Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: WgHKI9dstxFzEQwZXfu/Rn27vBqGK8AR8WCr1Ynp2GE=
Subject key identifier: 7A:30:82:36:A1:7A:71:AF:12:F7:9F:0F:B9:51:53:9E:C8:F4:CB:CC
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 0197B8FDA468E6115133C65AB4C2C51032AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 00:01:59 +0000
Manifest this update: Sun 29 Jun 2025 00:01:59 +0000
Manifest next update: Mon 30 Jun 2025 00:01:59 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: FoQ1TYDgm2IedobspEhLfWSWgOh/dRcye9mO5G9v/Do=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:a4:68:e6:11:51:33:c6:5a:b4:c2:c5:10:32:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jun 29 00:01:59 2025 GMT
Not After : Jun 30 00:01:59 2025 GMT
Subject: CN=7a308236a17a71af12f79f0fb951539ec8f4cbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4b:9c:aa:a8:8f:08:ab:df:93:80:e3:0d:72:
55:3f:20:45:24:a4:76:68:0b:e5:35:c7:9c:62:2c:
ab:1c:c7:41:cf:3d:b6:ea:ba:ed:56:a3:94:27:96:
e2:05:a0:ad:5d:b9:22:8a:97:a7:a4:9d:4d:52:4a:
b6:ec:54:15:be:a1:0c:a6:8c:cd:6d:8c:ce:51:43:
1e:48:f9:1e:d2:54:d7:99:5e:19:bd:f0:5a:50:e1:
2e:60:30:90:bb:68:12:37:eb:12:f3:7d:da:29:2d:
86:15:38:6a:64:93:0a:14:bf:bd:a0:3d:fd:c2:32:
59:f3:d7:43:d3:39:b3:28:aa:70:9d:79:56:ca:0a:
d3:db:ea:f5:d7:5f:28:12:ad:8e:2e:f7:84:1b:f9:
ed:4d:55:b9:17:f6:4e:5e:11:20:59:72:97:07:67:
01:75:89:be:48:89:ef:2b:55:d4:c4:93:16:03:15:
eb:10:b7:fe:92:03:a0:05:13:de:e3:69:66:8e:a1:
52:64:a2:41:66:fb:c2:ad:03:ff:b9:45:29:cb:33:
4f:39:e7:e7:d5:56:c1:ba:95:98:bc:6c:26:3d:73:
1d:d7:16:14:2f:5c:78:7d:5d:23:ea:17:4c:8b:18:
b8:d3:d7:49:45:bd:a3:91:20:6b:97:72:20:11:97:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:82:36:A1:7A:71:AF:12:F7:9F:0F:B9:51:53:9E:C8:F4:CB:CC
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:eb:6e:77:43:9d:7e:ad:02:62:e1:fd:67:94:9f:f5:ef:
fa:82:0f:85:37:8e:35:ba:e9:30:29:ad:61:97:40:a7:72:a5:
93:4f:20:7c:c2:ef:b0:b6:6a:9c:4a:66:c3:bf:41:01:8d:47:
4c:48:07:76:23:44:9c:71:b4:53:de:25:7e:42:7e:5b:cf:f2:
db:98:53:a6:6f:60:0e:ca:ce:55:98:50:4b:c7:f7:f9:13:40:
3b:33:61:c8:a8:d8:ee:2c:d8:71:1f:e2:f8:45:b3:18:e5:0e:
e2:5c:49:1e:94:8b:4b:b7:48:c7:41:2d:16:45:cc:fe:f5:9c:
cd:95:3a:96:6b:04:e1:ed:16:8a:df:ce:c8:07:0e:6d:95:69:
0e:13:bf:31:18:4b:b0:d7:b2:01:c4:f4:aa:8d:97:c7:87:23:
29:12:2c:0e:0e:b9:ac:77:53:de:de:0b:d3:64:9f:c1:98:a2:
6e:01:a6:4b:1a:f1:e1:7a:fd:f2:26:27:55:4e:fd:44:d6:f5:
71:fc:8f:1b:7b:df:86:b7:cb:a3:19:7d:46:d6:d7:34:34:07:
eb:6a:d9:b5:cf:91:7e:b4:91:b1:84:ed:fd:98:fb:70:da:36:
3a:2c:e0:81:92:1e:88:1b:3f:59:65:b6:eb:d7:60:92:74:a9:
79:3a:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:43 2025 by rpki-client