Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: o51A2Rqm2cJuV0syeS0LxTwoiXqHjfHQYLgduM6N/dw=
Subject key identifier: E5:79:BB:01:8F:20:F7:66:11:0C:A9:E5:B7:D1:B0:C1:9D:95:68:60
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 01976D067F57EA97F5D75C37786B7BB2AADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 2D
Signing time: Sat 14 Jun 2025 06:00:31 +0000
Manifest this update: Sat 14 Jun 2025 06:00:31 +0000
Manifest next update: Sun 15 Jun 2025 06:00:31 +0000
Files and hashes: 1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: JgKYTru5c934axVQE26knOxn+lSklWTdxwQXxfy0XCw=)
2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7f:57:ea:97:f5:d7:5c:37:78:6b:7b:b2:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Jun 14 06:00:31 2025 GMT
Not After : Jun 15 06:00:31 2025 GMT
Subject: CN=e579bb018f20f766110ca9e5b7d1b0c19d956860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:fe:39:bf:69:5c:21:b7:7f:93:fc:a9:c0:
b5:53:ab:74:17:e9:6f:17:fc:2e:8a:99:10:e2:31:
8c:c0:d2:8f:23:b6:28:b4:16:20:f9:d0:0f:a0:04:
3b:1c:81:d5:71:c8:09:c4:78:7d:5e:dc:aa:81:54:
f0:a5:9a:c1:33:ee:13:5a:fb:c0:c1:81:9e:f8:8e:
31:79:07:c5:4e:b4:5a:ed:c3:b0:0a:39:b0:90:4c:
5c:08:60:f3:88:42:b6:9b:40:03:ef:f5:77:a5:05:
72:d6:36:fd:88:8f:24:53:7e:cf:bd:af:88:95:5d:
ee:b3:5f:42:e9:68:1d:66:36:9c:30:c4:e1:18:bc:
49:eb:e4:85:19:26:2d:02:73:89:78:f5:94:8f:7f:
5a:3c:26:a6:33:cc:2d:ca:bb:ef:32:14:58:f1:14:
7b:5e:1f:36:c3:c7:3c:a2:9e:90:4f:a5:86:64:17:
ab:e8:7e:e3:ca:c9:b0:9a:86:ac:92:1f:5c:9b:2b:
39:30:f3:c4:db:2d:d7:75:9c:57:5c:54:70:ba:c1:
f8:dc:38:1e:f0:42:d1:17:79:6b:1b:b5:57:e9:2a:
e5:73:23:eb:4b:30:12:9d:22:17:60:8f:43:e8:e8:
6f:0d:5a:a0:55:c7:a1:5b:1c:56:c2:e0:b1:05:66:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:BB:01:8F:20:F7:66:11:0C:A9:E5:B7:D1:B0:C1:9D:95:68:60
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:f5:63:c8:43:fb:fb:d0:17:26:04:96:45:b4:67:3e:ab:
0e:03:ea:35:b6:b0:e1:06:75:5f:2f:ab:ea:65:0f:7a:b3:b8:
bf:21:00:46:b4:ca:d7:e2:48:46:93:b8:96:a5:3a:52:5c:fb:
d3:3b:75:51:7d:e3:c8:fd:f9:81:99:fc:a4:0f:24:a6:a4:f8:
33:35:85:c3:27:a6:33:ce:d5:e8:38:bc:b2:f0:a4:93:e7:6d:
5c:12:81:5a:1c:50:0e:80:eb:59:69:83:9f:2e:11:1a:20:04:
3f:77:6b:a1:df:3a:4f:db:04:ca:8a:bd:17:5f:c9:e4:31:cf:
66:99:eb:d9:4f:43:6b:b3:98:85:4e:99:96:15:14:c6:0a:9d:
71:00:32:62:07:cf:dd:72:87:3c:2d:73:31:a6:bc:82:27:17:
e2:3c:7d:07:f4:dd:23:fd:5c:c6:99:fb:df:41:cc:8c:cc:81:
f4:82:f6:af:1b:72:f3:97:8f:4c:96:19:d1:78:eb:54:9d:f9:
b2:bc:f0:70:71:b5:0e:5c:b1:fc:9b:3c:92:f8:dc:bb:d1:b6:
4c:27:95:7e:51:7a:11:34:54:7c:08:53:d2:19:cc:6b:93:ea:
fc:0f:63:fa:77:2d:f7:28:e1:f1:1e:b7:76:6f:ba:38:60:c1:
db:4d:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:54 2025 by rpki-client