Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File: 2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier: bEsZs0G5i+m+1cKlVrRo74hS9t4jToOb93sff3aNg84=
Subject key identifier: FB:76:D0:B2:50:4F:24:C6:D8:DC:D5:52:5F:41:69:EF:78:38:64:E6
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial: 01987B2DFC53C7FE0DF2DAA931D2CE4096B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number: 03A2
Signing time: Tue 05 Aug 2025 17:01:07 +0000
Manifest this update: Tue 05 Aug 2025 17:01:07 +0000
Manifest next update: Wed 06 Aug 2025 17:01:07 +0000
Files and hashes: 1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: bDcsOhRgFJ9p75q/abtWKwsorZ6dbK7WUe2NpJcIZs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:fc:53:c7:fe:0d:f2:da:a9:31:d2:ce:40:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Validity
Not Before: Aug 5 17:01:07 2025 GMT
Not After : Aug 6 17:01:07 2025 GMT
Subject: CN=fb76d0b2504f24c6d8dcd5525f4169ef783864e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:57:a7:e3:90:83:61:af:f1:4c:cb:10:42:
25:92:f2:0f:60:52:b5:1f:2d:91:f0:fb:92:e3:f2:
56:ce:39:91:e2:27:20:15:33:94:c3:1a:04:e2:25:
e3:cf:f8:b6:ef:99:31:05:af:43:5a:9c:29:f7:dd:
e0:2a:f7:a4:0f:be:b0:a7:ce:00:d5:a6:5f:3e:31:
10:6b:88:47:ef:0d:b9:a4:0f:72:52:cf:33:f7:76:
d8:4a:6a:0e:88:33:f3:f2:0d:e7:ba:46:dc:eb:30:
6f:51:b7:e0:b9:c1:ff:f2:a2:f0:d6:c9:4a:39:4c:
2a:34:a7:bc:89:7c:14:d0:78:a1:7d:92:6c:7e:3f:
f9:3a:22:22:f7:80:0a:f3:3a:a1:79:ad:68:18:bb:
e0:a8:5c:7b:1b:b7:ac:c0:21:d2:17:10:18:33:e5:
ac:ac:bd:21:ea:98:89:06:dc:b2:37:ea:90:8b:3a:
df:42:94:f9:c9:72:14:4b:8b:f5:f2:6c:04:9a:7a:
ee:66:66:ae:9b:55:98:ae:ae:28:4a:de:98:5a:27:
42:5e:83:1d:e2:13:96:d6:66:79:39:14:2e:0d:ec:
cd:e7:60:31:42:8e:88:3f:5e:1d:22:d5:36:7f:b3:
84:9d:78:be:e0:50:53:b1:e1:7f:52:58:08:a8:42:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:D0:B2:50:4F:24:C6:D8:DC:D5:52:5F:41:69:EF:78:38:64:E6
X509v3 Authority Key Identifier:
keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f2:3b:a9:59:94:3e:3d:df:6e:17:e9:d5:07:69:fa:1d:de:
88:fc:9c:ca:6c:1d:b1:b4:6e:98:60:aa:83:8a:1d:b5:fd:1d:
df:22:73:7e:2a:bb:ca:ea:d0:8f:a6:c8:e6:82:07:dc:b0:10:
3e:8d:ff:b6:6e:df:a5:3a:f1:1d:64:42:f6:df:c1:f9:54:4b:
44:8c:e3:3a:69:fc:90:88:99:7b:a4:b8:be:11:82:cc:14:74:
02:8c:e6:85:85:f8:6c:70:1d:b3:9e:5a:6a:fc:2b:a4:3e:f7:
f2:de:36:3e:7d:19:8a:7d:26:98:7a:af:50:58:19:8c:65:10:
e1:0a:30:b0:6e:29:7e:c0:a1:fd:46:36:74:2b:49:56:f5:b6:
72:e8:84:2f:02:00:58:c9:87:40:cf:3a:0b:05:ae:f2:f9:61:
66:2c:d4:4b:55:d6:5a:d5:ba:a3:f7:e9:1c:7c:c6:c0:e2:10:
dc:94:65:d7:54:7d:dd:a3:9f:36:9a:4e:ee:84:a2:31:6c:1d:
a4:5a:d5:ac:02:52:ff:06:e9:d1:b7:76:38:d9:4a:34:79:59:
dd:65:b8:4d:8a:ae:24:43:fc:e6:ef:87:49:91:48:34:33:61:
ad:e6:80:72:f9:da:f2:84:c6:9a:a4:98:8c:19:d4:76:03:0c:
e6:4c:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:56:05 2025 by rpki-client