Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: 67Ey3F4SrCiEpVHGB3ImtfD+aBZwWxmSrZJoMuzEO7o=
Subject key identifier: AD:AD:CC:6F:57:76:E5:C7:90:10:49:29:F2:A9:5A:63:7B:C8:81:15
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 01975DCB9289FD3B3FB105454A9A809E91AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 045C
Signing time: Wed 11 Jun 2025 07:01:51 +0000
Manifest this update: Wed 11 Jun 2025 07:01:51 +0000
Manifest next update: Thu 12 Jun 2025 07:01:51 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: 7E2aROTiH1qKF7qDNRA0GrgXhEIzMFNBF7SPJd44uTQ=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:92:89:fd:3b:3f:b1:05:45:4a:9a:80:9e:91:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Jun 11 07:01:51 2025 GMT
Not After : Jun 12 07:01:51 2025 GMT
Subject: CN=adadcc6f5776e5c790104929f2a95a637bc88115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:06:3f:7d:99:0d:d2:c6:2e:21:ce:ca:c7:
09:4c:ba:87:7f:2e:89:f9:f1:c0:3c:d9:28:97:c8:
e1:21:6a:47:45:60:86:9f:1e:1f:f5:dc:fd:60:de:
e7:f1:c6:99:3c:44:0f:bf:72:6e:1d:27:7d:17:2c:
7b:22:8d:9c:f4:e3:93:f2:0f:ea:fd:db:b4:a2:86:
97:b5:d6:d4:4b:2a:ae:85:09:05:89:d0:25:f6:ca:
a1:29:ae:73:1e:d6:36:a9:ef:34:cd:50:33:59:a4:
34:1c:94:ed:3c:32:02:2d:f9:de:24:91:0a:96:26:
7d:7a:b2:04:62:be:96:3f:5b:84:d8:5c:e1:b4:de:
75:02:3f:48:17:46:d6:93:d8:1a:9a:71:e5:8b:88:
0d:0b:d5:64:7a:41:bf:69:18:a6:f5:3a:f8:25:02:
31:13:57:40:d5:f3:1a:9b:88:c2:60:7f:02:4b:15:
65:b0:6b:43:44:71:e0:58:ed:9a:25:1a:ac:47:d5:
6a:ed:74:8b:59:e3:5e:50:58:dd:3e:69:6a:bf:8c:
22:93:38:72:cf:85:cd:39:61:15:03:a0:61:ab:07:
e2:11:f5:3e:ef:b4:66:9e:45:95:92:43:e6:5b:e6:
64:0a:1c:03:56:c8:f0:4f:52:a0:eb:d7:75:bf:22:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:CC:6F:57:76:E5:C7:90:10:49:29:F2:A9:5A:63:7B:C8:81:15
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9b:5d:8f:1c:c1:8f:1c:e4:ce:c6:30:11:ca:fd:0e:9e:6a:
4f:67:99:aa:1b:b4:93:a6:6b:5d:71:29:f1:db:17:fb:34:1c:
fb:8f:de:bd:e3:8a:05:b1:29:b8:ad:94:37:3d:6e:28:f8:b3:
a2:1b:c3:4f:f6:89:e8:14:b9:da:2b:91:10:ae:e0:9f:b0:59:
f5:9d:a2:e9:b7:e4:5b:42:5e:05:8a:b0:eb:1a:5d:27:cd:63:
f3:38:8e:9d:9d:0e:1a:10:4e:45:24:56:96:c6:7e:91:16:73:
d6:c1:30:df:b4:43:ad:a1:c4:b3:c1:c9:4d:97:56:d6:0c:fc:
55:49:dc:fc:49:85:5c:47:a5:57:13:6c:03:de:1a:0b:32:6d:
64:a2:7c:f0:e8:53:de:b7:32:d7:4e:68:9d:b6:93:dd:2d:5e:
16:65:e2:ca:81:85:a3:3f:63:56:00:e5:89:71:09:d9:e0:d1:
20:6e:6a:5b:b2:33:f0:67:1c:19:1d:0b:27:f1:19:71:3b:d4:
a7:8c:7d:e2:25:67:ba:7a:6a:f2:c7:dd:b7:f6:a0:77:90:dd:
ee:dd:7a:32:7b:41:9c:4e:f3:3c:0e:cc:5a:42:28:0d:b1:95:
c3:ba:40:50:a3:66:2d:59:a5:a7:ae:3f:40:5c:18:29:09:b3:
a6:7f:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:09:08 2025 by rpki-client