Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier: MxRc4Uphe4lJ8pxLB34TdqMKD1K4J2kHgf4X51WvCZY=
Subject key identifier: FC:00:C1:A8:80:72:D7:5D:C6:2F:8F:AE:3F:11:2F:4B:50:52:7B:6E
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 0197B6D7B239B622E5915FE65ADD033283CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number: 0661
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: VekbWP+C5mT8n1o9eVKdY3j47XS+jtOAjvju8PmXZDw=)
2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b2:39:b6:22:e5:91:5f:e6:5a:dd:03:32:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=fc00c1a88072d75dc62f8fae3f112f4b50527b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:bb:bb:8e:7e:63:a6:1e:c9:21:29:4b:2d:
12:dc:a8:a8:b1:27:e1:24:9c:ce:4a:de:9b:cc:cb:
f6:32:f2:5b:4b:00:48:12:a5:e8:79:49:e8:eb:41:
ca:fc:03:73:13:85:2d:45:05:b3:93:b8:0e:b6:1b:
1d:07:4b:c8:5d:99:00:5a:26:1c:63:e8:b0:36:61:
7f:94:ac:0c:a6:fa:56:60:cb:89:c2:40:72:78:8b:
63:2d:2c:ea:9f:f3:3c:ea:84:64:f8:77:42:06:f5:
c6:d2:87:14:56:7b:c4:70:33:46:4e:59:7d:28:a8:
b0:84:cf:aa:7b:1b:35:aa:68:c2:f0:83:67:59:44:
62:d0:3a:5e:5b:f6:25:6e:78:73:b1:29:ca:69:76:
b0:b1:ec:66:85:ab:77:f0:3a:7b:2e:ec:97:58:7a:
9c:1f:6d:4b:98:c6:91:6a:c6:0b:24:4a:a2:33:3a:
28:05:03:67:44:d1:5d:61:64:53:e2:c2:07:15:00:
90:75:ce:e0:77:2c:81:2e:3f:5e:64:8c:c5:70:c0:
b4:63:c9:42:9b:96:76:66:13:7d:52:4a:d8:f8:ad:
57:db:e1:3d:0c:65:d9:6c:69:f1:c1:c6:b5:aa:b1:
cc:05:bd:45:c1:a1:43:90:ce:1c:09:a1:40:50:c7:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:C1:A8:80:72:D7:5D:C6:2F:8F:AE:3F:11:2F:4B:50:52:7B:6E
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f1:40:e9:f5:a0:22:58:7d:e7:3e:e9:c8:13:ee:da:d8:0a:
7b:ff:ce:32:65:59:f1:dc:72:68:57:7b:c5:fa:4e:53:23:ba:
90:5a:b5:ec:47:60:82:2c:e5:6d:9f:38:ad:0a:ed:5f:36:d8:
6b:b3:4c:d5:c6:7d:35:33:8c:11:33:3b:36:a1:08:70:01:04:
da:f0:46:ee:b5:61:72:36:e7:46:5b:b7:16:06:ac:3c:15:40:
9a:9a:a1:75:7e:69:e1:b9:bb:64:75:1b:b3:47:23:12:bf:de:
b3:07:3a:c6:63:69:77:30:f7:3b:29:4b:1c:35:c4:33:53:c4:
16:81:23:e3:40:17:08:3a:46:c0:2e:a1:78:26:fd:5e:c0:7c:
7a:7a:cd:e0:6b:3b:bf:56:26:ef:7f:a0:04:59:d8:d1:32:f1:
ed:09:f4:91:69:40:21:7c:e8:f1:2a:ab:63:94:6c:55:08:21:
e3:16:1e:d8:48:a7:ef:a2:88:5b:f4:3f:fa:2f:f1:7b:d3:e0:
37:a1:28:47:30:aa:9b:31:8b:0f:57:05:ad:79:3b:30:74:a8:
30:47:ac:7f:65:3f:2c:ec:89:3a:4a:05:bd:ad:05:fc:80:2e:
6e:d7:3b:22:c5:1b:f0:af:b3:0e:eb:3c:0d:af:58:54:94:b5:
d3:1d:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:57 2025 by rpki-client