Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: aIrfoNbv8qNrOQCgDN+iNIkaRsNlRWq9Ucc3OUp2v7w=
Subject key identifier: 23:33:B1:C9:23:6A:22:13:AC:34:AA:59:D3:6D:82:6B:AD:BD:B0:74
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 01984777CF0EA9D3CE59F6EC284723AF6980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 0955
Signing time: Sat 26 Jul 2025 16:01:30 +0000
Manifest this update: Sat 26 Jul 2025 16:01:30 +0000
Manifest next update: Sun 27 Jul 2025 16:01:30 +0000
Files and hashes: 1: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: JtVDA+GpuuCTRb/t6m5dEsPIC8/1REUHKhe0Oop5rGs=)
2: ptCjyawSJ9frfP9fH_ikMswCnsI.roa (hash: qlAjQ7L6msxhMlwj1dEaHE32m8HH4N1buR0Bga+2/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:cf:0e:a9:d3:ce:59:f6:ec:28:47:23:af:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Jul 26 16:01:30 2025 GMT
Not After : Jul 27 16:01:30 2025 GMT
Subject: CN=2333b1c9236a2213ac34aa59d36d826badbdb074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:18:f7:fa:c5:35:09:12:77:05:1a:37:87:
d0:4c:21:05:40:6e:3c:96:ca:ab:d2:71:e6:d4:dc:
f8:c2:26:73:ce:a7:1f:37:1b:6c:77:c2:fd:38:30:
97:1e:c9:0c:41:52:f6:75:d1:ba:3e:39:48:96:d2:
62:14:51:c2:58:74:d4:a4:49:87:f7:8b:06:91:4a:
d0:01:44:2f:cb:2c:e4:17:c4:1a:cc:80:89:bf:be:
1d:26:3e:f3:7e:ca:84:de:3c:43:55:33:11:36:61:
d7:77:05:87:a9:50:b5:31:64:2a:35:64:b2:52:97:
ed:f0:60:93:47:b1:e5:be:1a:18:44:72:72:dc:92:
13:d2:7e:98:de:71:85:23:09:34:5c:ad:09:ea:3f:
53:0c:bf:85:18:08:8e:30:ea:8d:e1:66:08:46:63:
08:47:b2:3d:63:56:44:81:77:11:20:22:30:79:dc:
3a:78:fb:ce:69:4d:1d:d5:7d:33:89:43:49:b7:a0:
15:c7:65:ae:dd:46:f5:72:d5:07:86:05:0e:91:f9:
27:aa:92:4f:d3:bc:42:12:12:bf:c3:64:50:b2:82:
92:a0:ff:15:fc:b7:50:99:c5:65:98:b4:c8:57:c6:
48:da:00:d0:f3:90:91:b4:08:15:c8:af:f6:2b:73:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:B1:C9:23:6A:22:13:AC:34:AA:59:D3:6D:82:6B:AD:BD:B0:74
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6d:ca:f5:e7:11:a2:b0:c3:fd:1d:28:d8:96:fc:4e:b2:b4:
3f:25:e2:db:65:37:ba:02:03:a1:b4:78:ab:f5:2c:42:88:01:
8d:d2:d7:7d:6e:e3:22:0e:b7:db:2d:02:f5:6f:78:07:fe:d9:
95:c9:03:91:2f:32:51:f7:2f:1b:e5:28:a4:75:cb:d8:49:20:
ec:93:8f:75:e3:c1:83:bf:94:65:28:b0:84:57:86:8c:d3:4f:
c3:59:f6:72:20:4d:37:22:f1:c2:21:6a:cc:94:87:4f:55:7e:
bc:6b:6f:37:bc:df:d4:9e:57:4c:6f:40:9a:64:3b:71:f3:30:
f3:0e:11:0a:2a:1c:d2:4f:12:fc:95:d9:f2:1c:00:e0:37:e1:
dd:dd:65:07:9d:5a:6e:78:76:2e:ef:e2:37:c0:c7:75:e5:df:
81:cb:39:74:2c:d3:94:56:a0:5c:2c:fa:a0:f2:73:84:c4:e7:
35:d7:e0:9f:93:a1:80:a7:93:1a:51:9e:0d:6e:59:53:78:82:
a3:d2:ed:58:47:5a:7c:67:c1:2b:a0:ef:a0:7b:d9:06:3d:ff:
0e:ee:1b:8e:c4:81:0c:56:3c:90:db:ad:a4:e2:2a:67:dc:6a:
01:f6:70:a7:9d:5f:e3:d1:ad:53:e9:5a:df:cc:3a:68:d1:43:
26:58:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:34:40 2025 by rpki-client