Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: 0Ldhr+eNGDrioHLXtc7F5ZtCn3FPXRQEHtCmCEv77BA=
Subject key identifier: 3C:9D:2D:D0:DA:D2:E0:4E:5E:5A:25:18:3B:01:F5:AF:E1:B3:F5:3B
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 0198D65F8D401B6C9478A635D78240E81FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 051F
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: c0oZvADasqC4h8o97qFA3DapCQQ6BB4nAl7xqn9TvqU=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8d:40:1b:6c:94:78:a6:35:d7:82:40:e8:1f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=3c9d2dd0dad2e04e5e5a25183b01f5afe1b3f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:fb:71:ec:44:55:f4:09:66:3d:ea:c7:9d:
e3:c1:bb:73:47:33:65:f6:fd:6b:34:b6:40:91:19:
c0:17:f4:a2:5c:dd:be:e3:c1:05:d5:3c:bc:b7:92:
2d:cc:27:e6:d8:68:aa:b6:0a:2a:19:a6:e7:db:80:
95:c1:b7:8a:e1:e3:3d:23:b6:dc:f2:c2:c5:e8:5f:
e0:aa:b2:0f:f0:d6:0a:45:d0:3f:32:b9:a7:f8:17:
cb:57:70:5a:67:25:9e:09:93:b8:2b:46:2c:76:b5:
af:a5:42:bd:92:32:9b:14:35:b9:a9:15:44:fd:6d:
81:0d:33:2c:a2:e4:4e:97:9e:f5:67:51:49:09:47:
92:14:c0:81:b6:7a:29:05:20:8a:4b:89:66:ec:8a:
28:38:8d:8b:e4:23:bb:5f:38:4b:d7:0d:6c:18:f3:
7a:7d:3e:70:d7:bc:c0:9c:43:6f:33:22:7a:68:df:
48:34:1b:b0:b6:51:05:66:0b:ef:e2:ca:33:52:f8:
e8:48:71:be:ec:aa:ea:14:15:2d:77:e7:bf:9c:0b:
32:d1:60:e9:f4:9c:5f:be:18:cd:96:b5:64:61:3a:
29:d1:f6:6c:7d:54:27:26:37:7f:c3:c9:bb:fb:80:
85:a4:f9:22:b1:19:92:1d:06:50:d3:7d:7a:d0:bc:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:2D:D0:DA:D2:E0:4E:5E:5A:25:18:3B:01:F5:AF:E1:B3:F5:3B
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:cf:bd:07:6c:99:24:af:09:69:69:f2:e9:6c:06:c0:96:
c8:1f:93:86:d8:69:fd:ec:7c:7a:58:5b:1c:6c:59:ad:41:65:
ea:f0:3d:68:c8:16:2a:78:38:96:12:41:4c:56:60:eb:ec:43:
f2:0d:8a:99:e4:9d:77:eb:54:00:88:78:97:0c:6b:e4:b4:f4:
2c:f4:11:2c:d8:79:07:c0:50:e2:dd:8f:48:96:05:0d:7a:8c:
e6:6f:6b:67:72:81:12:4f:9a:41:c7:5a:f7:a7:ab:03:c8:42:
1e:93:40:c6:7d:66:12:6f:7d:c4:a8:43:c8:fe:0f:a4:8d:2c:
d4:33:fa:b3:44:df:a6:73:bb:a0:47:5c:7f:82:d2:33:28:eb:
52:cb:df:80:ac:c8:d1:82:44:34:71:0e:6f:f7:17:7a:a0:2a:
ce:e8:f8:6d:4e:dc:22:dd:8e:1b:71:26:20:b0:dc:45:17:10:
e9:e9:95:42:3a:8b:da:f8:b0:4e:9e:94:a7:95:0e:bc:1b:2e:
d2:5b:a2:dc:14:27:fc:7c:5a:ca:a4:1f:33:52:25:68:68:6e:
4e:47:99:bb:29:f0:3a:59:66:af:d8:ac:a7:ea:10:0f:e7:0d:
18:e7:ed:84:0c:66:52:7a:db:ab:64:84:67:c3:eb:75:07:5d:
b2:20:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:47 2025 by rpki-client