Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: v8L03BrYU3UURc9WKWdZ9KQIos38xhKsKT+Bd2GeN68=
Subject key identifier: EC:F2:DB:96:24:5F:E6:A4:73:94:CB:F4:AB:51:92:1F:8F:C2:5E:A9
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 0197BAEAF1A44D02CC4FB2C8E731A27471FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 09:00:48 +0000
Manifest this update: Sun 29 Jun 2025 09:00:48 +0000
Manifest next update: Mon 30 Jun 2025 09:00:48 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: au+/7NwqMHkZ3epfKQaHTnOl20go71+Xd6pxlWPd64s=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:ea:f1:a4:4d:02:cc:4f:b2:c8:e7:31:a2:74:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Jun 29 09:00:48 2025 GMT
Not After : Jun 30 09:00:48 2025 GMT
Subject: CN=ecf2db96245fe6a47394cbf4ab51921f8fc25ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:15:09:f3:38:63:0c:11:2d:86:1a:8b:63:
f2:07:b9:49:d4:dd:36:6c:f7:0a:01:ab:99:41:53:
8b:c3:0a:6e:a7:84:27:1b:16:11:c9:b6:4f:0e:b0:
86:c2:f8:87:5e:e7:be:e5:3b:43:8d:69:b7:5c:4f:
15:94:d3:7b:8f:26:bc:b3:d2:ad:6d:18:f6:1d:93:
35:a3:d6:ab:be:c1:25:51:38:c3:67:41:27:f6:15:
d8:0e:4d:6a:60:1f:4c:5c:68:e5:d1:44:8c:2a:17:
8c:1b:11:85:1f:ed:fa:36:b7:f9:7f:35:7f:49:ad:
5b:44:6f:18:9e:28:ca:d9:08:3a:36:36:7c:2b:9d:
04:62:68:23:3a:30:37:e1:2e:c9:60:08:27:ec:d2:
67:b0:0f:fc:38:25:46:f3:0f:68:cd:13:84:4b:05:
7c:12:61:19:b2:7a:10:54:b5:36:2b:79:44:06:47:
ca:15:f9:cb:a8:a6:32:b7:b0:38:c9:fb:30:58:c1:
24:e9:8a:a3:38:15:26:45:96:b9:2e:7b:3b:0b:72:
48:11:af:e0:7e:d8:8a:88:72:a5:98:9a:0a:3d:03:
7f:06:89:46:66:3c:d7:ba:ce:6d:3f:1f:24:5e:ed:
04:89:38:39:84:ed:8f:84:a8:d2:e3:24:35:9d:08:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:DB:96:24:5F:E6:A4:73:94:CB:F4:AB:51:92:1F:8F:C2:5E:A9
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:b5:ea:3b:30:ce:ff:68:c1:31:60:a5:76:aa:9d:3d:39:
05:63:44:bb:96:bd:e1:b4:76:71:3d:61:cd:a2:a9:19:53:c9:
db:71:ba:9e:64:19:9c:36:57:84:e4:c2:b3:ce:ef:17:9b:d5:
eb:67:a6:c7:3b:ab:37:a9:34:bc:30:4e:29:58:0f:d4:36:8f:
85:ba:21:64:a8:a8:04:0e:f9:20:5d:6c:ec:b2:f8:6d:1c:ff:
bc:84:fe:1e:2e:8e:c6:02:8d:ff:9e:31:5a:48:67:b4:9f:05:
a2:6c:0a:0b:2e:80:7d:10:52:27:56:23:d7:96:c7:a2:6d:d0:
1b:ed:4e:a0:d9:35:f5:c4:6e:6c:11:78:bf:bd:f5:14:93:d9:
4e:3e:d0:b6:09:73:e3:46:22:f4:6e:fd:25:d6:fe:20:88:9b:
f9:9a:d3:8a:66:7d:10:65:96:a9:4d:c7:65:13:e6:df:b4:ac:
6a:df:39:24:dc:93:cf:c6:88:0c:ee:fc:ef:1a:26:4f:1f:ab:
03:d5:92:97:42:ca:15:c8:ad:24:0f:88:65:47:fe:97:e1:11:
b0:be:6a:f3:58:30:87:8f:4b:69:fd:96:24:35:fd:6b:43:7c:
64:f4:41:12:55:55:45:35:f8:3f:6e:90:7d:e3:4e:2e:c0:21:
67:54:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:14:22 2025 by rpki-client