Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: 6Wqrx6sOocASTV7ON0up5xWUn4I56eHVwtzWi8isqwU=
Subject key identifier: 65:66:B8:58:0C:9F:BD:F1:82:F2:5C:AE:8A:DA:07:CE:95:2A:0C:1B
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 0199FBEB834563249C008F7DC38382DABDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 0E81
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: GIZYlxcc1rONm5XSkoSc9vV7QErMnfhzy0U2NUzCZa4=)
2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:83:45:63:24:9c:00:8f:7d:c3:83:82:da:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=6566b8580c9fbdf182f25cae8ada07ce952a0c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:fd:73:8f:71:14:7d:01:c4:95:85:fb:40:
47:f9:0f:7d:6b:43:08:7a:4b:61:00:bb:2c:1b:00:
2a:5c:eb:09:58:b2:40:c3:13:ea:25:87:6e:2c:a9:
e1:62:e0:e1:a4:5d:3d:15:f4:19:26:4e:e1:d6:80:
6f:30:55:5e:77:e5:db:5f:48:22:9b:d2:12:97:53:
1c:72:81:ce:00:9c:d8:5a:e9:d5:22:3f:93:37:84:
97:6d:cb:6d:36:44:36:7a:b4:0f:d3:6d:1e:4c:56:
71:37:75:88:75:9a:fe:22:6a:dd:a8:37:45:b3:76:
ab:0b:10:e0:ae:4a:a4:d8:12:83:74:6a:41:3b:12:
e7:02:97:89:ec:78:0d:60:d7:15:42:60:e2:c3:23:
1b:0f:e8:e2:ba:a8:a4:bf:0f:94:ee:10:af:7b:63:
47:14:42:cf:f1:47:6f:e9:e1:17:6d:cd:76:1a:71:
50:50:56:18:88:d0:5c:c6:4c:c3:51:36:ee:0b:2e:
d9:ca:ca:8f:91:c5:e9:bb:c7:29:df:cf:72:10:df:
e8:41:ae:0a:29:99:f0:25:88:2b:f7:c3:1d:19:cc:
2b:f9:e8:48:e8:6a:ea:6a:46:12:88:95:c4:6e:fd:
18:d9:35:f6:40:ab:03:c7:36:cd:80:bb:69:88:d4:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:B8:58:0C:9F:BD:F1:82:F2:5C:AE:8A:DA:07:CE:95:2A:0C:1B
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:db:e8:33:67:36:30:f1:63:ed:be:bc:26:3d:f6:74:82:02:
28:3f:ac:30:6e:39:95:a6:db:d2:73:a5:0f:1e:04:b8:c8:e0:
26:11:c9:0d:c7:46:4f:f1:0a:ce:1a:b5:d2:d5:2f:5b:41:18:
7b:d5:24:d4:d1:1f:f7:e4:7a:ea:17:28:f8:b9:01:4b:59:55:
af:d6:fa:11:5f:c2:49:b5:38:a6:d5:bb:7c:c3:4f:56:d1:07:
3f:cf:4d:6b:5a:8f:11:63:a4:ad:ed:82:e6:7c:3e:3d:cb:fc:
b6:60:df:4c:0a:a7:91:0f:95:90:47:1b:cc:9f:4a:49:8d:4a:
b6:63:d2:a1:55:46:bd:35:c3:0f:ee:dd:d6:93:48:5a:4e:85:
9c:96:54:f4:23:1a:ec:fd:99:3b:b9:40:01:cf:d8:63:07:a9:
a1:17:5e:85:52:6c:4b:59:bc:8e:74:6c:ce:04:fe:8f:34:cd:
5f:fe:ab:9d:76:9a:98:67:ee:b5:c9:9b:e0:ef:e6:34:7f:4d:
3a:ed:9f:e8:fd:d2:d5:4b:fc:16:1e:c0:be:fd:f6:47:f1:4b:
60:c6:a8:3a:21:82:88:26:ab:0f:24:e3:85:3f:1c:d0:c1:ed:
83:72:c9:7b:03:ab:99:87:c0:2a:e6:71:32:f7:0b:7d:f1:ef:
59:99:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:30 2025 by rpki-client