Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: Pq9u68GdNXtYcRenidnG5lEs/V+TL5srvA2NCrfJfdI=
Subject key identifier: 76:02:0E:51:64:B6:61:4C:26:8B:51:8B:A2:F7:AB:49:90:8A:EF:47
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 0197782ECDE7A406A54DC223F3C77052384F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 10:00:22 +0000
Manifest this update: Mon 16 Jun 2025 10:00:22 +0000
Manifest next update: Tue 17 Jun 2025 10:00:22 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: Lb08qhN9ZKby/+TFiZdEx23srskJeibm09JirWx8i7k=)
2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:cd:e7:a4:06:a5:4d:c2:23:f3:c7:70:52:38:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Jun 16 10:00:22 2025 GMT
Not After : Jun 17 10:00:22 2025 GMT
Subject: CN=76020e5164b6614c268b518ba2f7ab49908aef47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:37:b7:07:eb:9a:ae:14:2d:96:76:35:9d:
2a:54:c2:af:5c:59:cf:b4:0b:3b:f0:a5:4d:c1:8d:
55:89:cb:c0:8c:f2:e2:3f:c4:58:0b:72:26:27:f9:
cb:02:7f:85:18:fd:fd:f5:66:97:5a:da:2c:f9:3e:
08:b4:b2:24:da:c0:45:7f:3c:da:09:7c:78:3b:68:
1e:73:dc:41:6b:08:69:8c:78:9b:65:b3:99:1c:3a:
88:cf:0b:a1:3f:c7:7e:c2:7e:ec:16:f4:38:6e:0f:
3b:cf:a4:54:50:4b:11:05:23:73:6a:de:0f:a1:15:
4f:c7:76:15:30:53:13:fc:47:43:a2:78:b0:83:12:
4d:43:aa:80:45:07:98:1d:92:2c:d4:04:86:8f:da:
00:11:a1:9a:6f:5d:88:ed:da:59:27:a8:f8:7b:dc:
d3:5c:01:fc:cd:a5:0a:b8:d3:11:4d:39:98:35:52:
b5:75:f1:22:16:20:c8:4f:41:32:3b:95:38:6a:c1:
ad:c8:73:2e:bf:38:27:71:56:27:85:ae:1b:32:f8:
2a:64:81:1d:b6:f4:d9:ab:b0:a7:c4:6d:42:be:97:
37:3e:f3:7a:e9:52:8b:b1:c1:a6:df:b5:97:64:b3:
78:9c:ba:3f:e5:a0:7c:d5:07:86:44:7b:72:b4:9a:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:0E:51:64:B6:61:4C:26:8B:51:8B:A2:F7:AB:49:90:8A:EF:47
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7f:e6:fb:d8:05:5b:8e:cf:24:09:3d:a0:0e:09:b8:b5:dd:
0d:d0:4d:ba:9f:e0:c1:3c:d9:98:05:fa:78:c5:0a:6a:a7:b2:
f3:29:e5:f3:39:5a:79:09:6e:90:2a:66:13:10:de:a2:96:a0:
17:1f:b4:6d:c1:00:73:8c:94:79:90:32:5c:19:80:0d:06:0c:
8f:97:46:ae:60:dd:a7:56:0b:1b:19:01:95:10:cf:e3:1c:cf:
99:f8:e4:a5:a2:4f:4e:8f:33:82:32:4c:42:8f:cd:2f:45:b2:
83:47:da:72:85:c7:9d:b5:3c:de:25:d3:a3:3c:1c:0a:0d:1b:
a3:05:d5:38:19:23:04:37:94:89:d2:bc:73:76:f4:5a:60:1c:
bc:8d:4f:fc:52:42:ba:8e:35:c3:ac:59:47:b7:04:76:fd:f3:
69:79:19:47:b2:8f:54:8c:e3:dd:b2:df:15:f1:c4:61:f8:f0:
19:c8:f1:0c:37:c0:de:1f:75:6e:1e:28:a1:94:ed:a0:d3:4d:
b5:82:cb:90:dc:3c:d2:14:14:26:a6:32:b4:53:fb:b4:56:2f:
20:b8:04:26:11:a1:82:4b:3e:c0:f3:04:6b:fb:ee:4f:03:be:
ca:b4:1c:3e:bf:34:7d:7e:5d:46:41:f2:38:17:8b:4e:96:36:
95:54:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:03 2025 by rpki-client