Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: Z4tgNW2J5nmla3gyM0cwgL2OfRc5ha7mRWYQHWmX2sE=
Subject key identifier: 3B:53:FF:72:BB:16:22:99:42:42:F9:70:34:A3:9D:71:CE:C8:47:52
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 019673E6B29408CEF7E12752FC3AA1AE8968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 0863
Signing time: Sat 26 Apr 2025 21:00:20 +0000
Manifest this update: Sat 26 Apr 2025 21:00:20 +0000
Manifest next update: Sun 27 Apr 2025 21:00:20 +0000
Files and hashes: 1: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: FbVXhNB83eARwtXk3SQZJY3TUc61f8pEC0hjZYB061k=)
2: ptCjyawSJ9frfP9fH_ikMswCnsI.roa (hash: qlAjQ7L6msxhMlwj1dEaHE32m8HH4N1buR0Bga+2/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:b2:94:08:ce:f7:e1:27:52:fc:3a:a1:ae:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Apr 26 21:00:20 2025 GMT
Not After : Apr 27 21:00:20 2025 GMT
Subject: CN=3b53ff72bb1622994242f97034a39d71cec84752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:61:29:d1:83:35:2b:03:59:62:9c:77:a5:
ea:9f:91:52:a5:9b:2d:3b:2f:1c:26:2b:55:85:46:
ec:92:14:0a:79:89:be:4a:f4:f3:47:2b:1e:75:df:
91:45:22:8c:89:17:91:1d:f5:cf:75:fa:81:92:ef:
f6:9e:b9:b4:85:7f:f7:e3:21:77:99:5b:78:f0:0d:
bc:eb:51:62:93:1d:49:d0:36:49:6c:88:4f:70:aa:
f3:b4:1c:1c:61:53:d7:9f:ff:7d:49:60:02:c1:22:
ab:af:3a:8b:30:63:6c:85:d7:c2:1e:51:21:3b:9d:
e9:c4:fe:87:d4:e3:72:c2:3f:9c:81:48:aa:ed:94:
27:67:ef:1c:6a:0a:1b:47:02:82:19:78:b9:a8:d8:
ca:5d:33:25:87:8d:06:4f:31:b5:91:4e:5d:cb:85:
13:4e:b0:86:cd:cc:b7:fe:8c:78:cf:d0:40:e8:08:
e8:d6:b4:ba:38:50:e6:2d:74:3b:b9:cb:de:16:c3:
cf:1a:20:b7:29:fb:b6:d6:d9:16:ea:d6:a5:89:be:
95:05:59:83:3e:ab:13:86:6b:1b:fe:7e:72:10:09:
fc:03:d2:e1:ba:1f:82:b4:db:88:ae:58:9c:12:83:
32:8a:c5:0f:b8:73:19:bd:b2:8f:6e:cc:0a:82:4d:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:FF:72:BB:16:22:99:42:42:F9:70:34:A3:9D:71:CE:C8:47:52
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:8d:7f:6f:29:1c:12:39:f8:b2:d8:b8:68:f1:f7:84:f8:
51:b6:09:51:76:12:31:23:7d:47:5a:c8:2a:f2:92:f1:97:5c:
e3:4c:17:c3:c9:60:7f:73:a4:63:87:f1:7f:b3:a4:76:8b:d1:
65:fa:82:37:32:05:68:f0:81:9c:f4:c7:45:18:18:2f:77:1b:
4d:1a:6d:57:9a:65:43:5a:b6:f8:a6:f7:d8:2e:74:e3:e6:91:
e5:00:61:08:6f:fe:2f:03:89:7f:4f:63:43:06:48:68:18:99:
ea:09:65:b2:10:7c:13:c6:14:44:6c:30:b5:64:d7:ab:41:fe:
66:88:d5:54:d3:61:6c:54:0c:d4:c5:25:71:c8:a9:7e:3f:c2:
f7:f7:6f:ca:11:42:e0:f3:99:3c:4c:77:bf:9c:1b:26:74:ab:
ef:55:5e:c5:bd:2d:55:71:ca:cc:28:d6:89:ef:03:ac:bb:76:
f3:af:ba:42:49:f8:bf:b8:34:cd:54:65:49:d7:80:5f:9e:d3:
8e:24:c4:98:f1:cb:d2:a2:65:b6:19:58:97:e7:34:8e:66:e3:
74:cd:19:b0:a4:cd:4a:f0:08:fa:26:1c:97:03:2c:0c:7a:31:
ff:21:4a:54:f0:57:62:8d:c4:1d:d6:67:e8:91:f5:0d:21:96:
36:64:97:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5rKUCM734SdS/DqhroloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWZlOTBmOWQwODEzMzRjYzkyOGVkZWU5YmM3MzE1NDA3
MDhkZmQwHhcNMjUwNDI2MjEwMDIwWhcNMjUwNDI3MjEwMDIwWjAzMTEwLwYDVQQD
EygzYjUzZmY3MmJiMTYyMjk5NDI0MmY5NzAzNGEzOWQ3MWNlYzg0NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfdhKdGDNSsDWWKcd6Xqn5FSpZst
Oy8cJitVhUbskhQKeYm+SvTzRysedd+RRSKMiReRHfXPdfqBku/2nrm0hX/34yF3
mVt48A2861Fikx1J0DZJbIhPcKrztBwcYVPXn/99SWACwSKrrzqLMGNshdfCHlEh
O53pxP6H1ONywj+cgUiq7ZQnZ+8cagobRwKCGXi5qNjKXTMlh40GTzG1kU5dy4UT
TrCGzcy3/ox4z9BA6Ajo1rS6OFDmLXQ7ucveFsPPGiC3Kfu21tkW6talib6VBVmD
PqsThmsb/n5yEAn8A9Lhuh+CtNuIrlicEoMyisUPuHMZvbKPbswKgk0q6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtT/3K7FiKZQkL5cDSjnXHOyEdSMB8GA1UdIwQY
MBaAFNqv6Q+dCBM0zJKO3um8cxVAcI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYt
YmJkOTJjY2FmYTg4LzEvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYtYmJkOTJjY2FmYTg4
LzEvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQGNf28p
HBI5+LLYuGjx94T4UbYJUXYSMSN9R1rIKvKS8Zdc40wXw8lgf3OkY4fxf7OkdovR
ZfqCNzIFaPCBnPTHRRgYL3cbTRptV5plQ1q2+Kb32C504+aR5QBhCG/+LwOJf09j
QwZIaBiZ6gllshB8E8YURGwwtWTXq0H+ZojVVNNhbFQM1MUlccipfj/C9/dvyhFC
4POZPEx3v5wbJnSr71Vexb0tVXHKzCjWie8DrLt286+6Qkn4v7g0zVRlSdeAX57T
jiTEmPHL0qJlthlYl+c0jmbjdM0ZsKTNSvAI+iYclwMsDHox/yFKVPBXYo3EHdZn
6JH1DSGWNmSXRw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:39 2025 by rpki-client