Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: QTfCAdH9MNH0bwzwnwQUoP/UWX96Xcsx6PNNebuadQs=
Subject key identifier: AA:F6:91:A3:09:98:D4:22:40:06:09:CB:AD:99:57:E1:B3:1B:67:56
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 0197B70E530B29C907CA58DFD6649E57342A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0650
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: hLe/V36BBDRTUQZhIguIKl93KCEq25gAywxTHAOQ+Ns=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:53:0b:29:c9:07:ca:58:df:d6:64:9e:57:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=aaf691a30998d422400609cbad9957e1b31b6756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:3a:30:c3:c0:1c:76:1a:74:af:9b:65:41:
e2:9f:fc:9c:28:d8:2f:37:c8:4e:49:a2:a6:8e:30:
f6:77:af:bd:42:19:fe:f9:13:8c:3d:09:25:5a:50:
b4:59:ad:44:d4:70:07:c6:34:c7:dd:4c:d7:82:91:
13:a7:b5:55:4e:48:37:40:8b:cd:26:9a:dc:b1:25:
6f:95:b3:17:ae:8a:a1:5c:9b:99:d8:1a:32:8b:af:
cf:22:7e:c6:83:d9:06:63:c4:5d:0e:5a:8b:5b:d3:
08:93:c9:ad:b3:e2:ed:d6:b2:0b:f4:44:04:c5:f9:
1c:e4:2c:9a:c6:ce:31:5c:d0:49:2e:4b:78:2c:d7:
9e:b2:c5:43:25:ea:de:af:f1:ab:8f:55:8b:04:a5:
ce:c3:47:8d:02:3c:6e:77:d5:50:3f:91:43:2d:b5:
31:6f:12:bc:e3:df:50:8c:ff:b1:17:0a:82:5a:3f:
e5:ca:46:f0:74:8c:dd:a3:03:53:6b:4d:a7:cb:4f:
59:1c:bb:d1:92:fc:75:97:61:10:89:2e:55:da:36:
09:77:13:85:e9:d4:1b:0e:ca:ee:e5:8b:72:7d:83:
43:d6:74:17:33:6e:dd:5a:fc:ed:ff:3f:55:02:84:
43:b2:14:c0:e5:9e:78:7c:68:3f:07:25:db:89:58:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:91:A3:09:98:D4:22:40:06:09:CB:AD:99:57:E1:B3:1B:67:56
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cc:e3:c8:77:6a:43:f2:5f:38:ea:0e:63:94:c8:d5:a1:54:
15:14:0e:f7:b7:7a:0c:8e:78:e8:61:1b:57:cc:e2:1f:0d:c3:
76:f5:62:21:08:72:22:b1:74:ab:5b:81:b8:12:33:9a:c0:f8:
b9:a8:ac:74:4f:44:5b:e8:55:3f:e2:5c:9e:dc:e9:d3:e8:01:
90:ca:f6:2a:e9:6f:49:80:12:fa:cd:0d:ea:5b:4f:2c:64:d4:
28:9d:cc:12:29:58:58:eb:c5:2e:11:c5:6d:00:08:d1:d5:15:
2d:b2:c2:e5:2c:55:45:bc:a0:07:46:25:61:11:93:2d:3b:fe:
cf:5a:19:65:a6:35:97:15:64:c8:ae:47:c1:61:3d:ea:d2:21:
03:29:05:5a:c8:5c:3b:3b:60:b6:12:e4:98:c1:33:59:9d:60:
32:8a:d7:aa:7c:88:63:04:d2:eb:90:ca:51:82:a0:48:7d:54:
b1:ae:51:56:b5:5e:ff:f6:68:9f:18:35:0b:eb:30:d7:13:41:
33:f5:b1:ac:f9:8b:8a:9d:a6:f5:bc:dc:18:6b:91:6d:c8:28:
18:ff:26:1f:43:bf:54:e4:3c:ef:c8:9b:7c:68:71:57:38:e5:
b9:37:b6:49:69:f8:9a:04:5b:8d:97:b8:5c:be:5b:f8:e3:e6:
b2:75:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:34 2025 by rpki-client