Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: Hhc92M6ZMEiVRjXlU8liSeoV5egu650zl8dz3sqm0x8=
Subject key identifier: 12:02:BD:CE:C1:D5:8D:A3:E0:1A:A6:68:97:C4:74:7D:B8:8A:6C:45
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0197B820C3D931C69048847324920A65FE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:44 +0000
Manifest this update: Sat 28 Jun 2025 20:00:44 +0000
Manifest next update: Sun 29 Jun 2025 20:00:44 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: Uv24td4y0lZFxmMZEYXFqFmZkReAQbXjSM+gMH+PLxQ=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c3:d9:31:c6:90:48:84:73:24:92:0a:65:fe:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jun 28 20:00:44 2025 GMT
Not After : Jun 29 20:00:44 2025 GMT
Subject: CN=1202bdcec1d58da3e01aa66897c4747db88a6c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:85:e7:f3:63:6a:26:de:6f:f0:05:eb:0c:
ba:75:3a:00:7b:f7:17:af:e0:9f:7a:84:cc:56:2c:
77:ec:46:a9:e8:3a:b3:c6:a9:58:51:0e:16:59:2b:
c7:0c:8f:b3:87:9c:7d:0c:62:dd:7b:6d:1f:a6:84:
37:1d:e9:eb:de:ac:3c:fb:fc:a7:c7:60:76:38:d5:
d3:14:0a:10:e5:f6:41:8b:6f:05:d0:4b:e3:57:71:
b2:ef:ff:5d:7c:67:11:ab:cf:a7:c8:82:7c:2f:73:
7b:2a:db:78:fa:88:33:fc:0f:90:a9:5e:8f:71:79:
18:ae:49:d4:1f:2f:18:6a:b5:c3:7a:1e:cf:59:42:
57:b2:c2:b4:c7:52:d1:17:11:df:a4:38:39:70:44:
e2:40:de:87:6f:bd:70:e2:ec:e7:22:f4:fe:fe:3c:
25:f8:ca:37:e6:45:fa:4a:fd:8d:9f:8d:1d:d1:91:
1d:07:f3:d2:d8:fa:6f:a2:37:2e:e3:74:5e:c0:e7:
a5:c2:02:49:8a:29:46:df:63:b7:7c:58:92:7c:27:
6c:cd:c8:af:0f:f1:70:74:66:85:43:94:02:06:23:
ea:f4:51:7a:77:54:8d:a7:15:e0:5d:ce:a8:7f:8c:
41:11:52:f0:41:13:15:7e:c8:40:a2:23:c2:79:0c:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:BD:CE:C1:D5:8D:A3:E0:1A:A6:68:97:C4:74:7D:B8:8A:6C:45
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:e1:ee:30:58:bf:fc:50:44:64:b7:44:3e:eb:5f:6d:98:
06:4e:dc:fe:66:08:b7:a1:d4:06:b2:e7:8f:a2:2b:40:98:47:
05:96:11:fe:16:7b:34:42:5d:48:f6:27:70:c8:a7:ae:34:21:
72:cc:62:5e:04:75:f0:a8:d9:d3:6a:f6:90:70:54:d5:01:70:
e0:a3:37:64:d1:13:35:07:c2:9a:8c:57:3f:43:bc:8d:65:1c:
3a:57:13:4a:ef:2d:46:2f:7e:24:7c:61:7b:b7:3b:56:e1:f1:
c9:e5:1d:63:1b:71:91:d7:ba:01:63:9a:2d:aa:dc:25:60:95:
59:66:70:17:72:d5:9b:5a:2f:af:f3:f2:3a:0c:18:e4:23:05:
21:94:0f:f2:ae:f6:e5:a0:3b:d9:c0:1d:d6:7d:e5:fb:60:ae:
84:53:43:34:2e:da:ed:dd:b6:07:b2:d4:a0:4d:32:ef:6b:8c:
bc:49:20:3e:be:50:dd:a5:97:4b:13:f7:cd:b8:25:99:4e:9a:
bd:9a:ef:09:ee:63:4c:5b:56:12:e6:9c:3b:0f:37:e1:62:7e:
0e:cb:20:2e:2f:35:40:ec:da:1a:f0:7c:4d:1a:fa:91:b1:ef:
fe:31:1c:31:47:39:a6:da:3d:cd:f7:f0:e4:13:8e:7f:bf:d3:
b4:c7:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:00:05 2025 by rpki-client