Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: fDCsPXPga1V3RaekWlcTH8EpNuNoElBSTeIPuB4QYjA=
Subject key identifier: 01:56:E7:90:F6:02:2C:E7:F4:96:E9:2B:AD:DF:71:8B:7D:A9:85:91
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01988054B886D7EEDCC724EDE7F8CB04BB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 17:01:32 +0000
Manifest this update: Wed 06 Aug 2025 17:01:32 +0000
Manifest next update: Thu 07 Aug 2025 17:01:32 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: 49mBqEXsKBWb9UwI9cIVCUsRDYD7VrXx1pyms3csD5s=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:b8:86:d7:ee:dc:c7:24:ed:e7:f8:cb:04:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Aug 6 17:01:32 2025 GMT
Not After : Aug 7 17:01:32 2025 GMT
Subject: CN=0156e790f6022ce7f496e92baddf718b7da98591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:55:56:38:1d:92:16:63:54:c7:b9:81:a6:
aa:93:44:2b:14:f9:9a:b7:78:7b:6a:8d:f7:db:85:
c7:7b:b9:d1:cb:69:be:0a:46:bd:20:3c:bf:da:65:
ba:3e:ae:0e:7e:cf:04:b0:18:ce:8d:c2:c4:03:80:
08:b7:fc:97:7f:2b:c1:e9:44:4c:35:37:65:57:90:
bd:de:ed:39:0e:88:20:95:a8:a3:8f:b6:13:3d:65:
27:c3:0c:f1:5b:45:ff:ef:1b:f2:b6:1d:5b:3a:88:
31:74:3d:fa:1d:5a:32:a6:24:16:96:fb:46:8f:53:
78:8f:2e:f2:ad:7d:ce:b1:90:90:d9:1e:fd:f5:d6:
b4:37:6a:c3:ac:07:85:c3:83:9e:e9:2e:1d:23:c8:
93:aa:0c:b6:23:db:89:c4:d3:60:8e:20:62:ca:d4:
76:6f:da:bc:2d:68:55:1d:52:cf:03:d6:2d:c4:f2:
07:19:bd:f2:2a:ef:cc:57:ee:1f:d4:91:e9:5e:10:
d9:6f:02:0b:3a:6f:f6:bd:f5:47:99:2b:d6:13:4c:
34:a5:db:f9:92:6f:2b:fb:db:d9:d7:fa:24:52:34:
85:40:ed:be:20:04:38:c4:df:27:ac:c4:20:1f:42:
cf:33:fb:5b:61:bd:0b:76:a2:cb:44:fc:b8:9d:1d:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:56:E7:90:F6:02:2C:E7:F4:96:E9:2B:AD:DF:71:8B:7D:A9:85:91
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:4b:d2:0d:16:e1:21:c7:e6:36:c0:44:8d:ad:50:fa:3e:
df:ed:47:9f:6c:7e:bd:3b:cb:38:a7:53:9a:b4:cd:8d:2f:70:
9e:69:cd:73:17:be:60:d9:34:e0:80:f4:6a:35:85:be:c1:a8:
15:0d:3f:92:a9:0e:a4:ac:ac:dc:cb:8b:32:8b:b0:a0:66:90:
55:14:0a:d2:a2:01:9e:d7:20:16:fd:47:3b:45:e4:99:ca:9b:
ce:9a:d0:b9:e6:f6:29:29:ad:2a:52:eb:c3:04:9a:20:a5:e0:
d3:55:c3:e5:5f:ed:5d:b6:76:cb:39:1e:c0:d4:f1:ba:ee:9d:
61:c7:d2:1a:98:90:3f:ce:d9:2f:10:aa:17:d7:55:3a:d1:4b:
0a:4a:e2:60:c2:7d:2e:b7:d3:9c:0b:75:59:30:29:88:3e:93:
bf:f3:19:e1:af:ba:07:d7:63:ef:d1:81:b7:12:03:9e:af:11:
6c:d4:f5:fb:97:52:4e:76:6c:4a:16:dc:07:20:16:24:b9:7c:
27:40:5a:39:bb:d2:2c:4e:97:8b:16:cf:d6:33:de:3c:e9:e6:
cb:3e:0a:e7:6e:1b:a2:e5:ea:a4:6e:c5:7f:c6:20:ec:fc:ff:
81:1b:79:15:9d:a6:8b:7f:49:22:2c:d1:ef:e0:fa:ba:1a:3d:
55:db:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:37 2025 by rpki-client