Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: WqVuDrS8vJX0wDRNfeBIHVRXRn5Ka2QJbyRhy1KkM48=
Subject key identifier: 62:CC:61:B2:DD:2E:6D:53:42:42:E3:6A:D3:D6:D9:55:26:0A:82:6F
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019781326CDDEFE11E3208A2D2767DB1680C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 056F
Signing time: Wed 18 Jun 2025 04:00:54 +0000
Manifest this update: Wed 18 Jun 2025 04:00:54 +0000
Manifest next update: Thu 19 Jun 2025 04:00:54 +0000
Files and hashes: 1: PHlmZzsVHNdtkbgZZGVIzuxsSOI.roa (hash: nURq80w5QR4Tg4i37nqE1f7UXJnobOs0QVmX70MkIAU=)
2: c7_38uRS_yDo1GsgJ3aV51Y83JI.roa (hash: mnpRy1c4dZlKU0Bj3MBDmjwryIt8r5CXAAk17UKgMdg=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: zTEtaaS0L0ygn+dg4Kxd+vistc6g0rl470H6d2lVsgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:32:6c:dd:ef:e1:1e:32:08:a2:d2:76:7d:b1:68:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Jun 18 04:00:54 2025 GMT
Not After : Jun 19 04:00:54 2025 GMT
Subject: CN=62cc61b2dd2e6d534242e36ad3d6d955260a826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:5f:d4:fe:57:43:25:42:96:55:fe:d6:11:
e7:f1:eb:04:09:e5:a8:03:31:dc:c0:5c:ac:06:e7:
3a:b3:84:27:de:f1:70:22:48:78:01:5b:29:c0:c4:
36:b9:8f:ae:9b:33:85:23:b0:29:78:e9:c2:0c:67:
64:9a:ef:c2:e9:cd:fe:3f:8f:5f:45:70:4c:00:30:
ee:26:97:2b:34:0f:aa:94:d0:01:06:8f:f2:7f:4e:
9e:69:75:2d:c2:9d:dd:50:a3:cf:c8:82:a4:52:ee:
7b:79:88:7e:9a:c9:9f:90:8d:d1:e6:72:ce:5b:28:
40:fe:25:e1:f1:b4:4c:ce:2e:23:f7:37:62:85:17:
14:bf:d7:0f:13:23:4a:c8:69:8f:e1:1a:a0:c8:4e:
13:f5:b1:dd:83:35:24:dd:0c:51:c5:96:11:4e:89:
3a:3d:b3:ec:63:a4:e0:b2:f7:72:9b:be:cd:e9:21:
4a:df:ee:71:1b:84:2d:ac:c5:96:c6:49:f4:d8:a3:
ee:05:f2:22:2d:b2:98:76:20:05:62:09:f6:09:a1:
2a:0e:49:f4:ac:99:fe:5e:df:4a:ad:68:42:78:3e:
71:f9:f1:9c:50:a5:72:5a:a1:e4:c1:cc:e1:86:48:
bb:9c:73:9b:ad:75:30:2e:e5:58:52:df:cf:8a:6b:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CC:61:B2:DD:2E:6D:53:42:42:E3:6A:D3:D6:D9:55:26:0A:82:6F
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:a7:6a:25:b7:52:4a:db:4d:e1:53:d9:64:9d:2f:ea:94:
78:f2:f7:c1:d3:3b:af:bd:2f:51:cb:1c:88:36:f0:72:c7:31:
58:59:40:d7:f6:cc:4a:32:44:d9:98:4b:dd:2a:75:db:b6:8c:
6d:47:4b:88:f5:12:47:d8:f2:93:4c:be:dd:a9:b0:76:5b:e1:
09:e7:ae:26:b3:1a:ed:09:1d:b9:4f:6e:31:e6:b2:90:29:36:
b7:30:1b:21:ae:cd:41:9a:f4:ba:99:ef:18:1f:97:31:e6:ae:
d5:47:42:44:01:24:97:ae:6b:56:21:63:ee:2a:c1:a6:3e:3c:
72:34:ee:80:e7:a0:90:f3:64:c5:08:bf:35:fe:ed:d3:73:f7:
f1:e5:16:bb:4e:0f:5d:b9:49:06:87:60:9c:f2:46:2e:6e:e2:
a7:bb:16:0f:26:e4:cb:1e:8d:6b:f4:b9:ec:62:8d:07:0b:87:
3e:28:f5:1f:e0:76:0b:7c:20:89:18:c5:cf:43:45:0e:19:81:
12:26:9b:3a:ac:8f:a8:83:85:fb:5a:0a:b4:e9:15:a9:75:9f:
14:cc:c3:33:09:b8:13:15:b9:f1:72:9a:94:69:b4:fe:23:c6:
de:bd:4b:b9:fa:f2:db:2f:e3:d8:6c:d1:c7:13:1e:f4:64:6d:
74:7a:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:35:42 2025 by rpki-client