Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: EVccZ95xlY8JdDG00SP+IvvUzPOX/rjQmJQ+pVBODR4=
Subject key identifier: 0F:76:64:F1:88:27:22:07:FE:9B:5F:F3:F0:87:CE:1D:0E:52:6E:BD
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 0198D4E06DFF092726EEACAC9EC6E1CC9489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: E6
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: M93dbkHgFojIlQEi4KCdIXapnJ2pRuHvQOlK3lmWkyg=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6d:ff:09:27:26:ee:ac:ac:9e:c6:e1:cc:94:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=0f7664f188272207fe9b5ff3f087ce1d0e526ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:a9:f0:80:df:69:1a:78:fb:c6:e8:5a:da:
9b:31:bd:c6:ad:88:e1:ff:ea:f7:3c:c1:40:6f:1a:
7e:01:00:a1:34:a3:67:9c:91:09:5a:cd:36:a7:02:
9c:56:d0:2f:12:4c:f1:31:38:98:35:8d:26:ef:b9:
a1:dd:b6:f3:62:39:5f:f4:8b:f6:e9:63:7b:c3:03:
88:3e:a5:5d:a4:2c:5d:23:25:21:4d:23:25:75:e6:
ea:d5:98:06:3a:64:7d:14:0e:94:fb:df:e9:31:1b:
59:bc:94:a6:24:60:10:b9:2f:f3:06:94:46:38:32:
2e:28:74:bd:f1:69:f3:00:16:9f:b1:c0:3e:25:56:
cc:45:19:43:d1:f9:88:2b:e1:9e:4c:42:d5:49:1e:
9c:f6:db:61:0f:9b:c6:9a:36:c0:4d:62:0b:c9:bd:
1d:58:98:9a:cc:a5:da:23:51:8a:2d:39:a0:d2:63:
0a:a0:ce:12:7c:48:bc:32:ff:ec:bd:6e:91:98:d9:
c5:d5:b3:1d:40:1c:cd:14:76:3b:5f:20:93:ed:e5:
24:19:67:b6:36:6f:cf:fc:1a:00:a0:73:56:18:60:
4b:80:15:b1:3d:a6:a1:20:23:b5:ed:6c:98:ad:fe:
81:87:89:f4:98:83:c6:30:80:e2:af:a6:47:93:45:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:64:F1:88:27:22:07:FE:9B:5F:F3:F0:87:CE:1D:0E:52:6E:BD
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3b:68:8a:a0:0b:80:a9:9c:a7:3e:92:42:08:09:33:95:ae:
fb:fd:ee:3d:dc:07:60:f2:6e:50:93:b9:db:fe:75:6a:5c:e3:
73:c7:27:ae:d5:57:97:e6:c8:d0:9d:d1:25:36:61:f1:2f:e7:
a2:b9:37:7b:f2:2c:72:30:1a:aa:80:06:e1:7c:b2:2d:71:35:
d6:ac:1f:25:c6:bf:08:59:d0:d0:da:39:7f:b6:6e:4a:57:8d:
a0:95:67:01:4d:24:c4:e4:15:49:bb:ce:d3:af:8d:2b:8a:95:
9a:33:26:79:a3:8a:f7:7e:9d:3b:ea:0e:98:9b:db:ec:93:e4:
24:6e:d1:59:8d:09:85:ef:49:87:9b:b4:a9:81:c9:c7:e0:6d:
bd:45:78:18:2d:d3:55:ad:74:41:27:6f:82:96:f0:21:14:f7:
d9:5a:89:c6:0e:79:15:1e:d2:52:e1:46:cd:54:2a:74:40:07:
51:d0:0f:6e:17:38:24:59:a0:e3:a1:00:f3:ef:a2:88:da:0e:
75:e6:f3:27:bc:42:ec:ca:15:57:95:78:a1:32:01:16:4d:01:
67:fe:b3:94:a7:8d:52:89:9c:e9:3e:75:55:58:e4:34:90:36:
67:ba:9e:03:fa:4d:86:5f:a8:53:d5:e3:90:fc:7a:85:29:44:
5c:75:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:09 2025 by rpki-client