Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: FjylJ0si8JxjFiMpRor9YIGT1fSznoqlO1Jd3noPsHY=
Subject key identifier: 85:9F:FA:A0:21:9D:07:59:3B:F5:DF:7A:F1:2C:3F:9A:83:A9:8D:8E
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 01976997DFD2030AC60A87CAC947B6511BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0197
Signing time: Fri 13 Jun 2025 14:00:50 +0000
Manifest this update: Fri 13 Jun 2025 14:00:50 +0000
Manifest next update: Sat 14 Jun 2025 14:00:50 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: U/J7HEXCEzmUO/HBHl3M61yRrUlNvypfKhjy+7zKMmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:df:d2:03:0a:c6:0a:87:ca:c9:47:b6:51:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Jun 13 14:00:50 2025 GMT
Not After : Jun 14 14:00:50 2025 GMT
Subject: CN=859ffaa0219d07593bf5df7af12c3f9a83a98d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:95:e3:76:cd:c4:ba:85:7d:21:11:20:0b:
55:bb:94:a1:3e:56:b5:a3:3e:28:ad:96:12:a6:cd:
21:1a:fb:e1:2f:5b:15:ba:23:d1:aa:c1:c5:4c:0b:
a6:94:35:78:59:4a:6d:04:2c:1c:a5:28:1c:ad:96:
63:bf:10:7f:35:71:98:fd:d5:f5:6d:61:a7:1a:aa:
54:29:68:d6:75:69:19:36:eb:17:6d:f5:4b:82:06:
18:0d:4e:f7:b0:e6:68:9b:cd:11:d6:d5:f3:05:26:
21:3e:ee:86:59:f1:70:60:88:f7:2e:ce:77:c5:22:
5b:d2:99:8f:09:7e:b4:a0:32:27:fa:17:ef:1b:a2:
d6:da:13:50:2a:62:e4:56:22:93:ff:47:90:2c:25:
a2:3a:46:c5:5d:68:da:bb:42:9b:89:29:1f:94:6f:
b7:70:0a:8e:8d:da:fc:14:7a:a8:3b:08:e7:b4:97:
e6:6b:7d:2c:18:fc:49:bc:0a:c3:ec:05:20:16:ba:
88:0a:cb:43:e0:bf:78:ad:7a:f3:57:10:dc:e7:7e:
81:eb:64:02:ab:d0:b5:b4:00:10:b4:26:98:86:5f:
30:9c:d5:d2:49:3c:b4:cb:a7:9c:d6:b1:c9:0f:88:
24:28:dc:04:3e:0e:6a:c6:a7:e0:b4:9b:23:19:11:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:FA:A0:21:9D:07:59:3B:F5:DF:7A:F1:2C:3F:9A:83:A9:8D:8E
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7d:f0:8f:4d:16:fd:be:4a:de:95:92:df:9e:29:1c:23:4a:
07:06:58:52:95:69:4c:4e:4c:66:72:de:65:5a:85:1e:f2:6d:
5d:73:79:76:27:bc:21:1b:a2:b1:5c:3a:9c:e3:31:57:43:57:
df:25:14:26:81:3f:7f:40:58:70:31:2f:4e:d4:b7:c0:c1:21:
7f:32:a1:ba:eb:4d:5e:5d:0c:b7:d8:a0:17:ae:23:59:36:99:
87:c4:c4:84:64:2f:83:f0:f1:76:eb:0c:09:d1:f4:86:1a:94:
18:10:b8:68:6a:3c:17:ba:aa:fd:91:4d:d1:5f:0b:94:29:79:
b7:49:6f:91:62:23:6f:f2:d0:12:69:1b:55:db:0c:ca:22:d5:
46:57:cf:6f:c1:ee:64:e3:90:bb:87:48:1b:60:28:2f:32:33:
1d:e6:59:df:73:e7:83:77:e3:99:18:79:87:ca:49:d2:c4:77:
5f:62:b1:cf:70:54:a5:41:d4:c4:f9:b5:e2:da:be:f1:23:66:
c0:2c:8b:b5:68:98:57:c2:90:a6:0b:d3:e2:10:80:ef:fa:b2:
22:19:5d:91:ba:f5:c0:eb:92:b0:6e:a6:22:13:dc:8d:21:30:
97:fe:6e:53:aa:02:6f:c5:6c:6a:a0:20:6c:2f:ee:06:74:ca:
e6:2f:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:30 2025 by rpki-client