Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: ruqkrHGEEFWx9a7gt73WTrhXKt/YDStdXe/6y7M0v/8=
Subject key identifier: AC:76:18:B8:9C:77:7F:6D:02:7E:F9:1D:0F:E0:B7:76:C4:11:69:8C
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 01974FA0D896CC139087A5A58185826112BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 029F
Signing time: Sun 08 Jun 2025 13:00:30 +0000
Manifest this update: Sun 08 Jun 2025 13:00:30 +0000
Manifest next update: Mon 09 Jun 2025 13:00:30 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: fdIOwRGtxAfKCpRBysOG9423lCgCSQhfzCNrlQ5sFt4=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:d8:96:cc:13:90:87:a5:a5:81:85:82:61:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Jun 8 13:00:30 2025 GMT
Not After : Jun 9 13:00:30 2025 GMT
Subject: CN=ac7618b89c777f6d027ef91d0fe0b776c411698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ad:b0:4b:70:5d:dc:bc:dc:57:99:ff:7e:d1:
01:ea:35:b8:e0:86:37:55:97:3b:52:00:52:1f:23:
4c:05:77:5b:bd:9d:45:02:88:df:ed:90:f3:ca:2c:
38:a7:21:69:15:bd:e8:05:64:ad:b3:16:fa:69:9a:
f5:e7:70:53:81:04:ae:a5:34:eb:89:de:a9:fa:d4:
59:80:20:d5:84:01:05:a8:a1:4b:c3:85:50:e4:15:
b9:86:22:e8:f0:46:51:a1:6e:7f:3d:e5:72:69:45:
b9:a0:78:34:47:4a:bd:59:60:5f:28:a1:05:bf:90:
92:75:e4:b4:e1:14:6b:8d:07:d0:3b:dd:95:42:f3:
29:69:bc:03:7f:9a:c0:1b:a2:f3:98:ed:54:0c:71:
d7:85:08:8a:45:ba:d2:f6:40:be:ed:2b:65:a3:15:
03:40:3f:eb:45:e1:c9:b7:d5:1c:9d:30:63:37:f8:
4a:f0:c4:07:3d:7c:d6:e5:cd:63:b1:70:96:b2:99:
91:6d:b4:68:c9:49:53:47:e9:3b:24:61:22:c3:8f:
df:b2:61:c8:63:52:53:c8:c8:78:5d:67:b9:1c:fb:
e2:7d:16:a6:ad:dd:4f:ef:08:25:ad:e4:71:be:76:
2f:ce:6b:55:e7:44:0c:7e:e1:31:62:07:9f:68:3a:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:18:B8:9C:77:7F:6D:02:7E:F9:1D:0F:E0:B7:76:C4:11:69:8C
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:71:22:5e:e0:12:33:7b:61:6b:e3:81:26:0e:f9:44:48:dc:
7e:69:1a:cb:a9:cf:26:3e:69:88:0c:57:0c:7d:e8:cc:20:ad:
e3:23:84:62:d0:91:ec:53:18:f6:7d:63:92:89:1c:15:c1:39:
b4:f9:3e:ff:51:8f:09:c5:8e:2a:a8:16:13:11:ab:47:de:8a:
6d:a0:d5:c5:a5:3a:81:60:2b:33:73:3c:71:0e:f7:c8:a4:89:
a3:eb:45:b1:a9:b8:58:3a:bd:e2:1b:fb:5d:d8:5e:ac:a8:61:
69:64:91:82:52:e1:3a:b6:6f:eb:b3:1f:77:2f:e5:18:33:2e:
ad:01:dd:12:25:42:1e:e8:19:77:f7:f4:f1:da:b3:98:eb:c5:
90:c4:07:0b:7e:6b:c6:1b:05:c1:44:d1:82:9a:ac:cb:cd:ab:
79:d6:d0:1c:c8:f2:ae:02:88:46:e1:ad:3b:29:39:e3:d0:68:
9b:aa:11:b4:61:5a:37:ca:50:ef:63:b9:7f:13:ae:3f:8f:65:
29:7c:89:41:02:53:35:46:20:25:02:95:20:11:46:65:e4:a6:
28:be:e2:60:7d:12:1f:1d:2c:c8:b6:8e:a7:90:2c:25:e6:68:
14:20:98:08:f4:ab:b4:a3:ae:18:ea:83:72:9f:a5:6a:5c:0a:
b5:2c:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:52:38 2025 by rpki-client