Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: bXAS9JGV5mjE2RkLNPW6Nj2RvkxE+Po9Gyp2eI334Og=
Subject key identifier: 4D:33:F3:0A:B3:C7:0F:A2:80:A5:09:77:83:E4:9C:3D:79:74:36:F3
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 0197684E608568F2653306F21027C8A2FD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 08:00:56 +0000
Manifest this update: Fri 13 Jun 2025 08:00:56 +0000
Manifest next update: Sat 14 Jun 2025 08:00:56 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: OG509vous2ZhY25QhabbrlsPrfNgRZHxe7xwlLoTkbI=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:60:85:68:f2:65:33:06:f2:10:27:c8:a2:fd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jun 13 08:00:56 2025 GMT
Not After : Jun 14 08:00:56 2025 GMT
Subject: CN=4d33f30ab3c70fa280a5097783e49c3d797436f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:3c:c2:f9:6e:8c:58:d4:c5:24:2e:97:8f:
99:f0:7e:81:58:f2:01:fb:40:f8:d2:3c:40:11:ab:
98:5d:3f:32:70:ba:42:8f:5f:ce:1c:48:10:48:c2:
29:4e:e4:78:20:be:e0:cf:dc:76:ae:a6:53:14:18:
24:12:42:19:ba:6f:f3:2b:6d:61:58:8d:c8:85:af:
c4:ba:ca:1e:1a:95:5e:54:2b:f5:07:89:20:7a:d8:
dc:8e:db:11:f1:c0:15:05:9d:47:e3:41:8c:b9:9f:
03:c9:30:93:1b:de:87:df:71:4f:ff:5b:88:3a:9e:
5e:36:55:21:00:5c:72:e9:51:67:5b:85:c0:2f:6a:
8c:d1:d7:6a:ae:10:32:34:5d:60:7e:40:fb:30:a0:
5a:6f:90:3a:bb:01:85:a0:22:ac:c2:db:0d:8a:10:
10:2d:ad:8d:3a:12:61:bb:2f:64:0b:b4:ec:cd:3d:
b4:07:75:4f:95:35:ca:f3:1a:fc:84:95:dd:ca:5e:
75:89:d8:20:b2:6e:3d:cd:21:b1:ff:b5:89:21:57:
bb:d1:54:b4:83:55:07:dc:e3:51:6d:38:5d:53:85:
31:1d:17:7a:c8:19:8e:d0:c8:09:93:d2:65:70:cb:
2c:0a:0f:e1:14:be:c4:2e:89:72:ac:a0:9f:41:e5:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:33:F3:0A:B3:C7:0F:A2:80:A5:09:77:83:E4:9C:3D:79:74:36:F3
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:b0:46:99:53:eb:d5:dd:82:95:95:44:f0:99:27:f3:6a:
af:d3:5d:b3:ef:a4:f1:3b:e5:63:70:df:a7:bb:7f:9c:57:f2:
4f:cd:0b:e7:a5:0a:99:cc:a1:14:fc:3c:4e:e9:58:d8:1c:70:
bf:27:cb:84:07:5c:73:d8:3c:5d:83:68:ac:dc:2f:9a:64:30:
af:7c:b0:7a:ca:d6:e4:ee:51:cf:87:44:9a:9f:c8:e2:dd:0c:
5e:d3:32:06:f9:9c:53:db:4a:0a:cf:19:31:b4:08:39:26:af:
82:9a:42:0e:d2:37:3e:35:39:04:1f:ef:df:d6:95:72:b6:4e:
df:00:c0:d3:11:6c:c7:fe:64:7b:fd:11:e2:38:53:f7:43:30:
30:93:46:d4:9e:63:b8:0c:92:80:ed:e8:cb:4a:fa:e0:c4:74:
0a:09:bb:39:0c:b5:20:e1:c3:58:c8:93:22:01:24:61:62:02:
6e:75:55:19:2c:0a:45:ff:7e:ab:b4:43:fe:c1:15:d5:2d:d2:
ef:1a:5b:c5:09:c6:ab:57:3f:af:81:7e:c7:7e:76:23:25:d5:
31:31:25:d7:c7:e7:fe:d0:72:f0:77:28:eb:14:f5:e0:d3:9d:
d6:e7:ec:fb:f8:fd:8c:6e:63:40:6c:b8:32:16:73:5c:ab:be:
bf:f3:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:31 2025 by rpki-client