Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: rulRQZFQukVswWwdlbKXSL/u9JPEgXuWr4WYTuW3jG4=
Subject key identifier: FE:27:22:DE:26:E5:FE:87:9B:E9:92:C7:13:65:F0:D1:C7:7C:BD:69
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 0197B6A1CE12D0D5EFBC766E754C4A27B8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 0D54
Signing time: Sat 28 Jun 2025 13:02:26 +0000
Manifest this update: Sat 28 Jun 2025 13:02:26 +0000
Manifest next update: Sun 29 Jun 2025 13:02:26 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: 89XJAkOe45ud+hTFFX2qXUfCc0tdQupwTuo0n6XJ7aM=)
2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ce:12:d0:d5:ef:bc:76:6e:75:4c:4a:27:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Jun 28 13:02:26 2025 GMT
Not After : Jun 29 13:02:26 2025 GMT
Subject: CN=fe2722de26e5fe879be992c71365f0d1c77cbd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:58:af:35:8f:d4:ad:04:26:83:5c:b1:0f:
fe:b7:4d:69:48:33:a7:44:8c:10:e6:34:83:82:81:
39:a2:b4:2d:c9:27:36:e9:e3:e5:b4:e8:94:d4:64:
f9:58:31:fd:3a:12:07:e0:0d:5b:14:c2:e8:02:77:
d8:b6:13:a2:1e:ee:a1:e2:97:0e:1a:cf:a0:00:ea:
d8:4d:86:ad:00:da:0c:38:5b:70:04:a6:ae:de:7e:
8e:68:9d:cd:34:9c:c1:97:65:a1:c0:97:f2:e8:c8:
a7:2a:c0:2c:97:6c:5c:7d:a5:8e:5b:d1:5a:0d:c8:
1d:24:2c:83:bd:98:7d:d2:81:fe:16:51:f5:32:6e:
f0:63:fe:5e:4d:58:7d:62:c2:18:cf:0b:65:03:b1:
07:af:4b:f7:09:a4:33:5b:73:28:7e:de:d6:8c:39:
63:fa:2a:db:cd:23:9f:e3:4f:36:66:59:41:00:69:
9e:84:37:31:b2:87:af:0d:3c:40:a4:f3:68:79:66:
df:16:d3:16:48:4b:34:b7:92:32:c7:c2:50:43:c8:
15:03:9b:54:15:a3:ac:7c:20:b9:c0:c0:19:1b:9f:
74:9a:5b:0d:42:6f:1f:df:23:d2:21:76:64:92:bb:
ba:3a:ba:22:f9:60:e2:d6:91:27:e6:62:d5:36:0d:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:27:22:DE:26:E5:FE:87:9B:E9:92:C7:13:65:F0:D1:C7:7C:BD:69
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:37:34:63:0e:e1:66:f6:3a:dd:f9:95:37:89:d5:69:52:82:
ea:11:3c:63:b7:28:43:d5:57:bb:e3:4f:e4:d8:fd:68:9f:d7:
f1:03:99:f8:0e:4c:0c:10:b2:8e:84:62:ef:f7:5e:f5:a2:09:
a7:e6:5f:33:12:31:6e:5a:71:7f:55:55:4c:b1:1f:fd:f1:fa:
d2:d5:5b:a5:e3:ac:1b:f7:45:67:bf:ec:c2:be:e1:dd:fd:4b:
b1:81:7a:57:98:d5:a3:43:09:75:84:bb:98:ed:e7:be:34:7d:
94:c1:f0:51:51:e1:d0:6b:7b:92:82:d6:9d:c0:0c:4d:c7:01:
ab:e7:2f:58:33:3f:4e:5f:c1:1d:ef:00:47:fd:fa:99:ce:cf:
64:9a:bb:e5:4d:0b:b7:8d:c1:e4:ed:7a:aa:b8:f7:03:58:08:
e6:57:1d:72:88:4e:57:b8:2f:77:8f:e1:69:ac:db:93:64:e9:
e6:84:11:e5:d5:81:e0:16:a9:c0:9e:32:59:f3:60:cc:47:7b:
2b:d7:26:6c:de:e7:0d:73:eb:74:98:2f:ce:d8:a0:41:da:b5:
45:39:6b:75:9d:af:fb:df:7b:82:06:4e:f9:44:f0:f6:56:c2:
4d:f3:dd:d1:10:bc:44:04:02:c8:3e:69:dd:18:12:20:59:6e:
97:ed:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:47 2025 by rpki-client