Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: /ntA/eMSo6e5XuKkmeVKMNZ/4Y0sbLQD4avTvmwCAQQ=
Subject key identifier: D6:AC:E1:7E:46:DA:1C:DB:90:83:33:26:F6:A5:A5:46:A4:27:BA:69
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 0197771C9FD6E0EC204721637D1D16E0D418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 02E5
Signing time: Mon 16 Jun 2025 05:00:53 +0000
Manifest this update: Mon 16 Jun 2025 05:00:53 +0000
Manifest next update: Tue 17 Jun 2025 05:00:53 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: yjkI8ytjxHjV63UiTaWbjmoY3QRtM7h3Xdj288H856E=)
2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=)
3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:9f:d6:e0:ec:20:47:21:63:7d:1d:16:e0:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jun 16 05:00:53 2025 GMT
Not After : Jun 17 05:00:53 2025 GMT
Subject: CN=d6ace17e46da1cdb90833326f6a5a546a427ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:26:60:16:33:cc:5e:4d:4b:50:1d:b2:69:
01:ba:a9:2b:04:73:21:09:ae:04:04:c3:d2:c9:43:
6e:97:87:4a:45:7b:1d:a6:00:fe:6e:d0:10:d6:e6:
ee:8f:e3:ec:45:f5:ef:00:34:83:8e:15:07:5e:0f:
75:f2:7c:59:09:11:8c:1c:80:92:53:6d:5a:fc:14:
f3:ab:9d:3f:d9:19:a7:db:52:6d:2d:dd:b3:47:be:
99:d0:36:6d:1e:31:4f:ae:ad:c7:92:7f:d2:d7:ae:
c2:f5:c4:2e:c2:fa:37:14:09:1d:d8:54:8a:83:f3:
a5:7c:53:48:7e:9b:0c:e0:21:da:ac:92:46:30:d2:
6f:02:54:f3:40:a8:ed:d5:c4:99:07:95:9d:9e:b6:
20:53:dc:67:95:72:11:40:0e:3d:e1:f5:97:06:98:
f8:de:77:00:84:9d:43:03:bd:e5:0e:33:39:9c:ed:
3d:db:33:c1:24:df:30:f1:27:8c:0f:d0:8a:ad:8c:
87:f9:53:be:7b:72:3d:31:1a:a6:83:3a:24:12:86:
1a:91:50:dc:67:09:0a:81:79:6a:de:21:16:cd:fe:
32:b0:70:a0:2e:fa:e8:ad:69:ea:64:bd:3b:b8:30:
93:98:dc:d4:08:69:99:d7:2e:10:d4:01:7b:c6:51:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:E1:7E:46:DA:1C:DB:90:83:33:26:F6:A5:A5:46:A4:27:BA:69
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:23:4d:56:69:ce:03:ad:25:4c:aa:54:d8:51:a2:0b:f5:
4c:d9:72:76:04:18:58:3b:6f:86:1e:e8:68:92:21:cc:af:42:
a6:30:c9:54:96:e4:99:fa:14:c0:8b:d9:ce:05:9d:fd:cf:c6:
02:ab:d4:8a:ef:de:1e:26:2c:3f:0b:0d:45:b7:b3:98:f1:4f:
1d:a0:24:af:11:df:37:55:48:b0:3e:a7:31:01:92:b3:40:63:
f3:e1:94:b1:4a:6b:0f:f2:c6:5f:ee:61:2f:73:b7:5e:0d:08:
f6:4b:4a:e7:73:74:24:6d:eb:ed:0a:a4:6b:69:07:d2:8a:99:
30:14:4f:8d:ec:38:c9:1c:49:02:f4:a1:02:31:5e:c2:c5:77:
fa:37:ad:e2:4a:0f:46:cf:50:fc:1a:57:e2:f8:5b:af:c3:45:
26:b7:14:39:aa:e5:a6:24:a9:6e:f1:59:3e:9b:4e:c5:48:c4:
6a:9d:ff:b3:84:56:54:90:24:5a:8f:70:0a:45:c6:f3:a9:28:
c0:12:2d:3b:1f:d6:04:0c:14:02:bc:60:47:a8:d6:a6:92:73:
b4:26:e3:c4:78:92:96:2f:7b:2f:b2:2d:bd:d4:bc:dc:00:48:
d7:00:ff:4c:1a:40:6d:5d:0d:56:c7:74:ca:b6:b1:fc:83:46:
3d:f2:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:27:09 2025 by rpki-client