Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: PaDRqOQrp5NK3FZ05xX4Mnj1zE+dFWlxqInxqSNXgC4=
Subject key identifier: 69:13:42:9B:84:9F:1C:9C:55:3D:13:AD:4D:58:4D:3A:08:FA:BF:46
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 0197B7EAA3076A8A301BECB5F19BF63CEECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: 9cTv27PnBOEVqDLeKgafvWnYTvQM7ZZKb6iA25Ob2g8=)
2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a3:07:6a:8a:30:1b:ec:b5:f1:9b:f6:3c:ee:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=6913429b849f1c9c553d13ad4d584d3a08fabf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:12:9d:ef:63:34:7a:e8:a1:9a:5a:a5:7a:
23:96:01:47:da:ec:24:6a:ad:19:b0:2c:a3:07:57:
f3:15:de:95:71:e2:95:f1:fa:2a:22:81:25:8d:1a:
86:bc:bd:ab:a7:58:88:0a:a2:f1:58:d3:94:f4:54:
91:3e:8b:af:05:75:68:55:25:d7:78:95:c8:38:67:
92:c1:d0:46:69:94:96:8c:20:5d:59:74:11:11:0b:
db:65:41:6a:d5:4a:23:8c:aa:45:d2:67:75:76:f5:
88:a9:67:26:2f:36:3c:1b:c2:7d:2a:58:4d:4c:52:
81:4a:0a:e0:9f:8a:88:c3:9e:ca:ce:24:3d:58:ce:
7a:24:98:04:60:66:4a:5c:22:94:91:d8:ad:2f:c6:
f9:5e:58:1c:c3:73:4d:77:55:f1:5e:74:52:16:fa:
e8:90:ee:b4:fc:5d:37:3a:d9:50:bf:60:5c:a9:52:
2c:d2:7c:c7:63:9d:1f:07:31:ec:80:f9:45:91:7a:
e9:47:9d:a4:39:5d:42:5a:da:60:25:10:09:80:b2:
70:58:a6:67:7a:28:84:bc:60:ce:8a:5c:85:8f:f2:
93:b9:2c:92:7e:0e:0e:3d:62:3c:70:84:96:84:0a:
ae:29:24:72:f2:91:a3:b4:9c:d5:ae:9f:f8:7e:94:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:42:9B:84:9F:1C:9C:55:3D:13:AD:4D:58:4D:3A:08:FA:BF:46
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:07:ee:a8:00:9a:dd:67:79:84:da:07:2e:b3:37:72:48:
7d:9c:ca:7b:9c:61:fb:07:b9:cf:7e:a4:01:cf:a9:3b:73:c7:
3f:98:8e:85:6b:1b:f7:ac:b5:06:c4:c3:ec:7d:ed:46:8c:f1:
21:a5:f5:72:3a:13:5f:6a:d1:73:52:a7:38:d8:06:ee:10:95:
fd:1b:14:8c:17:92:93:ff:ad:b7:fb:59:c6:48:29:08:02:2d:
b4:90:8f:ee:87:14:57:41:05:70:81:61:d6:e6:cb:53:44:fb:
3a:de:85:0f:0e:96:68:38:b0:01:09:26:d1:44:d9:83:10:64:
07:3a:30:a5:32:cb:49:06:56:ff:84:69:83:58:a4:f8:98:28:
5a:33:ad:37:b9:de:b5:69:01:cd:28:e8:cf:c8:bb:b5:d5:f4:
c7:0b:b8:dd:4a:f0:c0:87:7f:46:f6:43:16:c5:7a:b6:51:3a:
2b:ad:5a:af:62:0c:bb:fa:c3:dc:c4:d8:cd:2a:a4:47:63:36:
66:01:26:ff:f6:48:da:05:76:1f:4a:c1:84:f8:c3:2a:2a:09:
ee:8e:d4:19:e0:e0:32:eb:45:9a:f2:ec:90:12:17:4d:ab:ae:
d2:0e:4d:ac:01:9d:0d:09:74:de:32:21:ca:a3:0d:c1:ff:2a:
7b:aa:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:58 2025 by rpki-client