Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: rPQGL2HaBeoHEv2lkrqmQjJEzfZUe37JSONTrYjBp2s=
Subject key identifier: 32:2D:28:77:DD:48:FB:8C:23:1B:1C:F5:FC:F9:D1:38:1F:26:FC:B4
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 01976E86E61FC0FF7AFAC71D9481193A5A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 13:00:23 +0000
Manifest this update: Sat 14 Jun 2025 13:00:23 +0000
Manifest next update: Sun 15 Jun 2025 13:00:23 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: SsurrIVwOftMRYNGOTzJ8t6SfEwaSCGw7y/56jgP3RI=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:e6:1f:c0:ff:7a:fa:c7:1d:94:81:19:3a:5a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Jun 14 13:00:23 2025 GMT
Not After : Jun 15 13:00:23 2025 GMT
Subject: CN=322d2877dd48fb8c231b1cf5fcf9d1381f26fcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:6f:da:11:d4:e6:1a:6d:7b:1c:ad:d6:b4:
fd:cd:1a:0f:3a:11:1b:51:70:44:7a:8e:f5:43:02:
49:3c:d4:02:4f:74:c7:7f:a5:a7:2d:b8:d8:44:06:
0d:5c:a1:bb:d6:f9:43:8f:04:ef:6c:93:50:1f:be:
aa:64:07:ce:66:42:af:d5:e3:8c:0b:42:2e:ba:4f:
65:36:65:18:a5:82:69:55:9b:f0:63:2f:ae:85:fc:
96:13:18:85:28:f3:9b:a1:ff:92:ef:9f:d4:01:73:
66:48:de:ca:7c:14:0c:ef:bb:52:79:3a:52:85:2d:
1b:7c:6b:ef:1e:2d:bd:bb:c6:74:a4:b6:e6:3b:43:
bb:95:24:0f:e1:27:98:b0:76:6c:35:a6:17:2b:be:
1c:33:b8:a7:d8:a6:f0:71:e2:12:f8:a6:7b:ae:31:
b1:09:47:db:33:c3:43:f1:ad:45:22:80:58:26:2c:
97:02:2a:8a:43:3e:b1:d5:3c:6a:3c:6a:be:4c:41:
0b:8d:c8:26:22:1b:57:74:69:c0:c4:70:09:e4:04:
06:63:a2:95:d9:d4:7d:8a:42:f8:25:ca:47:33:63:
79:c7:c1:e3:2a:4f:5b:18:21:e5:17:53:ef:49:fd:
ae:fb:bd:66:9f:1c:ae:10:97:06:65:04:3a:fd:6a:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:28:77:DD:48:FB:8C:23:1B:1C:F5:FC:F9:D1:38:1F:26:FC:B4
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:82:d3:a2:95:80:16:fc:d4:af:3e:a9:0f:3d:2e:37:38:
f0:23:0e:f6:b8:2d:26:1f:2b:b5:88:41:40:e9:a3:09:9c:33:
16:b8:3f:32:d1:90:8c:4b:03:45:1d:93:41:05:73:f8:8b:c0:
58:25:cf:11:cd:78:24:02:30:9d:72:78:1a:65:db:7a:5d:23:
fb:14:9a:81:4c:c5:f0:9b:a4:9f:c0:4e:69:85:95:12:74:04:
5c:bd:d6:2b:07:f1:e1:97:e7:92:b4:72:d3:3d:c1:1d:25:0e:
f1:e2:fe:58:08:f1:2c:fc:73:d3:97:3b:cf:a3:5f:25:0f:c4:
d2:eb:5b:2e:bd:ff:2d:b5:51:41:98:a2:27:0d:e7:7f:c3:48:
9e:0a:63:6b:4f:ab:df:de:3e:39:1a:e1:2b:8f:5b:16:64:ae:
7b:90:14:c4:10:bb:a9:a1:42:99:28:7b:19:3e:16:99:82:75:
20:2f:84:1d:c6:48:43:d5:47:c3:e7:64:f1:ab:1b:cb:de:86:
4e:68:22:35:85:fa:e6:ac:0f:45:4b:76:f8:6c:24:e4:e1:d8:
5c:af:e8:48:cc:0c:ac:ca:3e:33:02:ec:fe:00:19:c0:39:1c:
13:71:ba:17:38:e2:19:6e:5d:ee:3f:b0:2f:a1:47:1b:e0:a1:
95:c4:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:24 2025 by rpki-client