Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: WhLAelQgAkZ//p+NXymW6TRFms2R+/yO2Z5Z5Yk97n0=
Subject key identifier: E7:5B:B9:F8:99:EA:DF:BF:4B:25:9C:EB:3A:E0:5B:DD:2E:B5:0B:0D
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019771887F0FA15C60CCA4AC4E7E5ACFFE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 2E
Signing time: Sun 15 Jun 2025 03:01:00 +0000
Manifest this update: Sun 15 Jun 2025 03:01:00 +0000
Manifest next update: Mon 16 Jun 2025 03:01:00 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: i8kNzhs9hr2zc1YcyvwiimwesF/pVIvrZvFcx3IKm6s=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:7f:0f:a1:5c:60:cc:a4:ac:4e:7e:5a:cf:fe:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Jun 15 03:01:00 2025 GMT
Not After : Jun 16 03:01:00 2025 GMT
Subject: CN=e75bb9f899eadfbf4b259ceb3ae05bdd2eb50b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:4a:cf:80:83:b4:cd:04:2f:e5:b0:18:f5:
0e:5a:50:28:6f:84:ca:6f:ce:91:db:19:bd:93:eb:
92:a8:a8:c5:13:02:41:e0:5c:fd:fc:0d:fa:ed:3d:
a5:87:c3:34:58:07:11:26:34:e8:c0:34:95:35:ed:
ed:62:cd:3a:4f:2b:ee:61:f5:95:07:ec:a8:98:6f:
c8:89:70:76:c2:6e:79:55:ed:e0:c2:d9:0e:eb:53:
8c:85:9b:8f:02:0f:89:2e:a2:c4:61:a8:16:d5:d2:
f6:3c:e2:be:d1:91:e5:8d:5e:aa:55:5a:5a:40:dd:
61:6a:c6:62:a4:b6:cf:c2:a4:da:a7:3a:26:14:66:
aa:a8:86:7c:44:f3:ac:43:24:18:53:8e:52:4e:39:
7e:aa:f5:a8:42:08:90:cf:bd:ed:1e:1c:c5:0d:6c:
57:c1:b9:42:a1:29:a5:28:28:bd:e4:11:51:3c:bd:
44:05:be:61:ea:48:5a:05:41:7c:1b:9a:95:71:da:
fb:74:06:37:83:2a:62:b1:bb:e7:9d:0f:cf:bc:db:
66:8e:62:f0:53:29:93:74:19:9d:2a:aa:a8:e7:df:
72:e5:af:e2:ab:2c:3f:76:70:8e:28:99:e2:d5:50:
1c:1e:54:e3:8c:e1:1d:ab:39:df:1d:7d:67:ba:dc:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:B9:F8:99:EA:DF:BF:4B:25:9C:EB:3A:E0:5B:DD:2E:B5:0B:0D
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1f:0c:44:7d:84:e5:66:c2:c8:4e:07:90:28:28:bc:00:28:
7a:3f:17:86:3e:9d:41:24:3f:6e:c2:69:64:1f:75:36:bc:d1:
a1:30:ce:94:8d:6e:c9:04:8f:af:23:d9:fe:25:42:00:87:29:
9c:43:6a:85:66:d2:1e:dc:90:2f:80:a0:7c:9a:33:40:75:6f:
2c:ad:7b:7c:d1:eb:3b:3e:85:8e:c3:42:d3:69:ce:24:a4:be:
30:83:d4:c6:7f:5b:50:8a:6e:c6:5b:74:43:66:37:3d:4c:0d:
b0:2f:47:55:86:13:8f:f8:9c:84:c8:47:40:9f:99:84:3e:2f:
3d:a2:2a:0c:49:4f:e7:c3:c4:9f:08:17:d2:14:5a:70:36:62:
33:12:7b:73:b8:8e:39:7c:98:e0:76:be:aa:48:b9:14:d3:e6:
97:21:6b:79:4f:12:5a:20:dc:48:61:92:6a:08:72:c7:f0:a5:
a4:e8:2f:51:8c:06:5d:c9:f2:58:d4:2d:c2:4c:61:65:bb:32:
64:ee:af:26:08:a1:a9:37:fb:85:e9:fe:76:ad:da:55:ac:0a:
8c:f2:18:f5:18:d7:b1:28:f5:d7:c6:50:0e:3c:bb:c4:b7:a5:
d3:8f:5f:e4:45:d8:95:70:39:43:da:a1:10:99:8d:23:bf:2e:
7e:6c:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:21 2025 by rpki-client