Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: Fw/4VTXcgTmGqZbrDxGJ3XKhDUlW6As6RwMNF5BeojM=
Subject key identifier: 76:31:92:C2:83:C4:4B:A7:73:36:A3:D0:4C:6F:ED:D1:5B:82:6D:6B
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 0197B6A1A9749BC6C53A369CAE44FF5799B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 050C
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: IItLlE2qcY+f9ymdlsBUTA/rei6andSvvTrH+dpByUQ=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a9:74:9b:c6:c5:3a:36:9c:ae:44:ff:57:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=763192c283c44ba77336a3d04c6fedd15b826d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:39:a8:0f:54:5e:79:90:18:62:f0:88:a6:
91:c1:9d:85:67:ca:8f:af:4a:5f:2a:e9:02:c7:e2:
15:04:8f:23:83:14:7e:01:e2:db:c0:4a:21:f9:2f:
2f:5c:4e:e5:f1:c0:34:e2:7e:ef:90:07:43:fa:67:
e8:c1:9f:ee:ed:0c:15:71:24:01:6c:e9:73:42:3b:
bd:52:2f:56:59:2f:47:b9:42:f6:f5:bd:93:0f:82:
1b:c1:5b:bb:c8:df:ff:71:70:e9:78:c9:52:84:7f:
c5:47:37:f4:00:18:c1:80:7e:bc:30:d0:df:d9:a1:
44:2c:19:4d:61:b0:38:ce:46:1a:68:d3:97:5d:2e:
1d:46:1e:c5:ef:fa:93:f6:94:4d:dd:c3:05:1a:1c:
9f:8e:cb:72:37:d3:3f:90:79:b1:c1:8a:fb:4f:ce:
cb:de:94:d0:81:3e:24:b0:a8:a1:14:12:b7:9d:40:
ca:4a:85:94:df:2a:63:b0:90:a0:a8:54:ec:05:5a:
a4:5d:a8:48:3c:68:5d:87:2d:ce:e6:7b:1c:46:72:
3d:9d:e4:f6:d6:a9:2e:d7:e3:3f:41:85:b9:0b:a2:
eb:34:a8:5c:22:d6:0a:3f:47:c0:af:f4:e2:85:04:
ba:99:8c:1b:57:0e:b0:91:43:45:6f:69:6e:86:fd:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:92:C2:83:C4:4B:A7:73:36:A3:D0:4C:6F:ED:D1:5B:82:6D:6B
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e4:ee:c4:20:03:c0:df:13:52:9a:a7:0a:56:32:e7:b9:c3:
92:c8:82:99:ef:f1:c2:d3:e7:b6:58:25:9f:a8:9b:9b:ec:c5:
fb:b3:21:c5:29:74:bc:13:1d:af:cb:7b:e3:18:d7:6b:70:6b:
68:0f:73:15:a1:08:4e:33:99:20:e7:02:c5:3d:80:49:16:96:
c9:91:cf:78:88:80:27:8e:f7:fb:1c:4f:02:a0:db:8f:05:ad:
1f:eb:7c:f4:85:91:1a:d6:8c:34:7f:33:e6:0e:f3:a9:16:34:
ed:6e:6a:ba:1a:90:28:0d:17:3f:2f:02:26:b4:a6:53:5f:52:
0e:dc:fa:54:f3:3e:c9:36:78:84:11:a4:22:20:34:a4:2d:7f:
52:51:5e:0e:84:31:61:3e:89:e8:1f:a2:32:d6:a3:eb:99:74:
f8:5b:a6:16:83:55:9a:ae:fb:a8:d1:81:64:1d:13:22:e9:d6:
a0:93:cc:54:fb:d6:b3:1c:21:11:b2:79:7c:2a:0a:25:a3:36:
18:57:89:b3:98:47:24:24:a5:6c:28:1e:9e:61:ab:29:15:6d:
ed:da:28:54:f2:44:9d:ef:91:87:19:8f:b7:97:05:43:90:a0:
e4:1f:9a:62:0b:b6:de:73:c4:dc:d7:70:18:25:96:7f:75:9d:
6c:e1:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:14 2025 by rpki-client