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:05:B3:86:1F:D3:09:E9:65:F5:A9:50:31:AD:B6:CF:60:CC:6D:DA
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9e:92:b1:72:02:1c:a1:cc:9c:89:f3:d1:05:db:59:54:a0:
7a:c7:3c:e1:79:f9:ba:eb:a7:dc:19:73:76:aa:b9:d6:e3:34:
8e:bd:06:d0:92:19:7c:ee:a8:47:0a:45:89:55:0c:7c:f4:05:
65:ff:04:4f:aa:a2:1b:59:f7:b7:cc:32:22:8a:be:eb:b2:f1:
ba:f3:66:81:5d:95:53:04:d6:bd:ef:d4:8d:9b:b5:5a:15:de:
a4:1b:fe:f4:27:1f:2c:56:64:7b:d3:ef:be:f8:be:7b:2d:41:
8e:29:4e:86:c9:23:07:3a:c3:d4:99:df:54:7f:6c:4d:20:f3:
9c:8c:e8:8d:e2:a6:c5:45:33:ef:d5:6e:69:1d:8b:e2:0f:ce:
be:39:28:89:9e:b2:a2:ba:27:83:19:91:88:94:25:5f:ca:ec:
54:82:f4:ca:dd:88:d6:a4:4f:79:c0:c0:46:0f:56:0a:ab:c6:
7a:ab:62:ac:3b:2b:dd:c8:9b:2a:2c:8e:aa:11:8d:d1:44:d3:
6f:d1:46:68:ca:4e:8e:59:03:d0:d0:0b:9b:92:1b:20:b2:23:
5c:8a:af:b5:79:20:87:94:d9:01:59:a0:9b:8a:30:ea:c8:28:
5d:e8:0f:e2:a2:70:85:6d:36:a9:2a:c9:f7:70:db:8e:18:8a:
82:f9:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:53 2025 by rpki-client