Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: Ub9RX3kPtJY/TGDmKRgJw47luswZVjsVTTVLKpxZLxo=
Subject key identifier: 1F:9E:89:11:3C:73:14:6F:34:1E:44:87:CF:29:6F:AF:F0:34:DB:0F
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 0197741B73C72DF75CE68FA5DEFF83ADAA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 0F0C
Signing time: Sun 15 Jun 2025 15:00:45 +0000
Manifest this update: Sun 15 Jun 2025 15:00:45 +0000
Manifest next update: Mon 16 Jun 2025 15:00:45 +0000
Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: xqnWYHXBSVZK1Yn65UmBd0JkgniUmHyibh3j6cWEgP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:73:c7:2d:f7:5c:e6:8f:a5:de:ff:83:ad:aa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Jun 15 15:00:45 2025 GMT
Not After : Jun 16 15:00:45 2025 GMT
Subject: CN=1f9e89113c73146f341e4487cf296faff034db0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:35:65:26:a3:8c:e2:1d:a8:ca:4e:fd:43:
25:38:4d:14:f7:8b:81:36:b2:f5:2b:ff:20:9f:9f:
10:5d:d2:27:4a:7e:37:67:36:5a:c7:7f:96:92:96:
95:a3:f6:6f:d4:68:15:77:9e:8f:95:47:1d:74:54:
e5:34:35:f7:9e:61:36:95:66:60:28:d4:72:74:80:
6e:16:d3:d8:0c:fb:b6:39:cd:91:a6:bd:f7:91:b8:
65:ba:6b:40:73:96:4d:84:b3:3c:b0:b4:ee:4a:52:
47:df:c1:3a:59:60:01:76:ed:c1:a8:30:46:c2:ea:
b7:50:46:f6:69:e6:38:75:1f:d5:70:ef:4d:7e:3a:
89:37:bb:c6:73:3d:58:b7:f6:36:28:a1:76:be:6e:
fc:1a:f6:84:ce:f4:14:04:d8:7b:9a:1a:95:ea:2f:
a5:73:b2:87:51:3f:90:0f:b7:eb:8f:0f:a0:a5:db:
4e:e7:c9:a5:f0:b8:aa:dd:9b:55:75:b9:d2:55:7f:
62:ca:f0:a9:26:e7:98:4a:5e:9c:a9:ee:42:6f:c6:
27:19:1b:9a:aa:f8:0e:92:a1:d4:f7:b9:49:13:d5:
e2:9b:06:5e:ab:4d:fc:58:b5:fd:07:b7:20:45:26:
c9:19:81:93:f7:84:cb:72:56:c2:44:b7:94:e2:45:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:89:11:3C:73:14:6F:34:1E:44:87:CF:29:6F:AF:F0:34:DB:0F
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:35:42:63:43:a9:3f:aa:a9:a3:cd:cc:92:7e:62:9b:67:c2:
0f:56:82:51:23:9e:43:4c:b0:b9:76:67:e0:e7:07:01:2f:c5:
cd:be:23:36:25:ed:b1:f4:d4:81:3e:e3:bd:f1:1b:e0:59:ea:
27:29:56:fa:b4:fb:f0:f7:4e:3f:54:2f:5f:64:29:9d:00:61:
fd:f0:24:00:3e:6f:fa:87:c1:87:02:57:35:82:33:a8:83:33:
7b:2e:cf:c1:c0:c8:00:75:9e:8d:c9:3c:fb:2f:34:00:73:a4:
24:a7:b2:3b:aa:d7:5a:43:ca:7d:63:d6:9a:3d:14:ec:89:bf:
71:e8:ec:67:8d:94:79:2b:db:73:d7:ad:e8:1b:04:a3:d7:1a:
8c:7d:04:d9:75:c5:42:0e:29:d1:42:b5:6e:9e:dd:d5:3a:ae:
7d:fc:75:73:84:ad:c1:04:da:ca:23:58:b5:02:ae:76:91:a3:
e7:9d:d5:c0:cf:e4:06:6a:b2:69:6c:6f:1e:98:0f:bc:33:d2:
14:89:ea:78:24:ce:d2:c9:5b:d2:52:9e:54:7e:4b:ef:62:ca:
1e:a0:04:36:81:06:fb:f1:51:ab:7c:5d:7c:f5:d6:f2:4a:5a:
fc:78:74:ea:56:69:56:51:72:94:44:4d:3b:75:56:36:1f:3b:
fb:4e:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:05:17 2025 by rpki-client