Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: N7TJe16fTIGcchlAmabCj6Gwsv2cn19/psZ91Xtlhas=
Subject key identifier: 55:D5:2A:D3:AB:6A:B2:9B:7B:DE:AB:CE:9D:DA:DF:70:10:F9:89:79
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 01977E67D69BDE93E0BE2CA6842DBDFA9A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 08ED
Signing time: Tue 17 Jun 2025 15:00:23 +0000
Manifest this update: Tue 17 Jun 2025 15:00:23 +0000
Manifest next update: Wed 18 Jun 2025 15:00:23 +0000
Files and hashes: 1: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: dsnOrDyUALmmUIJkFHturgm3SFuFPdhFfFvo5yLN0rc=)
2: ptCjyawSJ9frfP9fH_ikMswCnsI.roa (hash: qlAjQ7L6msxhMlwj1dEaHE32m8HH4N1buR0Bga+2/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:67:d6:9b:de:93:e0:be:2c:a6:84:2d:bd:fa:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Jun 17 15:00:23 2025 GMT
Not After : Jun 18 15:00:23 2025 GMT
Subject: CN=55d52ad3ab6ab29b7bdeabce9ddadf7010f98979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:fc:7f:b5:13:74:96:97:58:4a:e7:1a:2d:
60:3a:53:2b:db:24:af:c6:51:83:e9:51:2f:56:74:
39:6d:40:7c:ff:f6:22:c8:1e:3b:39:53:bf:61:6a:
56:81:14:25:7f:01:03:0b:93:73:21:80:ea:e3:31:
1f:d2:cd:0a:02:ff:8e:3d:a9:59:26:61:d8:62:20:
00:dd:53:4f:80:6e:16:0d:56:99:5a:79:cf:22:ab:
36:97:77:9d:82:28:71:dd:cb:42:16:63:d1:42:c0:
88:56:8b:c5:63:ee:2a:42:5d:db:a6:46:38:cd:fe:
45:9c:c2:d6:cc:36:34:7d:47:54:1f:1d:63:9d:ed:
e5:8e:da:07:d7:43:8d:0f:65:08:52:d7:02:a1:c2:
6f:05:63:ae:e1:e1:b7:88:85:f3:04:e8:8e:b1:91:
59:6a:57:c7:35:af:a5:6b:04:be:b1:42:1c:8f:94:
04:b7:5e:3a:0b:ca:44:5e:05:df:39:0f:2c:12:9c:
b2:ab:99:ca:c0:28:84:85:fc:72:a8:ad:82:3c:e9:
23:f3:a2:b8:1c:6f:93:4f:c8:03:32:2e:cf:cf:c3:
36:f7:38:58:de:7f:1a:14:5c:4e:94:13:62:38:8b:
6b:f1:ea:51:42:dd:e3:b0:c5:0c:aa:40:fc:94:84:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:2A:D3:AB:6A:B2:9B:7B:DE:AB:CE:9D:DA:DF:70:10:F9:89:79
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:78:c5:c3:2b:34:82:2d:7e:9f:99:65:10:c1:25:8f:d5:ec:
eb:48:76:ca:de:9f:67:c5:0b:73:1c:a2:a9:77:b7:3e:d3:c2:
89:cc:b3:7e:38:58:26:d1:40:5e:60:a6:73:89:3a:bb:bc:f4:
f6:c3:27:3c:3f:da:0b:a6:ae:8b:fc:da:40:e9:49:49:61:86:
dc:f0:a5:6b:28:d6:8f:0b:80:ee:79:15:3a:05:e5:d3:9a:a2:
a8:41:23:24:2e:08:3c:c6:85:b9:20:08:b2:88:97:3e:6c:ff:
0d:df:92:c7:3d:c9:67:50:0b:bb:44:96:79:ab:d3:3f:dc:f6:
be:83:3a:c4:2b:b2:71:87:3d:c4:89:36:cf:e7:af:c5:8d:ea:
37:61:83:9e:20:de:19:1f:fd:ea:92:ec:57:dd:5c:01:90:73:
2e:c7:bc:75:e8:18:36:09:e9:20:de:9d:d0:e4:ff:b4:48:ae:
43:77:1f:5d:4f:e7:75:cc:c8:1a:c9:57:95:61:60:39:00:31:
35:82:07:65:e0:db:1c:76:f7:8e:e3:41:76:61:4f:20:37:11:
8f:01:5f:9a:1d:6b:dc:ba:9b:c6:31:a5:8f:ce:f2:ab:46:cc:
5d:9e:69:7c:4d:a0:7a:b5:39:0a:08:c4:e9:22:37:a4:e7:a7:
59:b4:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:55:34 2025 by rpki-client