Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: 2/iyT4POyGm0CLpxBJbykFvaK3haLnWuRHsFIFf1kbQ=
Subject key identifier: A2:99:FD:BB:67:67:DA:21:50:0C:16:49:76:BE:09:C1:FB:06:F3:AE
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 01977F43C274680869C58C58A1664A049688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 1074
Signing time: Tue 17 Jun 2025 19:00:36 +0000
Manifest this update: Tue 17 Jun 2025 19:00:36 +0000
Manifest next update: Wed 18 Jun 2025 19:00:36 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: aPCKel6X+sAvDU5RMyXQ8BZva5YoNO56N6qOBtocfck=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:43:c2:74:68:08:69:c5:8c:58:a1:66:4a:04:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jun 17 19:00:36 2025 GMT
Not After : Jun 18 19:00:36 2025 GMT
Subject: CN=a299fdbb6767da21500c164976be09c1fb06f3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:32:ef:61:0a:cd:08:5e:e0:7d:b3:36:47:
cc:a8:b5:ac:b6:75:e8:30:18:eb:10:28:29:87:25:
a8:8c:38:46:7c:c4:c4:6e:86:fc:dc:67:4a:08:be:
10:9a:37:4d:75:98:70:8b:8c:0b:67:ce:23:90:7e:
05:60:12:54:69:78:11:ea:0e:d8:14:82:0c:23:49:
c9:62:20:77:5e:57:29:0a:9d:90:f1:98:ee:76:37:
96:5b:1b:b5:a3:ce:03:cc:fe:4b:ee:47:94:18:bb:
ff:22:07:65:c1:48:13:a4:65:c5:51:16:88:05:dc:
d6:db:d2:79:da:54:00:72:35:13:5b:3d:b5:58:64:
51:59:c1:89:92:b7:7f:fd:4b:2c:c6:1c:60:62:3c:
75:9a:94:64:f7:05:40:eb:92:a5:af:0d:ee:04:e4:
bf:81:da:94:52:59:bb:e9:53:c7:fa:2a:8c:32:bb:
a0:c1:ff:13:b0:c1:54:f0:ed:7d:d3:d6:e1:a7:2a:
56:6d:42:b3:d0:2b:cc:2d:a3:d3:8b:4a:8c:eb:08:
18:fa:bd:34:60:11:27:e3:9f:d1:b7:b1:cc:40:ae:
c1:1f:89:46:16:0d:8b:d6:fe:fc:a0:56:f6:91:23:
e8:c8:8c:d3:55:84:14:a8:95:c1:e5:3b:ca:d7:77:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:FD:BB:67:67:DA:21:50:0C:16:49:76:BE:09:C1:FB:06:F3:AE
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5d:c1:6f:5b:8e:da:a4:12:54:1a:89:06:33:bd:de:c8:44:
72:e8:fb:77:22:51:e6:9b:1a:fc:67:f6:5f:f7:0f:d2:8e:b7:
13:0b:2f:01:b6:ff:c5:ea:5a:76:ba:ef:12:4f:60:2a:a4:24:
1e:81:a4:cd:5a:d4:8b:bd:66:ed:a7:80:86:d2:28:f2:80:b3:
3b:d5:b2:4c:ed:d9:51:7f:9c:e7:3c:ce:10:b2:2e:4a:91:9b:
9c:75:8d:10:e0:08:d0:6e:d6:9a:d3:c1:8e:47:f4:ac:ad:90:
00:a7:70:d4:53:57:06:4d:86:51:45:c1:ec:72:34:f9:92:4d:
37:3d:0f:37:d6:4b:db:a7:0b:bb:f8:8a:ec:7d:7c:e1:a8:16:
32:bb:1d:4b:ad:3a:0e:95:f0:33:f2:e8:06:14:36:32:d7:12:
ad:d9:4f:88:8d:f9:1b:8f:27:e1:bd:d8:3e:3e:3c:88:23:26:
0b:89:50:3e:11:4a:b9:38:c7:1a:cd:39:04:a2:12:c7:7b:2b:
f7:9c:6c:ec:35:e6:cf:a2:93:a6:e2:da:9f:48:39:75:4d:8b:
c6:75:bc:4f:52:8c:fc:0b:71:16:95:a4:df:47:2e:c5:74:39:
45:1a:95:f0:a4:4a:d7:aa:f7:de:24:5d:69:bd:ca:74:f7:e4:
a7:60:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:54:57 2025 by rpki-client