Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: v8gEZiTuRidP3TZx5PV8+vlWm3bZUMBpQLAIU/p/OWQ=
Subject key identifier: 90:B4:13:8B:6B:5D:74:8B:05:23:A7:0A:34:CE:8D:6C:73:5A:CB:1F
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 0197B70F2793D5E2019173FD61F1B7733479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 0210
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: 8VtSfkzrrm/TI+d1iqsOhcMf3MWVu559p1GkKXFXfZ8=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:27:93:d5:e2:01:91:73:fd:61:f1:b7:73:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=90b4138b6b5d748b0523a70a34ce8d6c735acb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:72:5c:ff:cf:07:39:30:9e:f5:f2:22:b6:
ac:1f:7b:5e:be:e8:bd:0c:ee:3d:1a:03:bd:0d:cd:
88:a7:e8:56:8b:00:22:6d:a8:6f:fe:cd:40:54:aa:
b3:24:31:87:3a:01:26:05:27:d6:76:49:55:77:f7:
ef:ac:11:42:92:2b:ae:b4:a4:10:7b:52:8f:4f:2d:
00:b3:7a:09:96:29:b7:c1:13:28:7d:7d:f1:94:6e:
23:ec:a8:ff:95:99:dd:65:fb:c8:09:28:db:8e:68:
47:ef:e9:d6:38:64:b9:c2:a5:e2:43:64:1e:1b:47:
6d:13:0a:0c:52:42:4c:a0:56:37:21:5b:e8:1d:5f:
3c:29:bf:ad:30:3c:11:94:c4:9f:10:16:46:4f:ae:
cc:cd:6d:9d:c3:d1:a1:e0:86:c9:23:10:ef:42:fc:
28:43:4a:ba:83:76:6c:93:6e:dc:ad:fb:41:85:61:
47:2e:6c:1c:0b:e4:40:65:ba:fb:cc:b6:79:d0:7b:
cc:d8:d3:a2:06:95:80:15:6b:8a:80:1b:8b:4b:06:
35:6e:3c:2b:24:28:13:4f:b1:74:ce:95:b6:01:95:
cc:2e:ef:a8:7d:2e:ac:b1:bb:82:d6:21:1e:11:22:
7d:98:15:97:97:df:75:7e:78:79:9a:dd:49:52:ae:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:13:8B:6B:5D:74:8B:05:23:A7:0A:34:CE:8D:6C:73:5A:CB:1F
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3d:3e:23:c2:34:39:a5:00:8e:1c:4d:c6:a0:fc:91:dc:b7:
69:4b:11:23:69:fb:fb:b1:71:02:47:56:00:31:91:cf:6b:eb:
b4:38:aa:0b:d0:8e:5d:03:6b:4e:3f:b5:ed:67:d9:d1:cc:fb:
42:e7:0f:71:ec:40:4b:a6:9f:86:0b:7c:4b:0c:88:61:38:30:
29:0b:67:7b:77:47:14:01:27:e2:6d:33:60:72:00:9c:17:32:
49:af:60:96:f6:58:0f:64:78:fd:76:4b:f9:d7:f1:fc:a7:5b:
ca:14:c0:74:72:7e:73:87:8b:f7:28:c3:17:d5:e3:67:f8:f8:
29:c5:09:56:c1:1c:05:d9:f7:19:45:9a:58:53:c4:cb:39:5f:
23:7c:c1:64:23:d2:f0:c2:53:15:3b:cc:67:d9:03:63:37:ea:
ea:5a:73:5e:54:21:9d:01:f4:21:1b:06:3d:20:e6:82:6f:bb:
7c:fe:32:71:30:06:98:bc:af:68:d7:fc:52:5e:30:5a:5f:bc:
db:fb:48:4f:c8:04:8d:68:d5:da:08:da:dc:03:4c:a9:57:7a:
a5:22:9f:b0:b9:b7:bf:b7:bf:8d:76:10:c2:61:a6:7f:b7:3e:
9a:50:ab:36:4f:ab:fc:be:87:70:aa:b8:45:84:ee:17:27:54:
fd:1a:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:47 2025 by rpki-client