Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: Vfi5rAEZpHHr/1Q+X25lfXpSCsiyX0hGNW68ueKD8E0=
Subject key identifier: A1:C0:23:3A:9C:A3:3F:27:16:41:C4:96:89:6B:D3:F3:C8:80:28:47
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019770758B1AA2EBFE1650C8F8939A5D909F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 02B0
Signing time: Sat 14 Jun 2025 22:00:40 +0000
Manifest this update: Sat 14 Jun 2025 22:00:40 +0000
Manifest next update: Sun 15 Jun 2025 22:00:40 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: WBd4FarDu7ZvG1nMApIaEJX/Q1WZ2NbizZHn9zOJdh4=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:8b:1a:a2:eb:fe:16:50:c8:f8:93:9a:5d:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Jun 14 22:00:40 2025 GMT
Not After : Jun 15 22:00:40 2025 GMT
Subject: CN=a1c0233a9ca33f271641c496896bd3f3c8802847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:9c:cd:d2:08:e2:89:53:e1:61:0e:45:f2:
08:86:c9:e3:1e:b4:9a:27:2a:49:79:7f:87:44:60:
bd:f8:b1:6d:18:f5:38:f4:ed:85:62:8c:cc:62:03:
09:58:2d:62:3b:13:5d:08:a7:27:c1:a5:77:6b:36:
e9:11:23:4d:ce:77:d8:60:c8:9f:6a:65:68:ec:6c:
0d:22:b8:cb:08:e2:9c:01:2d:72:45:3e:72:e4:7c:
75:31:87:12:67:9b:60:4a:6b:23:61:38:89:cf:97:
4f:1f:86:47:0e:92:c7:de:1d:67:c4:fd:8b:79:4d:
09:11:e8:b7:28:bb:2b:ea:43:e8:db:b0:c8:8d:fd:
c8:2e:fc:75:5a:44:ec:32:a6:ad:72:16:12:e3:49:
25:56:59:56:4c:6b:86:4c:c1:92:20:85:29:57:dd:
6e:2c:2d:f4:32:fa:71:d3:c8:1e:73:32:d4:56:06:
bc:41:eb:76:cd:6b:05:4d:f9:57:df:ba:04:13:16:
9c:c8:58:d0:91:50:0f:9d:e1:80:8d:45:bf:2e:57:
df:c8:2d:d7:23:9e:98:6a:27:d3:76:2c:64:81:d2:
b5:56:e2:33:f1:b5:77:64:f2:a2:21:1e:61:52:25:
96:ef:98:9b:65:0a:fe:1b:fd:d6:ea:22:a9:bb:7d:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:23:3A:9C:A3:3F:27:16:41:C4:96:89:6B:D3:F3:C8:80:28:47
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:ac:2a:fc:f7:d8:0a:39:58:28:c7:89:b2:d5:e8:33:f7:
83:72:72:a2:73:0f:f6:38:06:c4:9d:ce:19:2a:57:71:e6:3f:
54:88:1a:b1:82:32:f1:a2:1e:6b:49:fd:ad:63:ac:3a:91:a9:
12:4f:38:50:0c:00:57:05:49:2d:66:6c:97:a1:76:12:0f:c1:
20:c9:02:8f:65:c7:98:5a:b4:72:4c:9b:d2:cd:d7:50:36:75:
7d:7f:6a:c6:62:11:64:51:ed:bf:65:57:81:1e:1b:b6:b9:d3:
dc:e2:74:f5:8d:92:df:88:51:ac:79:b5:36:7c:84:55:aa:58:
ad:bf:04:53:8d:98:ee:70:cf:af:f2:b3:51:02:9d:56:0a:29:
fb:4d:dd:46:67:7c:60:c8:18:c1:1a:ed:1a:c0:98:20:ec:44:
e9:ba:f1:25:fe:94:1e:93:84:d4:dc:ac:5c:3b:9d:c1:7b:bb:
e6:5b:c7:84:b8:f3:7f:0e:7d:d3:e9:c2:02:ac:98:1b:de:95:
33:38:6f:8a:e7:7d:b0:2b:3f:05:ca:c1:7e:0e:83:b1:fb:d3:
b1:bb:0c:d6:1e:c1:04:ae:2a:4b:35:ef:5c:f0:80:4d:69:28:
dd:b2:f8:87:e4:2c:31:8e:0d:30:be:bf:84:69:c0:f0:de:82:
61:a7:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:31 2025 by rpki-client