Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: 35as330xiLB81H8P+wYesRIHUvrAwOjm1YTxXZJGfDI=
Subject key identifier: 96:D2:3D:60:FE:7C:28:D9:F0:DB:D4:73:8F:C6:BB:D1:D5:CC:BF:F8
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 0197B8C5C1044D4E8C063A12F3B45ACCAF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 23:00:56 +0000
Manifest this update: Sat 28 Jun 2025 23:00:56 +0000
Manifest next update: Sun 29 Jun 2025 23:00:56 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: GZbBXmicpZQj4zvg4EtUMg+q4wJGRcFNC2BmrqnpoAc=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c1:04:4d:4e:8c:06:3a:12:f3:b4:5a:cc:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jun 28 23:00:56 2025 GMT
Not After : Jun 29 23:00:56 2025 GMT
Subject: CN=96d23d60fe7c28d9f0dbd4738fc6bbd1d5ccbff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:f3:a5:6f:d3:17:79:2e:2e:bf:0b:67:03:
49:f6:02:f8:87:5d:f0:e1:56:53:2d:ac:02:83:63:
91:fc:62:9f:8a:15:ab:21:0c:a7:c3:6d:1a:96:0c:
b9:e2:4f:82:01:fe:83:b0:da:f3:72:5d:15:5c:bd:
0a:72:5d:0f:eb:53:78:e2:41:a2:31:02:f2:59:39:
64:d0:16:a7:43:bb:3e:14:f5:17:66:fc:41:f2:c4:
ad:7d:d9:8b:3d:b6:af:dd:10:9b:e0:e2:89:75:4b:
0a:22:37:d4:3d:9a:ee:f3:47:dc:38:a6:2d:21:fb:
79:3d:5c:6d:57:d4:61:1c:35:aa:e5:18:43:1e:a8:
53:79:19:e8:94:ca:b6:7e:af:af:cd:fb:84:a6:00:
29:b1:48:b1:90:b6:43:26:4f:78:77:25:db:42:8f:
5a:93:64:15:e2:59:5f:3d:4b:64:17:d5:59:80:54:
81:89:f4:67:d9:28:65:75:60:c8:ad:3b:30:8f:ad:
d1:0d:62:60:fa:fb:8d:35:35:fb:65:d7:9d:6a:66:
6b:25:0e:dd:df:4c:ba:90:ed:1f:70:3a:83:de:ed:
75:6e:1f:2a:b4:7f:c5:ca:09:9b:18:9e:08:36:64:
0e:a1:84:1f:aa:81:dc:2b:d4:ff:0b:0b:db:2e:41:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:3D:60:FE:7C:28:D9:F0:DB:D4:73:8F:C6:BB:D1:D5:CC:BF:F8
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:0f:50:22:70:45:2d:3a:dd:67:fa:01:f0:60:59:4a:d4:
22:6b:05:a5:90:36:0a:18:9d:7d:6c:69:91:5c:af:c8:6d:75:
a0:c2:20:2c:ce:cb:7a:77:0c:c9:f6:a8:ae:66:c8:ed:8d:1a:
24:ea:7b:ce:42:a4:77:f9:c1:6b:26:28:5e:c3:d0:af:e3:88:
b1:62:71:f5:48:67:29:f5:30:94:66:8c:fc:1b:ae:c5:0e:22:
34:ae:be:08:1a:2f:a8:d2:93:b6:e7:6e:1e:58:82:2d:7c:2e:
55:e6:a0:6f:c9:b1:be:15:eb:ad:4b:b4:09:b6:20:7d:6e:c1:
5f:f0:26:bf:42:eb:fa:5e:f9:2b:ef:9a:dc:2f:f1:1f:8f:99:
a8:ac:b1:8b:a7:85:97:4d:2f:f2:0d:ae:2b:fe:59:ed:ec:58:
de:c3:27:cf:bb:36:33:24:2e:9c:6d:fa:0e:bc:15:cc:a0:3e:
34:0f:69:5f:dc:ec:52:07:88:0a:94:3c:42:42:e0:00:d0:81:
0b:ac:98:c8:3d:92:d8:de:25:0a:a0:8d:60:eb:5b:3c:91:d9:
cb:54:0a:ac:95:e9:8f:c6:d0:19:6c:23:3b:1b:3a:a3:88:7b:
ca:92:2c:07:77:5a:48:6c:98:90:87:e7:63:6d:b7:65:b5:25:
a4:3c:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:38 2025 by rpki-client