Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: QcFSTG4o4LMuFOzxEymfdi7us1FkHaonKnh2AOkDpOI=
Subject key identifier: B1:BD:8E:B9:D2:26:F7:0F:7C:6A:A3:58:AC:A2:D2:B7:4B:D3:8C:FF
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 01976F99A2A9929ED4ECD3D90C6E4B85B7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 18:00:28 +0000
Manifest this update: Sat 14 Jun 2025 18:00:28 +0000
Manifest next update: Sun 15 Jun 2025 18:00:28 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: 2mmRBnwQzfdt42EYxGmut6BzebBxNCmqjhEsgcJju/c=)
2: fsmjJGHVGMdtbxt5zTmroIJ61d8.roa (hash: ekmZpLPLY3VD8IwMlJiRaCQQJFiTrijdYs2CPHyN2+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a2:a9:92:9e:d4:ec:d3:d9:0c:6e:4b:85:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jun 14 18:00:28 2025 GMT
Not After : Jun 15 18:00:28 2025 GMT
Subject: CN=b1bd8eb9d226f70f7c6aa358aca2d2b74bd38cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:bb:49:7a:9e:33:46:2c:b3:fd:a3:4d:b0:
23:ec:56:d6:00:4c:fe:d6:f6:a7:24:06:fa:83:1c:
70:42:2e:30:51:b2:41:49:35:5d:ea:15:55:34:b8:
1e:cb:24:f1:23:16:db:13:ca:56:b0:94:9e:45:af:
97:b0:b1:16:63:08:18:1c:7c:09:61:28:ee:a9:d1:
7d:12:b3:ea:9e:03:4d:aa:eb:d2:0e:45:9c:a5:63:
9e:9f:b8:02:8d:3b:e8:ba:42:8e:22:ca:57:06:90:
25:e3:c1:77:d4:89:1c:fd:70:a6:e2:d6:95:a8:26:
88:42:83:a5:70:f8:8f:f8:e2:65:f5:4c:be:b0:89:
bc:9e:80:50:00:5c:2a:e9:91:91:f9:ac:a3:4e:8e:
0b:96:55:32:16:d7:b2:19:d2:3b:50:74:a8:b0:bb:
7e:3e:6c:73:a4:88:00:a7:54:6b:b4:22:13:62:bb:
72:d9:99:0c:9f:ab:7c:74:a1:42:38:2a:51:4b:b2:
4a:97:70:4e:fd:bf:f5:49:fe:95:35:49:ed:c7:b6:
7f:80:c7:93:b9:31:7a:6c:89:ba:37:34:3f:ab:91:
b7:a1:b7:e4:f2:ba:2d:ac:8d:42:52:01:d6:31:fd:
de:66:a0:dc:ea:a2:4f:71:28:15:6e:22:39:cf:01:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:8E:B9:D2:26:F7:0F:7C:6A:A3:58:AC:A2:D2:B7:4B:D3:8C:FF
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:a3:6a:c2:36:6a:f8:62:f6:dd:84:85:01:7e:23:24:8f:
8f:d4:89:dc:e3:a3:24:6d:37:81:1e:4c:54:d9:78:4b:e4:c7:
e4:21:c6:09:1e:c1:3d:11:3a:ab:a8:4e:27:80:84:bf:0a:fc:
e5:23:6c:18:96:51:1a:40:a3:e0:a0:22:72:74:33:e2:1e:b2:
18:74:dc:39:35:90:da:00:f8:c9:6e:1c:65:3c:f5:cb:d1:e0:
32:20:f6:c9:5e:b5:ee:63:a2:24:f1:8d:30:2e:48:84:85:ce:
b1:6d:be:b1:f4:12:b3:1d:67:eb:20:c6:4d:8d:a2:83:a6:58:
f6:bb:71:5c:6b:c9:a9:fd:d0:1e:85:9d:b2:5d:30:37:d9:fa:
fc:33:46:bb:95:9c:93:2e:1e:d3:73:39:34:9f:c5:e9:c0:98:
27:ff:e4:6b:11:16:7b:88:2b:fa:a5:97:37:0b:2a:e7:84:ed:
60:8e:b7:ab:2a:4b:d4:d2:84:e6:4f:e8:8d:16:04:0b:d6:f9:
2d:3f:ae:44:93:53:c2:c4:a8:f0:4d:8d:a4:08:5c:cd:f8:ea:
04:4f:09:f2:28:fc:72:b6:3a:0a:e9:60:a6:29:76:17:ef:e0:
df:33:d4:b5:d5:cc:b6:c8:37:c7:1a:19:a3:e8:0d:f1:2a:40:
ef:6b:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:36 2025 by rpki-client