Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: bFQl8ikLTTTkjBTqlpjLbuOvqwoqq+LXyf2poT9NloM=
Subject key identifier: 87:3F:17:AC:F3:28:8A:BC:44:0B:FE:C0:58:94:4E:A9:A4:E4:70:78
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01977941B60A54DBACAD258D87CC4C9D684C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 15:00:38 +0000
Manifest this update: Mon 16 Jun 2025 15:00:38 +0000
Manifest next update: Tue 17 Jun 2025 15:00:38 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: UaKjlR8vvd0DbZxOIsApO8XRaIXLAXdO9S2Ea95KxFo=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:b6:0a:54:db:ac:ad:25:8d:87:cc:4c:9d:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Jun 16 15:00:38 2025 GMT
Not After : Jun 17 15:00:38 2025 GMT
Subject: CN=873f17acf3288abc440bfec058944ea9a4e47078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:5e:95:65:c8:67:29:57:00:a6:1e:ae:a5:
4e:9d:5e:2f:3c:21:c5:ff:77:5b:ca:9d:2a:bb:6a:
f2:5e:3a:e0:35:4d:c6:17:50:61:c2:3b:d4:72:db:
31:bb:b2:6e:6c:63:62:87:db:14:54:9a:56:f9:39:
27:ea:39:1d:c3:1c:ef:a3:0d:b8:ce:54:8c:a1:b4:
a8:52:47:48:73:c1:11:39:67:ca:6d:31:ae:e8:25:
44:df:7d:d0:06:8d:7d:df:b8:98:5c:92:17:4e:58:
10:08:b0:b8:6f:23:7d:6e:83:83:4b:19:b5:c5:d9:
0b:35:bf:32:09:e5:ab:b2:0c:1e:23:2c:85:de:e0:
16:d8:97:60:ff:6d:1b:06:9d:8e:53:d1:00:8b:a1:
b7:e2:05:4b:04:0e:d5:96:1f:41:25:fa:22:7c:65:
96:02:d7:61:be:28:13:82:f6:04:bb:78:67:e6:34:
b5:74:ae:95:b2:fa:e2:86:a6:5b:00:b3:f3:14:27:
ea:15:21:c0:92:91:85:3d:6a:0f:b1:b5:24:34:f3:
98:09:c9:69:82:a0:59:82:3a:d8:0a:d1:ad:0b:af:
a4:27:fa:ff:d1:ea:8b:70:54:02:3d:29:c2:43:d7:
9f:02:e7:42:7b:73:fd:6c:f7:95:32:41:0e:32:06:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:17:AC:F3:28:8A:BC:44:0B:FE:C0:58:94:4E:A9:A4:E4:70:78
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c5:48:94:c5:35:c2:ee:55:ab:a7:75:76:24:53:44:76:4c:
fa:63:6a:7e:26:2d:c9:af:bc:f0:02:88:50:9d:2a:fb:c5:34:
51:09:d3:b5:19:66:de:6f:4c:62:68:c3:84:ce:05:75:a5:2d:
22:09:0d:ce:5c:33:4c:c8:11:df:2f:da:75:c0:68:8e:99:6b:
21:c9:10:e6:0e:d1:89:e3:65:ce:2f:a4:c2:a9:b5:c2:a3:fc:
73:4e:ba:87:e3:3e:da:32:6f:ed:21:89:18:5a:c4:f8:56:b5:
bf:fe:3f:ad:41:1b:a3:66:20:fc:7f:fa:65:6d:eb:ac:de:cf:
b9:fe:a1:15:4a:46:30:51:31:fb:a6:a4:32:94:bd:43:79:be:
a3:8b:b1:9c:c2:41:97:4c:90:24:fa:aa:df:f5:5e:da:06:cd:
a3:c8:e8:85:5d:00:b5:cb:b7:18:40:e1:8e:10:c0:d1:51:5c:
59:6f:2c:3a:6f:c8:c4:ec:bf:1c:fa:5a:33:d9:ed:07:bc:2f:
e7:c4:80:93:fd:c3:31:23:9e:0a:d5:e6:6d:2e:22:03:41:69:
80:1a:92:93:63:45:ea:f3:47:1c:00:33:00:25:43:4e:09:dc:
0c:0a:10:24:94:1f:9b:aa:8b:a6:be:e6:09:d5:22:e5:22:9d:
c2:ae:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:18:14 2025 by rpki-client