Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: 6mGaidXLNpNPnHyQ9++foWjKWhFmf0RDJz5YoAp/Rd0=
Subject key identifier: C6:4D:85:91:5E:0B:5D:6C:F7:C7:5F:3E:43:5E:A6:C9:19:7C:24:4B
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01976929A06AB6783062E7CFD983CEF57480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0D8A
Signing time: Fri 13 Jun 2025 12:00:25 +0000
Manifest this update: Fri 13 Jun 2025 12:00:25 +0000
Manifest next update: Sat 14 Jun 2025 12:00:25 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: 7/3u158XK7sXt7Vq+zdU7MQCQ9x5qnuBhfJixFfGB+M=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a0:6a:b6:78:30:62:e7:cf:d9:83:ce:f5:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jun 13 12:00:25 2025 GMT
Not After : Jun 14 12:00:25 2025 GMT
Subject: CN=c64d85915e0b5d6cf7c75f3e435ea6c9197c244b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:0c:0e:e6:8d:e8:27:0e:ba:71:6e:3e:5c:
3a:c0:f9:01:ac:84:ac:24:f0:19:f5:f6:da:98:1c:
d5:f1:56:22:d2:2b:1c:44:c5:97:ff:73:97:9b:14:
5c:83:3d:b6:45:36:aa:dd:84:3c:68:eb:03:d3:44:
39:7d:71:3f:79:3d:ff:a8:ac:bf:eb:f7:91:5c:86:
9f:04:91:dc:eb:65:83:c5:1c:fa:0a:3a:08:be:76:
80:af:0e:c1:95:ef:dc:21:b8:de:a9:f6:6d:27:30:
06:cc:64:10:54:8e:ac:22:ea:40:1d:10:a3:4c:9d:
39:be:ad:ef:a3:85:15:5c:6c:ca:37:0b:58:8a:10:
63:b5:f8:70:6b:f4:04:72:e5:c1:fe:7d:79:cb:b8:
95:45:67:c9:b5:2c:20:9c:80:b3:be:5a:00:fa:c3:
33:49:cd:23:e7:74:24:15:06:de:98:58:97:8b:8f:
b4:92:5f:76:b3:43:1a:52:1e:14:7e:24:65:16:2e:
6d:90:8f:cd:d1:2e:0b:40:6a:8a:14:7d:9f:60:e5:
1c:df:e4:f0:03:f6:c3:9a:13:b8:95:35:02:bc:a7:
cd:ba:80:3b:be:ec:c4:3d:c3:b9:78:66:86:65:6a:
c0:b6:96:6a:1c:02:1f:1b:8b:e3:1c:ed:01:31:29:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:85:91:5E:0B:5D:6C:F7:C7:5F:3E:43:5E:A6:C9:19:7C:24:4B
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:6b:ae:5f:bf:8d:91:9f:d8:d2:45:f8:13:ad:f1:a6:16:
c0:96:7d:3c:3b:69:6c:a6:f3:d3:b3:93:a8:93:06:58:53:84:
a0:fd:98:1a:fe:94:ef:84:b9:80:8f:de:ff:1d:b7:90:0f:2d:
5c:6b:6b:f6:42:db:ee:69:02:48:71:60:c1:49:c3:1e:81:a5:
d3:b0:5e:0b:ca:14:b2:02:cd:e1:cb:cf:12:5b:1f:17:b9:0c:
e5:98:78:60:28:df:42:a7:25:46:38:4d:80:45:4a:e4:42:1a:
d7:f0:39:b9:ca:b7:9d:f1:7d:6b:61:f2:98:80:7a:25:14:f6:
1b:b0:30:55:7c:6e:f3:65:59:df:0e:87:35:0e:9d:d5:ac:f1:
03:47:00:9a:80:19:e8:5d:ba:c0:82:a5:93:32:63:6c:65:14:
8e:06:e6:90:17:dd:98:30:ef:fa:cd:c4:a6:0d:b2:5a:5b:4e:
1b:bb:d2:e7:ec:23:cf:14:e8:07:45:1e:19:5e:b5:ac:35:69:
f8:ef:7d:14:70:7b:26:4f:35:93:5b:a9:5f:86:ea:e7:b3:10:
5c:80:59:15:40:c0:5a:48:b1:de:c9:da:01:c8:ca:0d:1b:88:
ed:ba:9a:1a:33:fc:48:d6:99:e0:8b:7e:6a:db:95:82:c0:81:
88:e5:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:45:51 2025 by rpki-client