Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: IzNfjAK3VBIxNNSfToJFeHJstds5vlUT14JJDjRwGb8=
Subject key identifier: 38:6E:21:D6:39:EE:76:08:02:F1:99:96:58:00:40:1C:54:AF:7B:3D
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019769CF395086E5E158959476AF3CCEA64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:01:17 +0000
Manifest this update: Fri 13 Jun 2025 15:01:17 +0000
Manifest next update: Sat 14 Jun 2025 15:01:17 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: FGI/3fYZfuVgqcqjcXOOR/4/2td0M6RQSMrsmJ/Xovc=)
2: hbj2DwbTO4-tmysNHMyxl2vxyPM.roa (hash: W6g4GPDJbcaX24i4+eflWzczpsq5sBQlzCM+vJ6ScIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:39:50:86:e5:e1:58:95:94:76:af:3c:ce:a6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Jun 13 15:01:17 2025 GMT
Not After : Jun 14 15:01:17 2025 GMT
Subject: CN=386e21d639ee760802f199965800401c54af7b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:37:7b:ee:fd:ce:cb:41:5d:ca:38:33:85:
59:a7:91:67:52:f2:4d:cc:b1:9f:ab:7f:e4:1e:d7:
1b:3f:3d:ed:43:31:35:e0:42:1e:45:ba:ff:22:75:
ac:c0:0f:94:cf:1e:5a:d7:ec:5a:1c:c3:27:a4:e3:
01:03:f2:69:cb:43:35:df:a2:14:6e:c5:27:23:cd:
5a:69:2c:dd:b6:f7:ea:17:0c:5a:9d:d2:95:b7:f9:
24:5e:ab:c7:e9:cb:26:4d:4d:5e:48:25:85:9d:1a:
79:64:4c:b9:29:74:7e:1b:cd:96:ed:3b:db:d7:c3:
8d:ac:66:f9:a6:83:b3:d3:6a:0f:12:3d:dc:36:6c:
bd:97:b3:31:97:15:6b:ec:6f:5f:a4:83:dd:be:f2:
a3:6d:2e:2f:9d:8c:8d:a9:16:13:3b:13:e4:00:91:
47:c4:f5:bc:28:a4:6d:b0:35:c0:d6:f6:e5:2a:b6:
b4:41:ff:99:4c:4d:30:9d:d8:94:6e:a6:66:0e:85:
a1:ef:95:9c:df:6c:16:40:f6:d6:16:7a:fd:cd:a3:
24:e2:e6:25:a6:2c:29:51:ea:23:80:6e:be:52:31:
2f:49:35:5f:54:9f:db:01:44:c4:ff:f8:0f:6a:fa:
f0:22:0f:ce:fa:04:c0:87:d7:7d:17:72:54:94:c5:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:21:D6:39:EE:76:08:02:F1:99:96:58:00:40:1C:54:AF:7B:3D
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d2:87:01:ee:0a:c2:35:7b:d8:5d:e4:20:18:02:fb:74:5d:
ec:c8:69:2f:79:c9:6b:6d:b3:6a:c5:67:d1:89:29:84:1b:d2:
cf:56:59:e5:29:7a:a5:af:4d:f1:59:64:5a:9f:ac:0f:40:56:
9a:8b:26:d9:dd:9e:8b:3b:4c:1d:92:10:d5:c3:a0:0f:22:ea:
73:a8:1a:bc:21:30:59:97:bf:ab:aa:77:83:4c:f6:ab:22:1d:
5c:d6:c1:05:f8:0c:67:3e:d4:13:28:f3:49:ad:0f:5b:16:62:
bf:11:d1:e1:5f:07:da:7a:60:1e:1a:14:3d:0d:9c:a2:39:2e:
c4:1c:50:df:72:21:01:86:37:db:bd:6b:a2:21:6a:76:5d:77:
18:fd:d1:42:d1:0a:5d:fc:02:4e:32:db:1d:4b:cd:45:32:4e:
00:c6:3a:14:2f:a6:b5:86:59:9b:10:1b:87:f9:84:97:7f:df:
8e:1a:0c:6d:d3:a1:15:c3:bc:22:2c:b9:8c:c2:0a:83:33:a9:
f8:fa:59:52:c7:81:e9:91:fd:74:50:eb:e6:7e:e9:d3:b5:30:
93:97:ca:d2:e3:44:0d:9f:57:f3:8d:2c:24:ba:c3:aa:7b:68:
13:10:6a:0c:fa:d7:23:1b:84:d7:a7:5c:da:a3:44:2f:ab:6f:
5c:0f:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:44 2025 by rpki-client