Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: WscF6RUVmpDnk1T3TEbQwIb50H/NyP5ZLQKXawDCf4o=
Subject key identifier: 13:3F:72:D6:DE:4C:23:F5:65:4A:18:46:3C:82:85:17:15:FB:F2:57
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 0197B8216B4B6706882A376F53A4E597884C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 0135
Signing time: Sat 28 Jun 2025 20:01:27 +0000
Manifest this update: Sat 28 Jun 2025 20:01:27 +0000
Manifest next update: Sun 29 Jun 2025 20:01:27 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: i5YXXjthJ7MP3Xp8XNA5mhsBjkXxlwJPkTmcvz95/Gw=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:6b:4b:67:06:88:2a:37:6f:53:a4:e5:97:88:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Jun 28 20:01:27 2025 GMT
Not After : Jun 29 20:01:27 2025 GMT
Subject: CN=133f72d6de4c23f5654a18463c82851715fbf257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:2d:14:b4:3a:15:e5:73:9b:ec:4f:8d:0d:
0f:79:97:cf:8f:fd:a3:af:3b:6f:e7:0e:01:4b:4e:
b1:8d:d1:c8:97:30:ec:64:47:fc:d8:36:ca:ee:64:
36:c3:9c:de:66:2b:f4:a8:96:a9:a2:bf:5d:c8:18:
9b:a3:9e:1a:44:e2:90:47:96:55:89:67:48:03:dc:
48:d3:c2:a5:28:cf:e8:52:dd:2d:5c:2b:02:27:f6:
45:00:14:d7:1a:e6:25:d0:6d:20:db:a6:67:82:9c:
da:d4:1b:c2:1a:04:40:63:f4:bd:d8:b2:05:78:4f:
cf:65:9a:00:05:4a:d6:79:77:a7:bb:24:0d:17:d5:
0d:b0:12:b4:71:70:50:16:01:39:60:48:8a:bf:82:
f6:79:32:46:07:47:76:33:94:93:a8:07:f3:2c:9f:
15:2c:de:27:20:6d:f1:e5:74:73:61:ea:49:94:3d:
fe:56:92:b0:86:f2:bb:a7:83:1d:d5:13:a8:4e:1d:
8d:57:b8:f6:01:64:eb:54:96:ac:69:61:9c:ac:8a:
8b:10:dd:80:99:53:35:8b:6b:21:df:99:84:b8:98:
e8:29:e3:75:bf:21:39:53:00:c3:f3:d5:ab:20:9a:
16:9c:64:3e:31:9c:c2:7e:b0:6d:e4:c4:3a:a0:e5:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:72:D6:DE:4C:23:F5:65:4A:18:46:3C:82:85:17:15:FB:F2:57
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:5a:2b:5e:3c:f9:66:c6:e6:62:b9:c6:90:cd:74:48:ee:
a9:6b:9f:b8:69:59:0c:bb:03:7c:e2:0b:2a:e3:6e:ee:e5:5d:
86:2a:4b:ff:29:6a:2a:34:f1:fd:01:2a:21:10:32:7f:21:13:
ca:2a:39:cc:61:39:a1:f0:09:38:bd:4a:ee:b4:6f:7d:7c:c5:
09:cf:18:b4:96:9b:54:c8:f1:36:a5:05:d3:e4:7e:ea:24:b2:
4d:06:61:6a:f5:76:15:e3:c4:02:58:3f:ec:c5:6a:76:55:3d:
a0:d1:f1:88:cb:01:89:1e:f6:51:ff:85:ca:75:e2:de:a4:d4:
2a:1e:a5:92:fe:91:57:13:0f:c3:c2:fe:d8:55:d7:a2:c3:68:
1a:fe:d3:93:85:a1:41:fc:30:18:9f:eb:df:c3:33:80:a6:2f:
c1:4f:3c:d0:a4:56:73:6b:33:92:ca:d9:8f:4e:c5:3c:c7:95:
13:a8:23:5b:2b:82:1f:d5:a6:7c:2a:6c:d4:fa:ec:bc:05:a0:
4f:b2:cb:e4:be:41:37:95:1a:c2:f8:80:b9:d9:64:90:92:31:
03:37:6b:53:c4:7c:21:21:34:71:09:52:c0:d1:29:21:34:97:
a3:9b:67:73:af:0b:37:cb:6f:82:22:b3:ed:0f:7c:8e:79:ce:
88:1c:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:44 2025 by rpki-client