Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: iQkdvybCUN34sjDmMazab2EgOug7nDd43Ss1ypKh1sQ=
Subject key identifier: E4:32:AB:32:1D:0F:09:21:04:EC:06:B5:10:DC:4D:D5:B0:19:F8:AE
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 01976C9923180D52F6DE94BF4EB8F6271F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:01:04 +0000
Manifest this update: Sat 14 Jun 2025 04:01:04 +0000
Manifest next update: Sun 15 Jun 2025 04:01:04 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: LlpO5oSb+o8an6YonmxbvmbWyuDni5S8XQFz/bedYmU=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:23:18:0d:52:f6:de:94:bf:4e:b8:f6:27:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jun 14 04:01:04 2025 GMT
Not After : Jun 15 04:01:04 2025 GMT
Subject: CN=e432ab321d0f092104ec06b510dc4dd5b019f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:46:59:b5:37:3f:65:48:af:48:27:3f:ae:
f0:72:49:83:56:aa:b7:04:e1:69:c4:ab:8b:a3:08:
57:48:71:9d:29:cc:af:2b:19:fb:f2:be:0e:de:c4:
63:b9:49:54:04:dc:4d:40:7b:f2:9a:a0:e5:26:88:
82:17:84:24:1b:53:dd:30:4b:65:cb:2d:6d:eb:22:
9f:46:d4:74:f9:09:55:f6:fd:49:be:94:b9:61:38:
22:ed:4f:0c:cd:0d:9b:9a:da:d8:65:e5:f6:81:79:
92:c8:1a:33:44:46:49:c5:26:d0:bc:ce:4d:dc:e4:
3d:69:63:68:1c:ea:1c:e7:7e:6d:3b:a0:00:65:7b:
b3:84:c6:14:21:1b:e4:43:0d:b6:c7:07:b0:72:11:
32:01:27:db:98:4c:8f:0d:fa:fc:63:61:c5:28:89:
df:94:c0:bc:d9:04:96:12:a0:44:02:51:d8:8a:bd:
ad:ec:9f:0e:49:15:7d:fe:8d:08:d2:88:67:12:31:
1e:84:6a:a5:5a:9d:28:d2:70:69:ca:3b:c6:26:50:
c3:49:be:a8:4b:61:b7:3f:a2:ae:16:75:8c:4c:0c:
c0:9d:3a:4e:27:f1:ae:06:62:99:93:a6:54:6f:ec:
9f:87:2b:c0:c8:ba:ec:07:13:47:7b:c0:95:7d:dc:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:AB:32:1D:0F:09:21:04:EC:06:B5:10:DC:4D:D5:B0:19:F8:AE
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:63:c0:68:9b:38:69:57:ed:e9:3c:fb:89:bf:7e:56:71:90:
de:fa:15:bc:a8:e2:7e:31:33:14:fb:eb:f2:8d:a3:5d:52:9d:
7c:89:f0:97:72:94:6b:35:3e:3f:c1:35:a7:4d:50:2f:ce:6f:
9e:0a:59:15:35:5e:1f:94:7a:bf:4f:b8:b1:a5:7c:92:26:ba:
01:fc:49:84:1f:7f:53:85:f3:f4:66:cc:7f:10:fd:b7:7a:04:
c7:25:66:01:e1:73:04:a0:e8:a5:72:ea:2a:41:e9:80:29:cc:
0b:48:bd:31:2b:b6:b9:23:49:bd:ee:02:df:65:29:b5:1a:20:
5f:9e:a6:7d:f6:42:74:b8:e7:88:1d:3c:89:66:e8:e7:2e:7f:
cd:e7:0b:42:0e:b7:ee:b1:f6:ad:fa:16:ae:4b:f9:04:48:70:
ae:3f:44:b6:9a:57:13:34:e8:67:f7:a7:a6:d8:c7:0b:95:d4:
a7:2c:e0:7c:bc:a2:21:1c:7c:2a:a4:f8:fc:26:64:48:26:7b:
28:90:d0:26:01:de:6e:30:5b:01:5f:19:f4:23:15:2d:cc:cd:
2f:1d:4e:4e:12:41:fd:d2:ba:3a:cf:c4:8e:7b:48:9f:05:3b:
0c:29:a5:06:82:97:1c:88:ac:19:10:13:d6:04:ba:c0:29:88:
db:01:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:31 2025 by rpki-client