Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: z2WmvHIo7qd0h9D3yq5HSYH+f2XohI3Eagk6BIdXt04=
Subject key identifier: 88:48:F0:F1:E5:EA:06:61:69:2F:66:E2:C4:83:51:11:1A:66:6A:79
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019768BC3BCABFAED7069CAC5D4B0E0EE317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 2A
Signing time: Fri 13 Jun 2025 10:00:55 +0000
Manifest this update: Fri 13 Jun 2025 10:00:55 +0000
Manifest next update: Sat 14 Jun 2025 10:00:55 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: 9Xk8j/Vhi/6HCHmYD25R1BoQE4VARebDFfBsZZRhDKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:3b:ca:bf:ae:d7:06:9c:ac:5d:4b:0e:0e:e3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Jun 13 10:00:55 2025 GMT
Not After : Jun 14 10:00:55 2025 GMT
Subject: CN=8848f0f1e5ea0661692f66e2c48351111a666a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:1f:53:f8:de:2d:85:9e:3c:55:df:f8:81:
8b:07:d5:2a:9e:69:86:ed:43:28:4b:8e:2d:25:ef:
f1:3a:4b:50:32:4d:5b:1c:aa:50:ef:15:41:81:60:
83:69:56:e9:06:8c:d1:54:39:04:48:6d:af:fb:43:
31:fb:c5:7d:b7:1b:50:7e:85:27:2c:f6:b4:38:c9:
ee:12:d8:a7:07:c6:bd:b3:6d:8d:95:f9:6c:d0:16:
0d:65:dc:3f:d8:68:08:a8:90:ad:ed:d1:a4:75:50:
ed:5a:ab:85:0a:f3:a3:72:b2:d4:03:30:15:7a:86:
1e:24:9a:be:42:43:d7:38:34:99:03:d0:ac:d4:85:
e1:2a:25:2f:e4:d2:ae:20:84:10:5a:ec:f4:7d:fd:
76:f2:ef:e0:a0:74:da:1a:93:7c:db:f6:5d:90:77:
c2:2c:05:d7:96:6f:65:f3:b3:ad:10:d5:8a:7c:cd:
35:85:a7:9a:42:e1:68:02:3f:b0:e3:82:52:eb:11:
be:3e:f5:f5:ff:38:2d:35:f1:18:ec:0c:b9:01:39:
b2:38:a4:e7:6f:da:15:7d:e5:09:72:97:4a:41:ce:
8a:18:36:39:47:f0:ff:3f:16:4c:88:d2:15:1d:75:
28:4e:6e:9b:a1:88:59:32:ce:99:07:c6:f1:6a:b9:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:F0:F1:E5:EA:06:61:69:2F:66:E2:C4:83:51:11:1A:66:6A:79
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7e:de:3b:b7:d8:c9:fc:8b:1f:c3:ae:fd:3f:90:62:bb:c1:
73:58:5a:a2:24:d0:6f:c4:1e:51:53:e8:81:fc:e2:93:b6:74:
29:32:6d:2f:e5:f0:69:a6:34:6a:c0:32:07:50:90:1d:84:56:
e5:b6:39:c4:49:87:0c:bd:71:29:34:2f:39:ad:e6:d4:c2:93:
23:12:eb:34:6f:04:6d:b8:ba:57:67:71:98:2d:8c:28:1d:96:
05:04:5a:a2:7a:15:56:75:c8:6f:fc:83:6d:55:db:75:e0:70:
73:04:32:42:8d:c6:66:8f:6b:6c:46:f0:b9:7a:fe:17:9b:58:
0a:71:0a:26:0e:c7:47:bb:62:8b:b0:75:16:ce:ca:45:f1:65:
00:55:2e:7f:5e:ef:3a:fc:97:39:3a:a9:01:60:0e:9b:49:c2:
fb:cc:12:bb:fc:32:fe:79:95:a3:f4:05:e3:7c:51:32:d7:01:
d5:5c:02:37:6b:bd:cc:63:2e:3e:64:ee:3b:00:17:86:ec:7c:
bd:48:e5:48:50:29:c4:bf:34:4e:15:8f:20:a8:e3:63:a2:cf:
0e:88:4c:37:80:e9:78:dd:61:8c:55:43:fd:8f:50:9b:75:04:
15:e1:4c:20:9f:ad:7d:c8:d9:97:80:02:bb:31:21:89:3e:aa:
58:2c:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:21 2025 by rpki-client