Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: YwC7oF5N0KBggOSRXFwDjvkAuNuJaOfbbAIHsAmAreU=
Subject key identifier: 94:04:84:5A:1E:4B:AF:A9:2D:72:F6:A3:9F:53:80:61:85:6A:A2:BD
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 019844E36704535C4B251804B88A67F67602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 04:00:10 +0000
Manifest this update: Sat 26 Jul 2025 04:00:10 +0000
Manifest next update: Sun 27 Jul 2025 04:00:10 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: AEOiX992DXDxOqCkrAjc+l49x7AWFZu4DFqqoHqdHq4=)
2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:67:04:53:5c:4b:25:18:04:b8:8a:67:f6:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Jul 26 04:00:10 2025 GMT
Not After : Jul 27 04:00:10 2025 GMT
Subject: CN=9404845a1e4bafa92d72f6a39f538061856aa2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:2e:28:c7:46:fe:aa:f2:4f:4a:39:22:78:
81:9a:67:b0:90:19:a7:9e:2d:1c:d7:9f:d0:d3:de:
23:a5:f0:38:c4:5b:96:33:45:13:1e:4c:74:c6:89:
6a:5b:a9:f9:54:b2:25:de:c5:df:30:ad:6c:26:b6:
99:bb:f8:17:81:ab:60:10:cc:d2:8c:96:3f:69:6a:
ca:32:b9:b6:13:a8:33:8d:f7:6b:b1:b4:50:31:8f:
9c:35:5e:bf:6a:61:c7:fc:06:2e:24:23:04:a4:5b:
3b:91:6a:12:f6:88:17:d9:b2:36:8b:e6:84:b6:0a:
ed:34:fb:74:be:df:2e:50:e5:f3:da:62:f9:79:2a:
fb:94:9b:e9:9a:67:f0:81:1c:47:f3:51:86:36:ef:
83:26:66:b4:ab:d5:4d:5a:a6:d3:18:7d:ea:6c:07:
ed:d7:2c:56:c0:46:1b:67:0f:af:bf:98:5e:d7:cb:
de:51:5a:6a:1e:62:ca:10:a8:65:62:57:af:f6:76:
5a:8c:ac:93:11:c8:d9:72:6f:36:84:15:ac:ec:19:
7d:c6:ec:f6:0b:71:09:40:c4:13:1a:62:b7:8b:9e:
00:4e:24:e7:d4:3e:51:8a:d2:2b:96:d0:96:92:e5:
f3:8b:69:26:b8:72:55:05:45:de:e1:07:7b:81:75:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:84:5A:1E:4B:AF:A9:2D:72:F6:A3:9F:53:80:61:85:6A:A2:BD
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:4c:6f:74:ca:2d:24:d4:56:40:f7:95:c4:34:d9:e3:66:
75:f7:9f:9b:0f:54:a1:07:ef:3c:a0:23:2a:79:63:1a:5f:99:
43:9b:72:97:59:83:b4:ed:03:67:bc:6b:f1:c6:22:da:5e:2a:
21:8f:6c:fa:2e:e8:fa:db:7c:22:4e:d5:7b:df:57:b9:b7:c0:
c9:0c:2f:d3:cc:b9:fe:7d:54:c0:fb:b2:43:8f:5a:10:68:03:
74:6e:b7:61:92:5d:bb:34:50:69:9f:cc:a1:b0:81:08:a1:ad:
e5:83:6f:28:82:e9:96:88:70:83:86:48:63:c7:5c:b0:59:38:
13:11:69:27:40:2d:3a:1b:66:d5:4e:2e:8e:f7:59:a0:fd:d0:
d8:ea:7f:3f:4b:02:b2:12:b4:ab:11:5b:ca:be:28:09:b6:73:
69:89:18:6a:0a:af:b1:9a:e3:f0:6f:64:1f:bc:50:69:11:bf:
b5:3d:05:03:38:c8:8d:83:9b:36:5d:e7:c4:42:d0:39:a5:4a:
ab:70:69:c1:db:3b:85:d2:23:48:01:e3:19:db:5a:ff:2a:44:
71:71:a9:7a:f6:fb:c7:9a:8c:97:bf:b8:a4:56:fe:9e:1b:1e:
25:e5:74:b6:34:91:9d:d1:d5:d0:fd:52:c2:40:e6:5f:7f:da:
6d:1c:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:23 2025 by rpki-client