Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: zu4PZrfHKCdhZ4A3PcBzgG3CblrnlSVswV/5WwjvnNg=
Subject key identifier: 01:6D:5A:D0:CD:79:73:FF:E3:F9:2E:5E:21:B0:C6:06:96:2A:9F:BC
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 0198D472778BCD049CA963692F19997489EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 0DE8
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: coDan6cae9rL6BJ6PorebW0q07vDIFRl/8VVIXjCw4w=)
2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:77:8b:cd:04:9c:a9:63:69:2f:19:99:74:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=016d5ad0cd7973ffe3f92e5e21b0c606962a9fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:4e:d9:ab:75:50:12:1f:e1:7c:91:f2:ea:
40:3b:17:9f:02:66:8d:98:5e:1c:c6:de:d7:b8:e1:
e8:86:61:2d:1d:54:c1:80:0c:6a:0c:48:27:ef:2b:
ca:c2:3e:c4:44:42:54:96:d9:0c:f6:f9:ed:62:1c:
60:e9:e7:a3:49:b6:8f:c1:3c:bc:7c:3a:ba:7b:ea:
1a:c3:54:e9:da:42:b8:31:18:38:51:68:2f:ce:17:
fa:6e:b1:23:d0:14:dd:09:75:38:83:2c:16:cb:97:
f1:9e:ef:3f:7a:4f:7a:59:b4:09:14:13:29:cc:d4:
83:38:1e:8c:3b:9d:81:cc:24:e2:6a:5d:35:69:b7:
e4:64:08:b8:65:ee:49:18:66:2b:17:20:fd:b1:03:
73:86:00:5d:d5:4a:f2:ad:b6:1b:08:be:e5:96:b0:
46:15:68:c3:22:1a:05:cb:d2:ce:c1:ee:f9:3b:61:
67:3b:1c:f2:ca:a3:7a:4e:61:09:c4:13:ad:26:b0:
84:11:4c:6e:73:74:a8:f1:dc:fb:fa:c0:e0:5a:02:
3b:bc:46:7b:ab:6c:d6:6a:00:b5:ac:87:47:40:6e:
2f:c8:15:cc:b8:af:32:4c:21:4b:c8:c1:cd:c1:b6:
3c:d0:36:c7:8b:73:c9:a1:6e:d2:86:e1:fa:9c:89:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:5A:D0:CD:79:73:FF:E3:F9:2E:5E:21:B0:C6:06:96:2A:9F:BC
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a2:8c:f0:da:31:44:18:ce:35:3d:25:57:7e:3f:29:33:b6:
a2:77:a0:0d:d0:09:15:95:7a:99:60:95:ac:8c:8c:31:3e:3d:
94:62:01:17:4e:7c:81:69:12:26:6d:f1:c8:47:8c:f9:fc:1f:
30:99:22:28:7b:0c:9c:19:85:c4:42:9b:50:c5:3e:21:b4:6c:
cf:47:db:9e:a7:0f:1c:63:c0:75:49:7c:00:05:d9:e7:62:72:
8b:cb:a3:87:58:ef:7e:95:8e:db:62:c7:62:03:fd:3a:a5:eb:
07:b7:4a:da:f9:dd:81:c6:ec:b5:88:e8:e7:2c:b9:d6:ec:cc:
96:34:e5:44:6f:da:c5:13:a1:dd:c5:a2:85:bc:39:34:cc:cb:
bf:ce:63:d4:0d:3b:42:09:d3:67:e2:2d:33:00:08:a3:fc:ae:
06:fb:eb:cf:cb:62:19:d4:91:37:ad:8b:76:7b:58:66:a7:b6:
dc:91:06:99:e1:81:ed:ff:73:00:e4:62:ac:38:10:c5:cb:0c:
98:2c:fe:ae:40:c7:cf:d4:57:f6:5a:33:b3:d1:16:5b:f8:ee:
53:2d:93:f5:a2:96:aa:58:5e:34:eb:c9:1e:7c:67:58:81:ef:
d3:10:f8:aa:6c:fd:cd:b5:02:f3:14:e2:7f:43:41:55:33:b6:
d7:74:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:38 2025 by rpki-client