Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: mFsvelTDJbi4sOr+Lnn4i364C7KLxjf4Pn+dEJqtZxc=
Subject key identifier: 16:D3:78:DA:4A:43:0B:43:61:55:AA:76:C0:F5:83:A2:2F:71:F1:01
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 0198D5BC366E98DB4AF7AEC1586A0606A83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0369
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: xRnCk8TeyW5oFczlEVeP/sR7kwGuy1Kx1CSv+w+b4w0=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:36:6e:98:db:4a:f7:ae:c1:58:6a:06:06:a8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=16d378da4a430b436155aa76c0f583a22f71f101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:89:8d:22:59:f9:bc:a6:4b:53:52:07:a8:
11:49:fe:80:70:6c:f5:8d:6c:a6:48:1a:ec:73:03:
d5:a0:72:f9:74:94:c6:63:eb:05:1f:a5:0f:d5:4e:
8e:b3:f0:13:53:01:c0:af:d2:1a:e7:c5:10:63:f1:
eb:76:4e:60:dc:c2:90:9e:8b:20:d9:7e:df:63:b1:
5f:e1:c7:65:33:f9:40:67:c0:fb:32:4d:bf:0b:e8:
ec:09:7f:19:33:8c:70:2c:0f:f3:a0:21:d3:fa:36:
4d:e4:9d:93:f4:ee:6c:b7:f1:17:f3:f8:38:cb:1a:
93:f3:e5:26:b8:81:02:97:90:9f:b0:72:04:a1:c2:
93:44:c4:1f:a8:f6:7c:58:2d:3b:6a:13:c2:69:b8:
1e:8d:0f:b8:62:aa:ea:3f:4b:38:eb:b8:ff:16:61:
0f:85:d0:ec:ab:21:79:66:06:da:36:a8:ba:7a:f7:
00:65:be:bc:aa:38:ed:a1:7a:64:f1:d3:b4:45:31:
b5:f5:cb:69:9f:c3:e8:3f:57:ed:da:d8:86:af:96:
d8:55:05:5c:fb:18:44:67:02:35:f0:9c:44:d1:fb:
e3:67:8f:c7:cf:3c:0f:ab:c4:d7:4e:55:5f:cc:6e:
07:3b:99:86:a8:c8:dc:b3:b5:bb:b0:89:00:45:23:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:78:DA:4A:43:0B:43:61:55:AA:76:C0:F5:83:A2:2F:71:F1:01
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:dc:93:53:1c:f9:e6:1d:a0:6d:7f:e3:6d:89:b4:b5:fd:
9f:d4:08:7f:f0:59:56:cb:f3:62:d8:af:a0:7d:cf:97:3c:c1:
93:b7:5f:d5:14:a2:77:ba:0a:9b:d9:d9:30:30:b1:88:db:b2:
dd:9e:d0:5b:a6:d5:b1:59:74:a0:05:4f:c5:72:0e:a2:aa:c9:
c0:5d:e7:cb:2a:7a:b6:6b:5e:9c:61:d6:e0:4e:8a:2d:36:35:
84:9f:19:1f:36:09:f9:df:5f:d3:83:cf:30:59:c0:23:3c:31:
d4:a4:20:72:b0:64:60:05:23:7f:f3:18:9e:e7:ca:9e:0f:e5:
de:53:67:0b:08:62:a3:bb:40:3d:03:81:be:db:25:4d:83:1b:
f2:2b:ad:d0:f4:de:fb:bf:9b:3d:15:f6:43:24:33:ed:16:a1:
0b:02:23:80:b2:f9:b8:62:8a:72:e5:17:0e:fc:02:35:e7:ee:
9d:0d:ff:b3:00:15:52:65:e0:79:24:3b:5c:f8:7b:4f:e6:02:
32:de:65:62:b2:32:4c:40:93:ce:de:0f:5a:17:5f:8c:db:98:
61:31:15:d6:e8:b3:51:59:2e:d5:42:c0:93:d4:23:fb:51:52:
24:71:08:48:8d:7b:94:2d:2e:49:83:3c:d4:54:b5:de:b6:3f:
be:1e:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:29 2025 by rpki-client