Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: fcfbixSCmwViEpA2Acd3Y8sSa03GCSfXBDp6pkXKsPs=
Subject key identifier: 39:84:BA:CF:7B:59:90:1D:A6:55:ED:B3:5C:68:F4:3E:B3:3D:51:1E
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 01987306B449A1FD286ADED39410310D27E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0999
Signing time: Mon 04 Aug 2025 03:01:15 +0000
Manifest this update: Mon 04 Aug 2025 03:01:15 +0000
Manifest next update: Tue 05 Aug 2025 03:01:15 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: C4YNT04+l0NluVTEpvH23YRWWSYqDAkaHWyHfET5P00=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:b4:49:a1:fd:28:6a:de:d3:94:10:31:0d:27:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Aug 4 03:01:15 2025 GMT
Not After : Aug 5 03:01:15 2025 GMT
Subject: CN=3984bacf7b59901da655edb35c68f43eb33d511e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:64:b1:09:05:55:57:a2:e5:80:27:b8:9a:
88:83:e4:06:f0:1b:97:f7:15:66:5c:98:07:26:70:
77:0e:1f:a6:b7:9c:14:51:1e:c2:8c:11:0d:9b:e8:
ea:91:5a:ad:b5:ab:a1:28:f8:9a:07:79:77:15:e6:
cb:a0:89:2b:28:bb:46:aa:7e:2f:26:33:a5:b7:20:
bf:1e:d0:47:f0:7e:bc:b9:39:92:04:29:9f:6e:9f:
57:0f:a2:8d:e2:ca:fa:50:ec:78:73:15:17:55:eb:
36:57:eb:9c:6c:e0:51:16:84:df:3c:19:57:2c:0b:
0f:87:6c:76:ad:07:8b:b2:cf:81:ce:03:62:6e:88:
12:d7:4e:95:0a:cd:ee:28:40:a9:07:16:6b:75:36:
75:6c:0f:bd:ea:84:79:80:60:9b:12:26:5f:52:df:
fa:ab:e2:a1:7b:dc:09:d8:e6:84:2a:91:54:e4:8f:
56:f0:a3:9f:e9:33:32:95:66:7b:de:8d:0e:ac:4d:
40:6b:6b:a0:f2:a0:61:3a:38:7e:55:d4:ae:ee:52:
b2:4f:6f:96:e2:b8:d0:5a:44:66:74:35:c3:39:92:
c5:b3:fa:6e:04:64:49:67:d5:78:bd:ec:ab:33:26:
66:aa:61:07:ba:25:14:80:e2:61:6c:0f:7e:a0:64:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:84:BA:CF:7B:59:90:1D:A6:55:ED:B3:5C:68:F4:3E:B3:3D:51:1E
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7f:40:82:ba:90:1c:d1:89:44:18:49:43:43:c7:97:2d:c8:
ec:a3:e0:3e:7d:f8:60:29:5c:61:4f:09:13:46:25:e1:ec:9b:
0e:79:a7:e1:e7:52:9f:0e:6f:c1:96:24:2f:b5:2b:e6:c5:c6:
45:a8:1b:cd:95:e0:c2:06:27:19:1d:18:a4:13:a5:7c:44:05:
f3:7a:0a:84:9a:4d:2b:1c:5e:9d:1d:85:cc:cb:17:4a:0e:90:
02:b1:cf:b3:4c:94:5e:cd:bc:e9:70:7c:55:b2:0b:8a:0c:e1:
fe:c1:1d:a7:52:1c:f3:10:2f:cb:c8:98:f5:59:00:38:c1:d7:
bf:90:f6:9c:97:5e:5e:02:e0:88:1f:f4:86:d1:39:66:58:53:
52:d2:93:2b:8c:6f:15:58:9b:57:4e:cf:9b:99:79:c7:a3:7f:
8f:ea:2e:66:50:6b:41:10:b9:2d:5d:31:6e:4a:27:e6:e6:cc:
f0:ba:2d:cf:f4:59:a4:99:ad:75:76:53:4e:0f:b8:1c:fd:8d:
af:9d:83:a1:2b:74:04:d5:35:b5:9d:2f:14:7c:af:f0:ea:83:
6f:42:ca:db:f5:ce:c4:65:45:16:08:68:2d:1c:07:40:ad:99:
bf:84:9c:80:7c:a5:85:5a:5c:01:2f:a3:13:54:51:8e:dd:88:
51:bb:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:56 2025 by rpki-client