Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: QoOQ1d3KM2nII8TNRe0g7UFD46I23dj73grL2rlB4NA=
Subject key identifier: 40:D6:79:9A:64:08:40:71:D1:EB:CB:E6:01:BC:1F:95:C7:8E:50:A9
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 01976DAB6E5F1A9D980AFCEB07E245AE7CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 01EA
Signing time: Sat 14 Jun 2025 09:00:40 +0000
Manifest this update: Sat 14 Jun 2025 09:00:40 +0000
Manifest next update: Sun 15 Jun 2025 09:00:40 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: XAxBdjiEgmZrOhd2WKbDzxkKctYT6hW4eYrbbt7/+8s=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:6e:5f:1a:9d:98:0a:fc:eb:07:e2:45:ae:7c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Jun 14 09:00:40 2025 GMT
Not After : Jun 15 09:00:40 2025 GMT
Subject: CN=40d6799a64084071d1ebcbe601bc1f95c78e50a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:f6:99:e8:6f:00:87:95:cf:00:c5:3e:30:
d6:cd:bb:57:71:a8:9a:3f:0e:97:5f:d6:80:0d:00:
a1:6d:d0:40:66:ce:e1:be:be:9a:6b:91:b3:2f:5e:
7d:b9:d9:f3:5a:cb:dc:a4:73:84:74:50:7f:1e:2d:
f9:4b:0f:6f:19:9d:bb:43:7e:0f:21:58:b6:fd:5c:
74:85:09:73:29:6a:6f:af:32:7f:f8:c6:85:a2:6f:
18:41:fa:87:1b:1e:39:18:45:f3:a9:24:c0:aa:be:
25:c6:1d:1b:cf:61:c1:3f:21:fd:4e:92:43:5d:25:
f6:4f:dc:db:36:d7:95:60:ee:49:5c:43:e1:f4:8e:
35:d9:85:0a:a9:56:8d:d7:63:b1:cf:13:92:33:8a:
31:0c:11:3a:ca:9c:04:61:2d:4a:7c:61:d1:e6:1c:
56:cd:dc:bf:d5:87:c6:b2:a9:16:6d:80:d0:c6:52:
b6:cd:7e:e1:bb:53:5d:55:d9:d2:d7:a9:a1:0c:7d:
c2:7f:92:7a:72:1c:04:22:6d:b8:bc:a9:ab:72:09:
e3:95:ed:f7:5b:ba:6d:34:73:9f:b7:56:b1:04:24:
44:ec:d1:07:00:64:10:fb:bc:d1:47:0f:79:7a:ff:
2e:c2:db:7c:c2:79:ae:2e:69:69:ae:66:76:9f:73:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:79:9A:64:08:40:71:D1:EB:CB:E6:01:BC:1F:95:C7:8E:50:A9
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3f:3f:68:6b:2e:79:f0:ff:17:5d:4a:f2:16:e5:55:6d:d8:
e8:90:8a:f8:85:e8:6a:41:5b:dc:63:de:dc:82:af:4a:d9:2b:
f0:2d:33:6d:51:46:d6:bd:7b:65:d1:b1:5e:86:2e:04:37:d1:
bb:74:89:f1:13:36:e3:4f:74:54:85:10:8a:76:98:9a:d7:e2:
7b:36:99:8d:26:17:9d:6c:fa:23:7d:38:13:c3:fe:22:95:60:
b0:88:2a:6f:dc:78:bc:32:6b:d5:83:35:47:57:7c:3b:67:7e:
fc:c8:b5:ec:b7:3a:18:8c:ce:0e:74:fe:e8:3f:ec:d3:a5:49:
91:71:7d:b6:73:fc:98:ba:b9:93:91:ee:2d:9f:51:f1:29:93:
ba:73:3d:3a:54:a2:43:b4:fc:6d:03:20:22:cb:5b:b8:19:a3:
c7:63:ef:00:03:39:8b:6f:4a:38:56:43:77:5c:2a:d3:7d:42:
02:50:55:e5:4e:df:0a:6d:d0:98:3d:c4:ee:15:30:20:62:90:
32:57:86:36:ff:4f:6e:e8:e6:1a:03:5f:6e:ca:fa:e6:9a:3d:
c4:06:3f:b8:fa:1f:43:90:d5:58:cc:69:81:1d:23:bc:21:83:
29:f8:2d:f9:f1:e1:4c:71:8f:59:48:3f:3b:d0:d4:6f:cc:02:
d0:9f:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:03 2025 by rpki-client