Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: IdxwaLHlS0YoROBGpAEy2ywCUu9FeY3ksycUi6rjmHQ=
Subject key identifier: 49:A2:A0:1B:06:58:52:A9:E2:5A:DC:37:E1:F0:6A:82:85:98:71:30
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 0198D4E044FAA83315B7793A0570BFD77E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 06E4
Signing time: Sat 23 Aug 2025 03:02:04 +0000
Manifest this update: Sat 23 Aug 2025 03:02:04 +0000
Manifest next update: Sun 24 Aug 2025 03:02:04 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 7GwGcafcSkW5Ppunf3O7LATnDXFu6btfB+6P+aOYrkA=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:44:fa:a8:33:15:b7:79:3a:05:70:bf:d7:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Aug 23 03:02:04 2025 GMT
Not After : Aug 24 03:02:04 2025 GMT
Subject: CN=49a2a01b065852a9e25adc37e1f06a8285987130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:68:70:a1:1f:ee:17:a7:4f:05:ef:84:0b:
93:5f:1f:be:5c:09:45:29:ef:c4:27:8d:56:b9:67:
7d:d8:46:68:6b:a0:c1:12:c3:4f:aa:ec:de:43:27:
d3:02:fa:9e:20:a1:fa:81:8a:c0:46:cc:2e:c1:7a:
07:dd:93:4d:ba:3c:5d:ed:93:ad:ae:dc:63:ec:f9:
05:9b:2a:0f:62:94:59:b9:2d:9c:cc:36:55:2b:e3:
5c:da:f2:ec:aa:fa:4f:ca:0e:d7:eb:f6:76:31:c8:
c1:51:c5:b3:7c:7c:be:f6:8c:95:b3:0e:a5:8e:36:
a4:40:99:5f:1f:ba:58:e9:2c:4d:86:f7:10:74:85:
7d:e1:ba:a1:7d:61:db:58:12:4f:16:a2:b6:36:83:
5a:83:c2:73:60:8e:d2:cd:7f:15:f8:fc:a0:97:54:
ad:91:43:a1:ef:a4:9d:4e:e0:35:8b:fa:4f:13:5d:
8f:cc:0d:47:e1:03:35:cd:f2:1a:df:83:a1:b7:9f:
ef:d9:a0:c5:74:cf:b5:7d:44:78:93:f4:d9:2a:df:
06:e2:ea:26:73:dc:2c:c3:7b:33:03:54:bf:ca:a8:
06:94:95:ca:f4:d8:78:33:0e:5d:d7:85:81:06:22:
b3:42:40:18:74:22:15:52:d2:79:4a:00:2c:4e:9f:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:A0:1B:06:58:52:A9:E2:5A:DC:37:E1:F0:6A:82:85:98:71:30
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:21:35:24:85:18:cb:d2:de:b4:d6:70:1b:1e:82:85:8a:61:
2f:26:b3:0f:59:84:16:b3:6f:7e:16:0e:94:87:ad:d4:91:cb:
b0:c5:ad:98:7f:78:dc:a6:c1:54:4c:23:d6:0b:7c:85:eb:55:
ab:c8:79:19:75:3b:eb:bc:38:d6:13:fc:e6:11:74:8e:04:2d:
ba:51:90:92:b0:0a:66:e2:b8:de:9e:4c:ec:0e:f5:88:a9:e3:
b3:45:4e:e7:3e:1c:ee:28:fc:50:6d:ef:c5:a0:54:ef:c3:12:
38:2e:00:5a:0b:76:61:ee:cf:62:8d:46:be:77:5e:39:c9:f9:
e3:11:b5:c9:13:d4:4e:de:e0:d4:74:3d:df:9a:77:bc:ba:75:
78:9f:a2:02:bc:e0:a0:75:b7:68:b4:d2:4c:6d:3f:29:46:61:
37:9e:7e:1d:2d:76:5e:8c:8c:9c:92:50:08:4c:1a:29:e5:41:
32:d5:b1:7e:93:58:75:3d:6b:fc:7c:17:29:3e:c1:d5:bd:01:
25:3f:46:7e:d6:e7:07:a7:35:b8:d0:93:e8:e8:56:3f:8a:98:
07:15:18:2e:28:21:43:42:e8:b8:10:33:41:48:63:9e:cd:f2:
ea:b4:5b:97:3f:38:e1:09:9e:0d:7b:e6:92:d1:fe:11:ce:3d:
74:f3:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:42 2025 by rpki-client