Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: E7g4UXanXtQJcviZT4xiqAPlvtc5s8WDjSAH1hjPtEY=
Subject key identifier: 14:81:46:80:59:8E:E6:55:52:44:D3:D4:BC:AD:BC:26:6A:5B:9A:3A
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 0197B70F1E744FC7BA9B4176DA0DF84DE52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 52
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: zNa+IxI42i20BAPtx50Uln7EnQ3AzJj1RPLk3JKtK74=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1e:74:4f:c7:ba:9b:41:76:da:0d:f8:4d:e5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=14814680598ee6555244d3d4bcadbc266a5b9a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:05:f2:e7:0e:ea:21:0c:3a:46:d8:2f:c2:
b5:30:3a:e5:ed:d4:d8:4d:79:6a:d1:a6:64:7b:29:
79:c6:85:1d:35:f3:71:a8:85:59:b5:63:c6:b2:aa:
e8:01:0b:63:c8:e8:99:69:62:2b:36:39:f1:a4:e1:
58:10:d5:a5:c8:ed:32:17:b3:9f:be:fe:4e:01:62:
b2:a1:50:8d:ed:79:0e:a1:eb:47:75:09:24:80:b3:
50:02:b5:34:31:03:74:7f:80:28:a1:66:cc:c6:db:
aa:1d:23:04:21:df:a8:7f:21:55:e8:08:b3:8a:82:
7b:57:87:b4:b3:72:c8:e1:2a:30:58:66:21:cf:0f:
8c:3c:1a:fa:58:8e:c5:ef:85:7d:59:d8:81:08:92:
3a:23:85:dd:a1:78:74:2c:24:6b:de:e4:a3:9c:b4:
3e:b8:aa:a4:d1:1c:c6:3c:57:48:be:f4:dd:98:96:
90:7a:c0:81:1e:18:41:3f:0f:8f:24:9e:fc:97:16:
80:cf:dc:3c:10:27:4e:8c:50:cf:4c:58:da:c8:4e:
77:32:31:cf:e6:5e:9e:e6:d3:76:2a:70:73:f2:52:
5f:ae:88:f5:11:9b:b1:72:21:e1:7e:a4:48:5e:32:
71:3f:8c:94:12:59:91:da:20:b5:5d:6e:aa:06:8d:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:46:80:59:8E:E6:55:52:44:D3:D4:BC:AD:BC:26:6A:5B:9A:3A
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0d:f4:c1:fd:c0:9a:a8:a3:be:8e:32:fa:d3:8b:d6:10:0d:
07:33:47:a7:2f:16:f5:69:e9:6d:d6:65:76:82:df:81:93:8a:
37:87:06:23:12:d3:88:dd:9c:99:9d:89:17:2d:64:e7:10:58:
e0:5c:b0:d0:54:4f:c1:23:bf:40:0a:b9:9e:bc:e6:5b:4f:7e:
ab:8b:a2:e4:bf:55:5c:8d:32:8b:c3:93:16:8a:e3:da:b8:7a:
ff:e3:06:25:a2:8a:12:c2:45:b9:cc:c3:0a:6f:34:e8:88:1b:
3a:af:63:f0:c7:3d:88:b2:92:7c:aa:dd:fd:a0:bb:a4:33:80:
fb:88:59:30:33:5a:b0:04:06:52:77:d0:3e:04:31:03:11:d1:
49:f0:37:1a:a2:1f:ab:ed:0c:85:0b:8c:dd:3a:da:b1:27:29:
a0:a9:f0:71:8d:9b:cc:cc:ca:86:7e:9b:8a:6f:d1:d4:65:96:
b4:b7:f2:f8:9e:74:45:ba:2a:92:99:7b:9d:fd:59:83:01:73:
c9:ff:c0:41:9f:56:35:36:df:3e:c4:32:77:61:b5:46:b5:fc:
37:13:45:ea:84:bb:82:07:a0:8b:51:e2:00:13:d3:fb:23:10:
71:18:1b:17:0d:11:9f:97:29:e3:3f:55:3f:ef:e6:2c:e7:29:
92:60:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:53 2025 by rpki-client