Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
File: 2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json)
Hash identifier: RRkxxOD6vOVWyZz62xdGWpRJeNXRIr+LL9QlHWCBicA=
Subject key identifier: CD:5A:F1:F8:6E:8E:90:87:5C:B2:C7:74:E3:6D:2D:1F:BC:42:DC:E2
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial: 0197477966DB1EAD4AE79847F6DF2F701EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
Manifest number: 024C
Signing time: Fri 06 Jun 2025 23:00:27 +0000
Manifest this update: Fri 06 Jun 2025 23:00:27 +0000
Manifest next update: Sat 07 Jun 2025 23:00:27 +0000
Files and hashes: 1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: WXcXjnXL/5yEqTDw7fB010Xz2LjZbufy9sSb8NpYbbo=)
2: ktw-FkrMXPNswM8IraWY-5p7J3I.roa (hash: jzXeR9Bv5fkU8m0kPMqZ57dXqdxvNx+7MlrJIZfIQC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:66:db:1e:ad:4a:e7:98:47:f6:df:2f:70:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
Validity
Not Before: Jun 6 23:00:27 2025 GMT
Not After : Jun 7 23:00:27 2025 GMT
Subject: CN=cd5af1f86e8e90875cb2c774e36d2d1fbc42dce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:bb:7c:5a:44:f9:18:03:de:88:68:00:a1:
a3:87:22:74:4a:28:fa:cd:cd:99:c1:75:e2:b0:e4:
d1:1d:c9:79:a7:cc:1d:ae:2d:b5:bf:55:77:0e:a1:
9f:c3:4b:cb:75:c0:08:ed:56:f6:e5:14:42:0a:a7:
47:ac:69:4f:ed:bd:88:df:e5:62:87:f8:17:ca:d1:
fe:2d:fc:fa:c8:64:d6:38:42:ff:ff:69:22:ee:cb:
4c:5a:45:5b:2d:6d:e9:c5:35:24:fd:fe:81:98:eb:
74:14:df:d8:9a:81:27:dc:65:62:32:60:37:3d:f1:
c6:8a:99:f1:08:3c:2c:97:ae:25:b6:b1:2c:78:bc:
f4:8c:1e:0f:35:3a:c6:cd:79:ba:3d:21:da:9d:e2:
5d:de:32:3f:ec:3b:2b:b1:38:61:9a:7c:bc:b4:b1:
b8:3a:6b:d0:d8:b0:70:f5:7e:33:e2:1c:7f:90:36:
a1:9b:10:8c:af:23:64:cb:d4:2a:9e:dd:fe:14:d1:
7e:11:b3:4d:65:0c:bb:da:7f:8d:b6:99:66:ea:58:
22:e0:2d:63:37:0e:ec:0a:bc:f0:42:56:69:fa:94:
ab:26:e5:cb:2d:52:91:7f:82:a9:8f:53:54:3d:bf:
09:9e:bb:80:19:c3:98:74:eb:5e:23:a2:b6:70:3b:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:F1:F8:6E:8E:90:87:5C:B2:C7:74:E3:6D:2D:1F:BC:42:DC:E2
X509v3 Authority Key Identifier:
keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:73:41:34:6a:ee:4c:30:8e:5e:22:8b:8b:f6:d5:1e:aa:fb:
f2:c4:0f:1f:ea:f1:8e:9e:de:98:a0:11:2b:a9:f8:6e:2a:c7:
81:82:94:6e:38:c6:ca:42:df:7b:31:13:9d:96:9a:5a:64:3d:
13:6c:4f:0b:68:05:63:7f:80:7b:d9:b1:b9:e2:cb:79:64:4f:
c4:ed:10:e4:ed:c1:aa:7a:7a:e4:12:23:5a:4e:a1:be:f5:fa:
b4:db:84:b6:75:63:23:91:3d:b4:50:20:05:ec:e8:d3:a3:5d:
f2:55:be:25:9a:45:0b:db:9d:80:22:ab:fa:fd:c4:7f:e4:81:
a0:08:1b:ee:b9:a7:89:3c:2a:04:b3:98:db:2f:ea:97:3b:31:
08:36:ee:48:f7:dd:f1:94:b8:9f:fc:0b:73:8a:3c:05:bd:f2:
b8:3b:28:15:3a:97:fa:c3:ef:ec:97:22:22:9e:cf:18:d0:7e:
43:84:2f:0c:cd:c2:b1:6f:c8:41:e0:29:2e:45:7e:d6:ba:db:
72:27:35:73:2f:ba:36:c8:7b:f6:be:41:b7:23:8f:87:98:4e:
e9:2e:5c:c1:67:87:fa:77:b4:68:a0:99:d4:27:34:21:45:34:
07:ee:a3:98:6f:5c:90:56:36:e7:51:89:17:77:97:f5:df:16:
b3:fb:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:43 2025 by rpki-client