Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: zs8yg01Jru3UGE7pMRI0FUVCoiFBBSl/S8U5FT7CPjs=
Subject key identifier: 64:AA:2F:34:18:0D:24:9E:35:CA:B7:3F:6F:EE:51:46:30:8C:D3:78
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 01988A6A3C3DC6FA2B998C58801DC73593B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0342
Signing time: Fri 08 Aug 2025 16:01:14 +0000
Manifest this update: Fri 08 Aug 2025 16:01:14 +0000
Manifest next update: Sat 09 Aug 2025 16:01:14 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: NYBTibUOqr2KrRQRrtzW1RC1hsq43JafSRkznlyC6no=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:3c:3d:c6:fa:2b:99:8c:58:80:1d:c7:35:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Aug 8 16:01:14 2025 GMT
Not After : Aug 9 16:01:14 2025 GMT
Subject: CN=64aa2f34180d249e35cab73f6fee5146308cd378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:74:07:08:ee:99:c5:4b:41:84:f1:78:25:
19:04:22:ed:9f:32:1b:b0:ec:fe:87:17:f6:b8:39:
0e:93:db:e5:4a:10:da:84:7f:47:8e:22:30:ab:04:
be:0f:35:43:f4:c9:99:94:cd:55:99:ec:58:d0:27:
41:5e:d3:c2:72:1b:15:bb:7a:9e:98:4e:97:51:f5:
0b:f5:56:e4:31:b7:f3:f3:a5:73:1f:b8:01:44:09:
76:89:bf:e1:7d:d4:c1:18:66:f9:69:57:bb:ec:45:
17:1a:21:3a:8c:63:76:49:67:22:25:ec:29:b1:8d:
57:aa:d8:c8:88:fa:3f:0e:4d:84:fc:42:6d:c2:75:
02:b0:d0:ec:ec:5c:80:bb:5c:61:d4:1f:6e:a2:db:
11:58:7a:30:4e:0d:6f:f0:e5:5b:9a:c4:2e:57:3a:
ef:b2:6f:d8:74:51:34:a9:60:db:40:d2:35:9f:12:
ce:e0:9a:fb:69:f0:f9:bb:d8:05:98:17:93:aa:ba:
29:04:29:af:4d:4e:62:5c:bd:0b:fb:49:b2:b1:6c:
e6:c3:d1:e3:69:29:01:7e:b9:24:c8:38:92:6f:d3:
d1:3f:13:5b:7a:e6:79:29:85:03:dd:e1:e6:e8:6a:
91:68:67:67:ee:96:b1:ba:59:75:c4:a2:7c:95:6e:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:2F:34:18:0D:24:9E:35:CA:B7:3F:6F:EE:51:46:30:8C:D3:78
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:e8:28:89:67:89:43:06:76:5c:80:09:0b:81:b7:65:cf:
59:4f:d5:62:b7:61:58:10:dc:4d:10:ff:95:1c:95:0d:7b:36:
da:1a:fd:f0:f7:75:73:41:7a:56:99:90:13:30:15:74:2a:77:
5c:9d:7a:1c:d0:ba:f7:7a:e4:d2:9a:54:41:1e:cd:3f:05:03:
1c:f9:a7:0a:9a:17:bf:42:ac:15:78:ec:ae:5c:f9:e5:fd:51:
13:6c:3c:a6:94:e1:3d:b7:62:7c:5b:f1:ea:14:34:ec:a3:26:
63:6c:b6:fe:e4:d3:d7:f3:7b:1a:2d:45:60:ae:09:63:28:01:
f7:f8:80:18:21:9d:1b:f1:bb:3d:c8:b5:88:4d:1e:33:4d:9d:
78:d7:4d:68:6d:a0:6a:d9:02:ca:ec:03:e5:67:df:dd:09:a0:
ff:41:1d:23:20:ff:c1:c2:89:34:53:65:dc:1c:70:5e:73:a2:
3f:86:cb:34:48:83:7a:f3:f9:19:88:fd:8b:e6:d1:c8:05:d0:
29:c2:f1:81:85:07:a0:fe:07:8a:09:35:64:74:da:3f:c8:46:
6d:aa:25:a0:73:34:45:b3:ea:20:07:76:f2:75:79:c2:74:94:
5f:df:0f:ba:1f:c2:1b:8b:e3:b6:36:04:2e:de:72:d0:4d:95:
48:a2:88:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:45 2025 by rpki-client