Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: JqVAEWbCy3c9/o/yz4885lXsh9AaFalmIaLm1QJpbkw=
Subject key identifier: 2A:FA:36:E1:5C:6D:5F:A2:2A:AB:66:E2:88:BE:C7:2B:80:8F:9A:BE
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 019786FCE934187BB709FEE9330E1258533E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 1426
Signing time: Thu 19 Jun 2025 07:00:11 +0000
Manifest this update: Thu 19 Jun 2025 07:00:11 +0000
Manifest next update: Fri 20 Jun 2025 07:00:11 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: b9i0tMH9AaVIUagO2muRiXahH/RFRHXI2l3w6BRgBNY=)
2: Y5hh8AgGKAUf_2S15Xwk_892p60.roa (hash: baZuJeVmztFazA/spLlePhpdINyXpI1DJgHdXLAL5/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fc:e9:34:18:7b:b7:09:fe:e9:33:0e:12:58:53:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: Jun 19 07:00:11 2025 GMT
Not After : Jun 20 07:00:11 2025 GMT
Subject: CN=2afa36e15c6d5fa22aab66e288bec72b808f9abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:24:b8:e9:51:5d:29:ea:e2:ae:b2:83:7e:
de:c7:a2:3a:1f:fe:7b:ab:f5:df:c8:f7:e5:95:ee:
b2:8d:df:32:f2:78:4a:5c:24:d8:d5:a4:42:aa:fa:
cd:dc:48:a2:e9:e4:38:26:0f:1d:9f:7a:43:c4:6d:
2e:83:9f:1f:cb:e3:df:69:ab:b1:32:70:7d:d3:b2:
f8:b6:1e:27:17:97:36:dd:9f:eb:6a:35:47:fd:86:
c4:06:69:69:ad:b9:94:1f:79:55:9f:d3:29:be:82:
df:6c:52:db:96:3d:7a:78:a6:76:ac:5b:c9:82:5d:
2d:73:e4:10:4e:85:28:eb:33:13:6c:c1:6e:da:27:
98:54:eb:d6:85:e4:c3:b7:f6:e8:46:56:f3:39:ae:
50:c9:5f:8e:1d:95:1c:50:62:53:90:4a:59:d4:17:
4e:d7:da:a8:17:7a:99:ea:98:54:5e:c5:7b:ab:26:
14:d0:ce:05:90:9e:c2:0c:9d:48:4b:7e:29:e7:fe:
d2:d8:3a:47:fd:ea:44:01:7d:9d:ed:8c:3a:8f:0e:
2a:1e:5f:a8:61:30:b9:36:42:c3:9b:a0:94:a7:8e:
bc:fe:32:d4:39:36:fe:5c:25:fc:29:a2:ee:5e:75:
6f:05:ff:e2:5f:d5:6d:15:1d:ac:84:11:94:a4:a6:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:36:E1:5C:6D:5F:A2:2A:AB:66:E2:88:BE:C7:2B:80:8F:9A:BE
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:f0:70:63:97:d1:f9:45:b4:c7:d3:a4:c7:fe:d6:bf:f5:
2b:0a:ca:ad:c6:99:77:8c:2a:07:46:80:79:52:b8:0e:68:d5:
f8:f1:2c:8c:7a:9a:96:cb:ca:1f:b0:f7:5c:41:69:4e:bb:9b:
d5:34:31:fd:50:08:79:71:90:38:74:06:7a:8b:d4:81:94:51:
d5:8c:62:ab:bf:e5:45:a8:8e:ea:41:24:c6:2b:75:36:31:53:
d1:d9:53:d0:fb:43:f0:49:22:b9:c4:33:51:e0:45:46:4b:05:
1c:64:b6:2a:d9:80:f8:83:25:bf:51:72:df:49:a0:5d:dc:5c:
c9:55:87:02:b6:e0:06:6f:53:08:f7:f0:49:05:a8:41:80:d6:
60:a7:55:b1:c0:a6:bb:f5:15:c1:f9:bf:5b:14:44:af:29:5d:
72:84:bc:a0:54:27:82:53:55:aa:18:2a:bb:8e:3b:f2:d9:0e:
6f:a1:2c:d4:e4:92:89:82:4f:de:9c:4c:23:1b:30:d5:a9:e1:
81:c6:03:f5:47:5e:ef:43:79:73:94:3a:1e:c6:3f:c7:bb:c6:
78:24:25:6c:0c:bd:ae:80:66:91:a6:31:63:f4:68:62:b0:26:
39:2b:37:f0:1a:b3:bf:87:49:13:5b:d2:fe:c3:fb:e8:01:e3:
86:fe:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:52:52 2025 by rpki-client