Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: g2TFWb7UmuZ/KGmknwufYds3631KwL2lRJef8rkpDaA=
Subject key identifier: 42:C6:98:1A:78:38:C2:E7:88:24:78:8C:8A:1D:74:60:8F:03:44:5D
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 01977E9F67F9A4F2EF41013082D757CEBC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 046D
Signing time: Tue 17 Jun 2025 16:01:05 +0000
Manifest this update: Tue 17 Jun 2025 16:01:05 +0000
Manifest next update: Wed 18 Jun 2025 16:01:05 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: ygioU4Ch8YxjrkbvX3PhqW4zYBFa59UMFgrH+dD6yYk=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:67:f9:a4:f2:ef:41:01:30:82:d7:57:ce:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Jun 17 16:01:05 2025 GMT
Not After : Jun 18 16:01:05 2025 GMT
Subject: CN=42c6981a7838c2e78824788c8a1d74608f03445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:5f:cd:92:f1:1c:0b:39:c3:f6:5e:ca:87:
9b:f3:f2:8e:ce:b4:84:ad:59:32:22:e8:0c:ee:94:
ab:61:f6:34:14:03:cd:5c:7e:66:53:b6:4f:9f:fa:
a8:fa:2d:18:24:0a:b4:18:b0:4c:f2:37:5d:1d:f7:
6c:b0:42:81:5d:e3:64:78:af:13:b4:c1:07:ad:eb:
2c:e0:5c:22:69:0e:c0:21:a1:4a:73:ce:84:6f:f6:
71:61:3b:eb:ca:aa:cd:cc:ff:89:5b:10:80:4a:e8:
f6:17:c7:e6:50:91:a2:9a:a7:49:4a:51:69:c6:de:
fa:b3:79:e0:96:ac:da:33:ae:72:a7:ed:41:6f:2b:
bb:3b:d7:4d:9f:b3:d0:c3:70:21:d0:d1:ec:7c:2f:
da:b9:5c:e1:c0:ea:eb:a2:75:fc:92:dd:75:6c:05:
e2:3e:16:5d:5b:86:d1:06:42:aa:9d:cf:7e:52:48:
fc:a4:12:b7:83:d3:b0:4b:a4:56:f9:4b:05:5b:11:
db:70:e0:f9:d8:d5:19:c6:ea:b9:8c:b5:3a:d0:d8:
dc:c7:5e:f3:56:8c:2d:09:ac:c3:cf:39:0e:a5:81:
a9:73:85:88:5f:1e:32:34:c7:13:25:17:91:bc:81:
8b:90:aa:dc:19:cc:8b:ed:86:0a:61:7e:6d:40:09:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:98:1A:78:38:C2:E7:88:24:78:8C:8A:1D:74:60:8F:03:44:5D
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3d:e9:66:7e:a3:fa:df:21:d1:d3:f6:a9:2a:dd:e2:b1:05:
56:89:4b:31:b5:8c:2b:2e:47:14:2c:23:82:ba:03:f3:ec:0e:
80:ef:9e:a5:22:2e:8f:2f:62:ce:7c:d9:83:bc:f7:c3:11:b4:
cb:d8:6d:86:d6:c2:40:7a:9e:88:09:ab:14:a0:1b:ba:0f:fe:
18:34:07:1a:39:08:be:85:c8:2e:9a:e1:ef:78:0b:12:02:c1:
a4:89:2a:d4:73:11:d9:3c:fd:3a:dc:42:03:1c:66:6c:ac:b9:
d8:bc:1d:0c:b9:69:cd:66:f0:6b:26:bc:fb:b9:32:f0:88:35:
e4:ac:a4:b2:8d:41:2e:2d:6a:87:af:39:cd:89:56:2f:4c:d4:
fc:c6:a2:b7:9c:d0:36:e1:0a:c8:cd:7c:e3:35:0a:62:3c:50:
68:00:bf:a1:be:54:ca:a5:96:8f:6d:9b:20:3a:15:31:bf:fd:
29:c6:0a:25:40:38:01:49:ea:94:20:fe:85:49:98:d3:7f:33:
4b:6d:8f:ef:13:54:6e:7c:8e:00:9b:44:1a:cb:7f:16:ef:31:
5d:20:22:bf:db:6e:05:2e:e2:bc:38:88:8f:4d:21:95:ab:ec:
7a:b9:db:18:92:b0:77:67:42:27:30:04:cf:39:96:b3:0c:cd:
fe:80:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:19:21 2025 by rpki-client