Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: URfOaL0VrO5PQvaZWeUbYLnbtZ0YyVUtavbHJFWrTrc=
Subject key identifier: 6C:94:32:5B:7F:F8:61:36:ED:87:EF:85:E0:05:A9:10:65:FE:4C:F6
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019935022F010D60D6CBC7B1B25BA7E49190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 05D2
Signing time: Wed 10 Sep 2025 19:02:39 +0000
Manifest this update: Wed 10 Sep 2025 19:02:39 +0000
Manifest next update: Thu 11 Sep 2025 19:02:39 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: t8D9whr7rap2zFwgj015noqm3SlJ8IVaZfs2J+58kpk=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:2f:01:0d:60:d6:cb:c7:b1:b2:5b:a7:e4:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Sep 10 19:02:39 2025 GMT
Not After : Sep 11 19:02:39 2025 GMT
Subject: CN=6c94325b7ff86136ed87ef85e005a91065fe4cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:c9:47:83:6e:98:8c:68:c8:95:a1:ec:79:
8d:7b:69:88:de:a7:28:24:f1:e7:fc:84:7c:11:22:
d4:ea:cf:18:64:9f:90:77:7f:4c:cb:39:de:69:a4:
c7:c9:04:70:9d:99:a7:33:e0:ec:08:fc:52:36:3b:
b2:ad:ea:a1:fa:bb:0e:61:87:e7:88:85:ed:66:96:
12:59:92:99:b9:18:17:9a:83:be:9f:1b:14:d5:59:
61:19:7a:5f:d2:9a:5c:df:c2:0e:9e:96:af:87:ac:
88:f0:cd:1d:a0:a2:e6:0f:8f:4d:10:90:52:e6:7b:
f4:02:16:cb:c4:ac:78:7a:76:b2:8b:6e:29:9d:73:
10:4c:d4:41:04:d2:5b:5b:13:f7:02:8c:fe:1e:24:
41:26:60:e8:45:24:50:b2:6f:75:c2:56:68:f8:91:
c2:e8:36:f4:60:97:4f:62:14:e2:d7:d5:43:fa:58:
ce:f8:13:42:85:f7:f7:d1:bf:78:c9:b5:e4:d7:6b:
89:b9:fd:14:bb:a4:8a:2a:55:c9:ad:f9:9b:50:35:
06:11:87:53:85:0e:e5:6a:44:b0:bf:e6:46:40:18:
f8:42:79:b6:34:c2:52:31:68:19:7f:e7:6d:38:fc:
c6:77:07:13:6f:1d:93:77:51:86:31:f7:0d:a1:34:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:32:5B:7F:F8:61:36:ED:87:EF:85:E0:05:A9:10:65:FE:4C:F6
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f7:c4:1d:3a:66:90:c7:14:ac:bc:2f:a1:64:22:18:e3:bc:
da:59:45:c4:47:ab:d2:94:ad:25:ca:94:89:51:6e:71:5f:15:
00:ec:bd:e6:d0:56:9f:23:65:1a:8d:b8:37:3b:73:8f:2b:61:
bb:fb:85:10:26:86:c9:68:25:0d:81:f1:30:67:db:9f:84:11:
ef:3f:56:79:d0:60:45:de:af:1c:1f:63:07:8a:7c:4a:a6:09:
ef:37:4e:63:99:fa:69:ff:78:2e:a9:f7:9d:2f:81:8c:ca:d9:
d2:ef:82:b5:ad:d1:54:f5:e0:67:b5:0a:11:3a:e7:dd:fb:6a:
1d:ae:bf:cd:35:b3:b8:96:ea:69:52:32:02:5d:b4:9f:85:c5:
26:6e:e3:ff:df:d8:20:90:e6:36:75:57:d6:4b:54:b5:49:8b:
6f:5f:65:5d:ff:60:a4:90:ba:a6:dc:44:01:cb:6f:ee:a1:32:
cb:f6:55:53:7a:33:bb:f5:ed:03:b2:9e:7d:e1:9e:64:ac:d8:
95:fe:09:f9:33:a9:5c:16:91:0a:55:d8:c7:68:7b:18:d5:55:
2b:fa:ae:b0:e3:f5:c3:82:4b:42:4e:fb:a4:85:f1:cd:d0:c9:
3a:f1:2d:69:82:4d:0b:62:88:51:95:55:1a:4c:51:c2:d4:eb:
1e:ec:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:34:23 2025 by rpki-client