Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: sBWMr6jQ75rb62lmxwk1l/moeuHV4Rbw89L3wVfrPzE=
Subject key identifier: 7C:1D:D3:84:DE:C8:E8:A0:46:84:61:2D:8C:D4:31:75:7A:77:B3:D1
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019748FA7A9AB8F2E01C7AC1872355B6149A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0617
Signing time: Sat 07 Jun 2025 06:01:04 +0000
Manifest this update: Sat 07 Jun 2025 06:01:04 +0000
Manifest next update: Sun 08 Jun 2025 06:01:04 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 9mkwYCLF/v593E4RpQ5MUPVTP4dz6yq3EzDl42ReT2k=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:7a:9a:b8:f2:e0:1c:7a:c1:87:23:55:b6:14:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Jun 7 06:01:04 2025 GMT
Not After : Jun 8 06:01:04 2025 GMT
Subject: CN=7c1dd384dec8e8a04684612d8cd431757a77b3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:6b:d6:32:e7:06:96:a8:86:9b:be:9c:ee:
25:6f:87:4c:2b:96:26:5c:b3:1c:2c:23:60:9e:1d:
09:44:56:20:08:b6:17:f5:4f:28:1a:8e:66:8e:b0:
33:e7:19:56:67:d5:32:06:c9:c5:11:1e:7e:f8:a5:
60:e3:6a:50:8a:6c:4d:f9:ee:5e:67:ec:11:48:7d:
dd:67:3e:3f:df:e1:db:71:ed:c6:aa:ad:4c:9b:16:
87:db:e7:76:99:4e:cf:e9:ed:f4:ae:84:20:cd:e5:
d8:9f:f4:0f:43:d5:c1:14:77:07:3e:2b:aa:9d:77:
b8:ae:6d:b8:6c:4b:77:14:65:38:87:d6:e9:d9:b3:
6d:b3:24:0f:8a:ca:13:89:f0:ee:fe:84:8e:dd:8b:
78:4b:ea:3a:1c:c6:37:82:7e:0c:21:d7:2f:63:f7:
56:15:1c:11:50:91:3e:2a:b9:b5:4b:8c:5c:9a:1f:
d3:c1:0a:e4:81:82:7f:01:5a:95:e8:37:b0:af:89:
a0:c2:09:42:00:74:d9:51:b3:42:50:bb:ac:62:98:
b3:a9:63:5a:b1:9d:80:81:c2:5e:a6:fe:57:b5:ed:
29:40:f4:87:aa:80:dc:cb:7d:6b:57:0a:35:76:fd:
d2:9e:c3:d3:45:4e:02:40:c8:26:20:19:22:04:49:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:D3:84:DE:C8:E8:A0:46:84:61:2D:8C:D4:31:75:7A:77:B3:D1
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2a:44:23:dc:b3:db:38:73:a5:62:3b:e2:d3:f9:3e:70:d0:
c0:12:8a:3d:d5:fa:98:2e:ff:fd:e7:79:b3:3d:c5:5d:f5:37:
51:2b:1f:9e:35:eb:02:46:ce:d3:05:d2:2d:01:cc:a3:20:b5:
00:ea:da:dc:24:f2:c2:9a:df:c2:f3:33:43:62:4f:95:fa:84:
59:c9:93:72:be:b5:a5:43:c0:54:c3:00:2b:63:25:b1:35:e0:
cc:e7:be:52:0c:05:99:e9:ed:dd:09:f1:bf:be:fe:3c:d7:e0:
5e:30:c1:2e:2f:25:5c:59:f7:a8:da:b9:da:f0:8c:50:a4:ed:
94:d1:99:9a:68:e5:a4:d7:25:87:0d:7b:c5:65:3b:14:c6:8f:
03:dd:67:68:67:49:d8:05:a7:78:b5:2d:5c:0d:6a:fd:b2:4d:
36:f2:c1:9e:ca:a6:e5:d2:ee:b1:57:2f:c9:26:cf:f9:e0:a9:
fe:65:23:01:15:1e:de:5a:82:11:51:9c:f6:3c:0a:20:33:aa:
0a:c3:f8:6f:fc:79:4d:bb:f7:a8:e5:e7:f8:0b:91:7d:21:b2:
24:f1:02:ec:a9:71:90:95:12:3e:d8:f1:16:a8:f2:02:a6:3e:
30:57:e5:78:e9:45:02:a4:79:7b:a5:b0:38:4d:0d:96:bc:57:
8a:b9:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:28:16 2025 by rpki-client