Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: tV9P3qUNHUD/l3uXPUMqSuPs2ojglnQbWOHEYx8rtGY=
Subject key identifier: 49:EC:A2:06:18:FD:39:39:16:75:26:5C:E3:32:A0:8E:D4:E8:52:EB
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 0197500F031C76DD377D322B7C0777BA6F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0D7D
Signing time: Sun 08 Jun 2025 15:00:50 +0000
Manifest this update: Sun 08 Jun 2025 15:00:50 +0000
Manifest next update: Mon 09 Jun 2025 15:00:50 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: OfRpXq3EWykiD8LZyFDoeE9kc14jIPfrpkT0q65yFaQ=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:03:1c:76:dd:37:7d:32:2b:7c:07:77:ba:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jun 8 15:00:50 2025 GMT
Not After : Jun 9 15:00:50 2025 GMT
Subject: CN=49eca20618fd39391675265ce332a08ed4e852eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:fd:3d:68:86:5f:94:67:cd:70:9a:bc:74:
44:29:44:b1:f3:78:f7:3e:92:e0:8b:da:8c:d6:5e:
3f:ee:58:14:29:11:3a:db:51:6f:75:92:ea:3b:38:
d9:9b:76:69:4b:22:e0:70:cd:fe:5b:1b:8a:84:f5:
57:8f:df:e5:ee:cd:01:1e:40:47:d1:49:57:f1:3f:
6a:68:02:b9:94:6d:9c:52:71:12:99:11:ec:23:1a:
e3:7e:5a:a4:8d:53:1b:db:bb:24:ac:23:63:c2:b2:
32:4c:2b:09:79:53:7a:d3:f4:ca:7a:84:dc:38:4a:
a5:b0:38:95:81:49:9b:39:d0:95:f5:05:cd:86:f8:
91:b2:8e:95:e3:65:cd:da:d7:60:c4:b2:4b:e1:d3:
67:6d:e4:7f:a0:57:c0:04:0c:31:3d:0a:c3:c2:c2:
a9:54:ab:26:3a:b5:d7:01:66:39:6c:47:9e:f3:78:
b9:cc:81:3b:fc:e8:32:f3:14:e4:7a:84:bc:8e:b0:
6c:a1:a9:81:31:d3:08:0f:41:42:df:3b:0d:53:30:
3f:00:47:7d:7c:2b:e2:60:62:7d:53:5d:2f:3c:26:
b9:88:e8:99:fc:22:d5:ae:17:2b:6c:4b:51:e4:3f:
86:9e:ff:2e:b8:b4:73:13:4e:28:72:3c:1e:1e:7e:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EC:A2:06:18:FD:39:39:16:75:26:5C:E3:32:A0:8E:D4:E8:52:EB
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:43:93:d5:b2:d5:1e:fe:5c:1b:b4:c6:a4:6b:6b:82:4b:cc:
c8:35:9d:30:d6:f7:88:1e:1d:de:5c:6a:52:f8:d3:3c:f0:3f:
c4:9d:7a:54:7e:5f:36:90:a4:a7:ee:a5:06:45:c1:3e:84:70:
2a:3c:ba:68:64:59:f2:bc:64:28:de:a5:38:41:9f:da:15:35:
34:ec:18:8a:d1:3b:b2:54:2f:11:42:0d:d9:d4:25:2e:2c:8a:
b6:46:72:55:de:3e:3a:33:e2:c5:87:80:2e:81:a5:85:f6:0f:
4f:c7:0f:43:3b:46:50:9d:af:80:28:7d:53:2a:f3:83:29:86:
11:e5:0f:12:d7:08:0f:19:60:32:5a:ae:c0:26:e1:bf:12:80:
c9:32:9b:c9:10:ae:83:fb:95:2b:1d:78:84:0a:a2:3c:e0:18:
40:51:28:3c:5c:e2:66:7e:77:d6:9f:f9:7d:74:1b:93:66:c3:
9f:da:68:46:f5:27:1d:2e:a4:10:41:7f:37:66:5f:b3:b0:9c:
54:a9:8e:58:ac:52:eb:1e:e2:d8:b0:0f:88:90:97:9d:a3:da:
e7:e7:bd:c7:8f:34:aa:56:47:53:99:06:6e:dc:76:6b:20:13:
7c:1a:94:54:f5:20:35:3e:56:ee:53:3f:f9:e3:f6:68:f2:b7:
72:64:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:06:49 2025 by rpki-client