Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: 61wgN4rPfofWMq7OiwFnrZQOLwmpM/NMXLVE4MFTROE=
Subject key identifier: AD:9E:2E:CC:A0:D6:49:58:99:AC:1E:AF:66:31:FF:54:AC:2C:8D:A0
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 0198D6CD17DB4F2737E0012CBD395B242888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:21 +0000
Manifest this update: Sat 23 Aug 2025 12:00:21 +0000
Manifest next update: Sun 24 Aug 2025 12:00:21 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: cVJJY+xiIA0T+yW5xDTQpubd/eU1J9MG8vMgZQC21Ik=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:17:db:4f:27:37:e0:01:2c:bd:39:5b:24:28:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Aug 23 12:00:21 2025 GMT
Not After : Aug 24 12:00:21 2025 GMT
Subject: CN=ad9e2ecca0d6495899ac1eaf6631ff54ac2c8da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:71:60:e3:ac:b9:3a:53:dc:4b:9b:4d:d6:
3c:a6:38:b4:6c:a4:35:44:17:2d:81:d1:ca:76:9a:
af:04:b1:70:41:13:8e:d6:05:5d:20:a1:dc:12:6b:
f3:60:fc:ea:c7:8f:6e:07:ef:32:66:0a:81:d5:db:
61:98:47:56:33:4d:0c:28:71:64:9e:db:95:8c:25:
a8:ff:a5:7e:d0:08:9b:16:3f:13:fe:e5:c8:b9:68:
f3:96:30:12:cd:75:21:c2:ad:48:b2:f6:18:aa:2c:
93:49:65:41:03:51:8b:b2:f4:ce:28:40:65:5a:37:
71:fb:0d:54:3a:de:cf:84:e0:16:fc:b7:0e:8f:69:
70:79:9a:84:96:0d:78:b5:bb:fd:56:27:bc:81:23:
b0:bc:9f:5b:0a:6d:81:91:5d:51:d4:cc:a2:ef:5f:
fa:51:a5:dd:8d:6a:a5:0d:30:91:9f:ec:d1:46:90:
00:f5:0b:04:53:b5:7c:7e:47:84:52:95:db:ef:da:
66:b5:c0:d6:24:09:35:8f:b0:e1:34:d0:03:fc:20:
e4:4c:0c:5d:2a:1c:97:c2:84:5d:e3:42:42:1f:d5:
6a:63:88:fb:d0:e7:74:09:fc:b3:f9:d3:c0:32:7f:
44:b0:05:9f:24:9c:0f:a6:4d:41:5a:03:d3:6e:57:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:2E:CC:A0:D6:49:58:99:AC:1E:AF:66:31:FF:54:AC:2C:8D:A0
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:7d:32:74:88:1c:8f:43:f9:7a:b2:be:38:e2:db:42:4c:
9e:c0:cf:3d:5d:14:47:36:f8:84:3e:97:22:61:cd:48:35:99:
d7:bd:45:26:4c:06:1e:a7:c5:d9:94:20:0f:02:c6:64:29:09:
c9:34:c4:79:00:b5:79:62:fa:9d:64:6a:83:ff:25:65:53:7f:
7b:95:53:b3:30:46:1b:8b:4f:ac:51:9b:b1:ea:6a:a7:38:63:
9f:f8:ca:cc:6d:f2:b6:6f:c5:48:af:e8:8d:e6:08:ba:e5:6a:
6b:83:ca:ee:64:12:38:cf:5d:e3:21:dd:3a:cb:62:e8:d7:e8:
a4:18:aa:b8:91:36:3e:5d:c7:2c:07:8a:3b:31:8d:91:96:33:
73:9c:5b:ee:be:81:f4:1c:9a:b9:1f:43:98:cc:2c:23:f8:0f:
97:86:23:1e:73:19:19:23:1d:45:65:89:f8:5e:18:b8:c6:dd:
a7:31:a7:40:6b:18:d9:8f:5d:6b:46:d2:de:52:3f:f1:dd:3c:
67:98:fd:fc:05:d6:bf:07:61:05:c7:58:64:5c:7b:80:94:da:
5f:56:71:41:b0:81:26:a3:d5:69:31:50:d4:f0:1d:75:1d:6a:
50:42:3a:da:0d:61:de:0d:07:33:6f:a7:78:52:07:62:30:d3:
1a:a7:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:20 2025 by rpki-client