Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: fIDWr97Ne/xO7qMEtQpbb30FO6jDglY2HU+ytfR6P20=
Subject key identifier: 5C:97:0F:88:3A:5D:69:AD:B5:BE:C8:B5:61:2D:BD:2D:DC:8F:1B:55
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 0197B77C5CFB007E303EEE831663802DE9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: Z96+B5IaLQelwxdyzKx1D+1a+Htym4RVRjWR1rkSdFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5c:fb:00:7e:30:3e:ee:83:16:63:80:2d:e9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=5c970f883a5d69adb5bec8b5612dbd2ddc8f1b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:13:c9:46:20:66:69:20:1c:68:ce:12:b4:
0a:83:6d:07:68:43:9d:fc:db:41:d4:2c:47:08:b0:
22:a3:cb:84:71:6a:e0:76:e4:2a:de:7e:a4:8c:34:
0f:b9:70:60:0c:0a:57:30:fb:49:20:7d:56:ee:68:
d9:43:b1:ba:1f:b3:3e:be:6e:5c:39:26:62:ea:f6:
d4:75:2f:39:01:bb:e2:b4:e8:8f:4d:6c:d8:c0:d6:
49:be:a6:70:c8:a2:f2:5d:65:5e:cd:c9:85:ed:e7:
b7:eb:99:90:ba:30:42:0f:1c:70:d6:45:15:4f:a3:
40:a8:1c:33:f6:73:4d:cd:aa:a9:6f:70:41:30:6b:
af:b3:bd:59:e1:50:14:d0:7f:79:ec:ed:d7:21:7c:
82:d4:00:85:df:cd:d3:f8:c7:86:02:74:8c:e9:92:
8a:49:77:34:ea:88:43:af:56:6d:1d:70:d2:95:8b:
79:19:a1:75:ce:4a:1e:e7:95:0c:db:df:f9:31:e9:
81:ae:38:d5:ea:41:db:26:21:a9:b9:63:cf:64:d2:
82:e6:b4:3b:a9:d2:f2:3f:25:dd:42:d8:16:29:a8:
39:e6:93:4e:69:ab:0d:cb:3c:4a:67:ed:0a:e5:e6:
d6:b0:22:24:fd:e4:d7:6e:c2:30:65:8b:27:e0:13:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:0F:88:3A:5D:69:AD:B5:BE:C8:B5:61:2D:BD:2D:DC:8F:1B:55
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ce:20:67:4d:13:5e:6a:52:b2:84:42:78:2c:8c:df:80:6e:
93:30:23:19:ca:ed:a3:28:4f:c1:a7:ee:26:88:c0:b4:93:dc:
83:49:5d:69:a4:ba:9e:cc:4f:f5:ce:fe:2d:11:ea:c3:92:44:
5e:51:8f:2b:26:82:91:49:4b:a0:9c:9a:ab:6e:d2:2c:c5:28:
39:af:f6:02:e1:ff:96:e1:1c:06:0b:ed:8c:59:17:0f:a7:f2:
09:d5:fa:60:63:08:9f:71:8a:60:31:cd:1c:8b:82:c3:51:14:
8f:a3:5e:71:af:74:fd:ab:3f:b8:70:cb:6a:2b:1e:e9:9a:a1:
31:a0:ca:ee:6b:a7:2f:58:e1:2d:fa:66:1a:bf:9f:47:e4:a7:
d9:77:17:18:76:3a:77:f2:0d:97:ee:96:7d:c3:5b:6d:b9:17:
b0:10:a1:9b:7f:6e:b3:d9:e8:b0:3c:db:c7:7a:c3:0e:d9:8f:
3f:6d:c9:20:3c:04:db:f4:ce:de:d7:40:83:8e:2f:a4:ca:d3:
e7:38:36:4e:42:34:5b:29:65:ca:1d:58:91:2a:fd:e4:9e:a7:
20:0c:bd:21:27:11:b4:77:88:39:b0:ea:4c:b9:79:3a:5b:26:
30:1f:83:03:e2:4d:0d:85:24:56:ab:10:91:90:e2:3b:5d:51:
c0:54:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:50 2025 by rpki-client