Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: K1FhSaW+xt6ObfVu5gNjaF6eS1947RIYhXY0GeT2kYU=
Subject key identifier: 80:7C:AD:5B:1F:74:84:0A:70:2C:02:F6:CD:95:59:22:38:20:40:F3
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 01974B8DD1DD35F43E33B1E0C20501232B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 118C
Signing time: Sat 07 Jun 2025 18:01:14 +0000
Manifest this update: Sat 07 Jun 2025 18:01:14 +0000
Manifest next update: Sun 08 Jun 2025 18:01:14 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: iDqtsryoeMZBwmRQ2bfHGX/tvFphwvCIDe/NGEnrO0Q=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:d1:dd:35:f4:3e:33:b1:e0:c2:05:01:23:2b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Jun 7 18:01:14 2025 GMT
Not After : Jun 8 18:01:14 2025 GMT
Subject: CN=807cad5b1f74840a702c02f6cd955922382040f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:8f:da:1f:9a:18:27:ea:04:bb:cf:11:80:
2b:32:23:cf:21:f5:74:f4:af:96:cd:24:73:5b:5f:
1b:b4:52:8c:37:d5:8d:d7:13:25:b1:1b:82:6b:c9:
f1:d2:f6:8f:7a:57:15:71:2e:02:f8:9b:8e:f9:c5:
df:53:fb:44:58:33:e7:e5:2c:6d:fb:1c:df:7c:2a:
00:5c:a5:81:eb:2e:bf:93:cc:c0:11:67:8a:38:e5:
9c:c7:64:31:84:88:c2:56:55:1f:37:a5:fc:08:1f:
05:af:e7:d2:56:33:0d:42:89:21:60:a3:d5:af:5c:
bf:78:5c:f0:83:bc:cb:f0:91:1b:2e:6d:f0:d2:91:
58:ca:9c:57:7f:72:45:b1:10:35:b1:b0:8e:c0:ca:
a9:cc:7f:7e:78:b7:c9:28:9c:04:e9:36:b2:49:b9:
28:9b:b4:f4:d6:b5:b9:a9:9a:cb:a3:ea:1b:8a:4d:
fd:31:76:92:9b:92:95:cb:8d:56:d1:a6:29:73:b0:
b2:69:85:d3:28:ce:97:e4:db:00:42:25:e2:e6:f4:
de:91:56:9f:4a:2d:71:17:77:2e:66:d7:b5:b9:67:
de:77:9d:a9:62:53:73:0a:43:ef:75:7d:6a:57:63:
69:bd:04:22:0d:33:5f:b6:0b:10:7a:2b:39:5c:dd:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:AD:5B:1F:74:84:0A:70:2C:02:F6:CD:95:59:22:38:20:40:F3
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c4:ff:b8:18:1c:a7:7a:58:22:f8:29:8d:6c:cc:79:f1:f8:
ae:19:5f:38:df:1e:4c:f6:ce:6e:fc:2f:4f:c4:9f:9f:3c:2d:
3c:32:73:a3:3c:7f:d8:2c:14:9d:9e:6a:00:7f:ef:98:73:db:
51:a5:b4:57:01:99:c5:dd:2c:8f:3a:c5:c9:ee:e8:7c:b1:15:
1f:8e:42:ea:12:9c:49:71:52:9f:6c:48:cd:fb:87:8c:b3:61:
53:85:a9:ca:0e:01:17:eb:ae:22:7a:6b:b5:66:71:d0:c9:68:
87:69:85:fb:e9:54:88:9c:04:82:36:3f:5a:74:14:91:86:15:
5c:77:b4:25:a7:43:36:44:01:0d:a3:85:cf:43:ba:02:44:59:
f0:24:4b:f7:b3:44:19:64:10:81:39:6b:94:1a:23:f8:b6:b3:
8e:44:69:74:75:d1:5e:c7:00:55:2d:42:e7:4d:19:6d:07:a3:
5f:66:cf:f9:91:3f:92:27:4d:0f:4b:e0:8f:36:a0:2c:33:96:
da:0b:a2:cb:1a:a5:94:b3:d9:e0:dc:02:c9:b9:ec:12:64:01:
bc:7b:6f:31:34:99:da:76:e1:4d:70:43:eb:05:38:8d:99:52:
81:a8:f2:a0:6d:a4:90:1f:c6:d0:e4:14:2d:dd:83:29:e6:85:
57:a4:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:22 2025 by rpki-client