Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: MIfRU3PxzbZtFVWA88W36J0U6s4XducNATqPSoKmHFI=
Subject key identifier: 8B:E9:61:D2:98:7C:51:EE:B2:2A:4E:57:73:B8:1D:55:5A:AE:CC:8C
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0197722CD03316F0BDA6C7BE5D08FB91EF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 15A2
Signing time: Sun 15 Jun 2025 06:00:28 +0000
Manifest this update: Sun 15 Jun 2025 06:00:28 +0000
Manifest next update: Mon 16 Jun 2025 06:00:28 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: 9GHroCVN2h6p0CKAeYwDbOU0o/4kH89xIW1hXTprcq8=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:d0:33:16:f0:bd:a6:c7:be:5d:08:fb:91:ef:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jun 15 06:00:28 2025 GMT
Not After : Jun 16 06:00:28 2025 GMT
Subject: CN=8be961d2987c51eeb22a4e5773b81d555aaecc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:60:89:32:09:e6:d1:78:07:19:4d:9c:2b:
8a:77:e9:83:08:59:e1:cd:29:4c:1b:bb:26:38:db:
64:dd:7a:ed:d9:2a:9a:7c:67:9c:b6:eb:82:05:ec:
96:83:dc:b3:f2:41:c1:74:b2:ba:10:1e:e1:9d:3a:
ea:d3:19:cc:bf:a8:92:86:0f:b7:ef:90:83:ee:9b:
1c:0b:70:fb:7a:07:bb:04:1a:66:ab:35:48:f2:68:
5b:8a:7e:e0:41:50:88:38:d0:46:cc:6c:61:61:17:
7f:97:af:bb:e2:d4:dd:e7:c8:ef:ba:01:11:50:fa:
38:ac:25:6e:9e:c6:de:88:d0:dc:8b:43:ad:98:c7:
21:f8:ca:e9:e7:4b:40:5f:72:3a:92:ca:69:eb:5e:
8b:3d:7a:5e:5f:76:1d:c9:5b:e4:b2:e9:64:d3:ea:
0f:77:05:17:5b:9d:06:e9:66:3b:0f:8d:c5:53:0d:
c5:31:dd:14:95:e5:cb:f1:9b:28:c3:89:02:f6:da:
3e:5c:dc:43:2b:73:5e:f3:50:12:d2:8a:3f:18:0b:
89:97:ed:67:7d:19:e2:81:7e:4f:ff:ff:64:f0:75:
fd:3b:d6:0d:69:f8:a8:58:23:7b:fd:a6:90:4b:f7:
80:ee:47:41:d5:bf:61:c9:d2:80:4f:0f:34:94:88:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E9:61:D2:98:7C:51:EE:B2:2A:4E:57:73:B8:1D:55:5A:AE:CC:8C
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:cd:ca:e2:88:8d:35:aa:16:0b:96:35:6b:e5:fd:35:2d:
4b:03:a4:9f:b3:f4:70:26:49:44:52:d5:0c:ab:25:d2:34:68:
a4:15:69:ac:6c:82:88:b3:4a:4f:cd:e6:3b:22:c7:a3:67:ca:
c0:da:17:be:7e:42:1a:d0:c0:37:de:b9:29:f8:35:60:43:db:
f8:80:ce:d3:a0:c8:81:54:70:4c:b3:7c:eb:70:df:c1:82:67:
05:c9:c6:ca:d1:bd:94:b1:e7:2f:de:24:09:3c:ba:12:08:86:
0c:46:e7:89:be:b0:0e:ff:10:85:cb:db:1d:7e:c1:4c:8b:a3:
c6:c3:78:d4:d6:23:3d:cf:66:96:fc:56:9b:9a:52:e6:cd:36:
14:a0:f1:4b:10:84:cf:1a:cc:b7:36:57:60:ec:a9:84:99:f5:
b2:df:d5:f6:d2:78:0f:11:3b:6d:21:06:ca:04:44:a0:14:a2:
bd:34:d9:23:83:88:60:26:36:50:c8:e0:66:4a:44:75:0b:8b:
b8:41:d2:96:98:72:2a:d3:e5:3a:af:18:f7:61:b1:4a:97:63:
95:5a:d2:dc:17:eb:cd:9c:b6:04:32:9a:d8:1b:4b:85:16:c6:
bf:d2:27:8c:13:62:cc:c0:fb:2a:a6:03:68:0b:77:b1:ec:bd:
f6:3e:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:20 2025 by rpki-client