Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: sMAMeoyu1Jyf87cNQCDvgPzPZ64/C5nmklRSY+ZcqyI=
Subject key identifier: 43:C0:2F:8D:2C:86:35:3F:57:ED:58:5B:EE:76:2C:77:59:B3:0C:62
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 01984778646A2552D1419C28A6348A6779BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0557
Signing time: Sat 26 Jul 2025 16:02:08 +0000
Manifest this update: Sat 26 Jul 2025 16:02:08 +0000
Manifest next update: Sun 27 Jul 2025 16:02:08 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: fiFnQHt94Cx2UGLJ0XCdbFv7wwTHGAK5LPRY4rmS8UM=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:64:6a:25:52:d1:41:9c:28:a6:34:8a:67:79:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Jul 26 16:02:08 2025 GMT
Not After : Jul 27 16:02:08 2025 GMT
Subject: CN=43c02f8d2c86353f57ed585bee762c7759b30c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:5b:d2:81:5c:be:aa:10:4f:f2:07:78:17:
db:12:d4:01:b9:a7:5d:2a:96:7f:ab:06:a4:f7:58:
f8:47:23:b5:7d:dd:5f:6c:f4:9b:21:65:c1:31:2e:
54:90:97:1d:6f:00:99:4e:49:6f:06:e5:eb:81:26:
67:f2:a0:a2:5e:12:34:fe:24:cd:ba:49:f7:64:1c:
f0:dc:55:e8:8e:e1:f6:41:b4:6b:cd:20:04:64:2f:
30:8a:1b:ec:c5:6d:44:6e:06:0c:63:8a:cd:bc:7b:
7b:8c:72:95:2c:02:be:2a:9b:66:44:d0:d9:f3:b4:
5a:3b:a7:9e:6a:ec:50:32:3b:13:ec:01:8b:6e:d9:
ef:35:b6:0d:69:ac:52:f1:e9:af:59:79:a4:9c:8e:
8f:59:76:61:ee:bc:f9:06:da:04:f1:a9:90:5d:7d:
7c:80:d4:07:03:47:dd:27:ab:0a:79:71:46:0a:82:
d7:33:0e:99:71:00:bb:3b:4f:6d:af:cc:f4:10:c0:
19:42:0d:b5:67:33:cd:9d:39:72:ef:94:5a:40:14:
94:b7:e0:35:a6:ea:c1:d6:d7:e3:1a:96:b8:83:7d:
10:f2:97:43:9c:0d:45:68:10:50:86:b0:63:71:c7:
40:31:91:d5:df:2c:2b:ce:cb:a1:d6:85:70:30:c2:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:2F:8D:2C:86:35:3F:57:ED:58:5B:EE:76:2C:77:59:B3:0C:62
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f5:79:84:e4:67:33:ba:6f:58:ba:6d:05:d1:3c:36:87:15:
64:a1:99:c5:b2:3a:bf:50:3e:45:0f:a3:6a:53:48:f0:5d:d8:
ec:3b:db:76:6b:79:c0:03:62:4d:66:2b:d6:a8:6f:4d:9e:9d:
36:df:a0:7e:18:e7:93:89:c1:f8:71:4b:1a:80:1d:07:bb:e3:
4c:81:7a:d4:b9:a2:3f:c2:42:5c:a4:5f:7a:54:2e:3c:66:39:
6a:fc:d8:75:34:19:36:69:36:6a:44:5d:70:7e:1d:3f:78:cf:
2c:5b:49:d5:42:b5:0b:31:57:74:2a:3f:46:8e:44:61:d6:6c:
c3:0b:75:1e:fc:ff:8c:f2:63:a4:3e:1a:60:e6:ba:b6:3c:58:
8f:4c:23:41:36:f3:22:1f:b9:23:ac:39:50:38:15:88:c7:98:
e0:2d:ec:33:6f:4c:0a:88:39:33:8a:ba:09:7c:b7:3f:e4:00:
08:ae:69:d2:f8:1e:37:47:fd:d8:cb:63:6b:86:a1:69:bb:b0:
a9:62:23:94:f5:b4:da:0b:da:d6:7e:7e:a2:7d:83:1c:ac:3e:
8d:cb:32:d7:b5:81:19:94:37:a3:68:a3:52:31:f5:86:1d:8d:
89:0a:4b:35:5b:de:69:90:1f:2c:6c:03:c1:a4:56:1e:dc:27:
2d:08:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:17:24 2025 by rpki-client