Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: O3c9UHC6PgXMwCF9+34oAnKVhKsfuNtKGKN9b93kH/g=
Subject key identifier: A1:56:26:77:21:69:9F:2D:7B:CF:A8:CF:65:E4:DC:93:DD:FC:58:68
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 0197688545E0012A5F1C723A0B9C30327A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: 2C
Signing time: Fri 13 Jun 2025 09:00:54 +0000
Manifest this update: Fri 13 Jun 2025 09:00:54 +0000
Manifest next update: Sat 14 Jun 2025 09:00:54 +0000
Files and hashes: 1: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (hash: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=)
2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: Jjq1fL/HDcXN4q41DCJZmeI/+ycvRQ0t+qVN9McgxYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:45:e0:01:2a:5f:1c:72:3a:0b:9c:30:32:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Jun 13 09:00:54 2025 GMT
Not After : Jun 14 09:00:54 2025 GMT
Subject: CN=a156267721699f2d7bcfa8cf65e4dc93ddfc5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:2c:07:7a:0c:ca:83:eb:fb:12:14:62:38:
09:af:bc:4a:8e:62:b5:97:b2:f3:c3:57:27:9f:9e:
15:08:65:06:b2:4a:ff:c3:4e:69:09:f3:fc:d4:40:
ad:20:4e:f2:50:e2:33:66:4f:78:df:de:19:fa:40:
e0:b7:5d:a8:3e:6a:6b:e0:b8:5a:c6:ec:6a:3d:1b:
9c:a8:df:74:12:aa:6f:6e:e9:42:0e:ab:04:f6:f5:
ff:70:ff:9b:8d:55:62:1f:1a:ba:eb:6b:8e:e4:b3:
6b:ac:4e:dc:5a:89:bb:3e:16:d6:6e:3d:63:4b:ee:
1e:16:c2:cf:86:e3:3b:41:2f:a2:5b:17:f9:e4:36:
21:da:84:33:d1:f0:1a:46:c3:30:65:ac:f7:d4:d6:
4d:ed:43:aa:9f:b9:90:f3:e5:fe:d1:2d:40:ae:c0:
06:59:46:94:33:cc:98:d2:ba:c7:8a:78:a1:c3:34:
9b:bd:cc:ba:d7:06:b8:92:ff:8c:70:55:2a:1c:38:
3b:d0:0a:67:c4:8f:b1:55:5e:72:11:e0:4a:db:b4:
9c:d6:4b:21:9d:5a:00:24:87:b3:8f:7d:75:64:4a:
98:50:69:d1:15:2d:74:90:cc:fb:89:3e:ec:27:79:
e3:ab:b5:e2:c8:41:cf:13:23:e8:02:a6:44:56:dc:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:56:26:77:21:69:9F:2D:7B:CF:A8:CF:65:E4:DC:93:DD:FC:58:68
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:c6:ff:1a:05:33:31:d0:39:d1:dd:25:cf:6e:6f:b0:e0:
f8:30:d6:e6:7e:34:81:f3:e8:7a:03:0b:7f:2e:db:90:89:7d:
26:6b:53:53:9b:c9:0e:fd:b4:65:16:11:88:41:93:81:1b:1a:
4f:d3:55:23:e3:ee:99:6f:2c:72:ab:66:1a:90:da:b8:02:37:
41:01:70:26:1b:40:64:16:60:15:a8:32:0b:49:06:70:3e:0b:
6f:fc:23:12:71:cf:72:78:39:15:1e:c3:4e:36:e2:32:17:21:
a4:77:8a:ab:41:01:e9:ea:27:7c:0c:cf:fb:24:0b:eb:65:fe:
ee:0b:13:19:38:41:3d:99:25:29:20:68:67:b4:ad:3a:13:98:
09:ab:57:d4:d9:57:b5:db:35:ab:08:58:c6:fb:8a:8e:1f:dc:
9b:cb:20:ef:b2:77:07:cf:c0:87:bf:0f:36:0b:e4:21:6a:b9:
bf:d9:e5:be:1e:58:4e:46:c1:f4:ac:51:9e:83:d0:1d:36:e3:
b7:6f:f6:fb:46:60:11:0c:c1:34:ea:59:8f:f9:65:d5:20:c3:
6d:52:72:68:ac:12:11:24:2f:f7:4e:c4:12:eb:8e:15:17:2a:
8d:98:04:28:45:57:60:d8:0d:f6:01:82:c5:1d:e4:39:c0:7e:
8b:8c:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:32 2025 by rpki-client