Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: MDvL6KjEOVtlas688r4Vf6PzEmdprpnodnVOamtSfBo=
Subject key identifier: 32:10:DD:B2:82:3A:E5:E1:97:97:3B:42:94:96:51:2F:9F:2D:26:C4
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 0198D4E00F51260E38DAD49FD29FB8DF6C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 0707
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: V4I3UIq1DCDs6D7amUVMos9I8vw6nbWH5Ldxe4y8RSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0f:51:26:0e:38:da:d4:9f:d2:9f:b8:df:6c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=3210ddb2823ae5e197973b429496512f9f2d26c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:0f:fa:9f:87:ab:f1:86:16:14:69:8e:1b:
46:2f:b9:1f:c2:a7:fb:01:27:d5:77:3f:6e:e6:af:
c6:df:dc:f0:be:ca:71:8a:e9:c9:7f:b8:21:80:1d:
34:6f:ab:5d:bf:d4:61:7d:ff:c4:92:70:c1:7e:62:
8b:b7:2e:1b:2d:ca:20:41:31:ce:24:ec:de:3a:20:
6e:57:bf:40:7a:65:e3:d2:72:aa:45:d9:ef:e1:41:
1e:88:c5:4e:a3:48:db:00:38:14:12:5f:37:09:ed:
04:f6:ec:e4:4b:b2:c8:9f:46:fd:84:64:a0:1f:dd:
e5:a8:3d:0c:12:d8:17:6a:ee:9a:c4:a0:cc:25:5c:
9f:81:21:f4:82:46:6e:c3:81:39:7d:72:2d:90:62:
cc:fe:8b:71:1f:9f:f5:8d:64:e2:74:67:d3:ef:a5:
7d:4f:87:48:9e:96:ab:40:7c:ea:22:44:32:2e:82:
7e:d0:5e:99:f6:19:2a:54:bd:f7:8f:d6:15:76:a6:
03:70:90:cb:44:b8:35:5b:16:17:ec:4e:54:fa:4f:
35:8b:86:31:db:14:17:f2:26:b4:0a:1c:c4:f7:72:
c5:a1:99:0d:e3:fe:b3:c9:eb:1f:49:c2:b2:4f:76:
18:01:18:72:5c:9f:1c:79:a9:b8:26:a7:7e:fa:48:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:DD:B2:82:3A:E5:E1:97:97:3B:42:94:96:51:2F:9F:2D:26:C4
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c2:f2:96:e0:92:d8:06:f3:46:3a:f4:75:be:f8:dc:23:70:
74:a1:34:de:31:c8:dc:14:7d:d5:2e:f6:43:ac:89:53:97:61:
e2:e4:f7:c4:95:0a:12:39:18:84:8a:6f:d3:81:e2:43:bd:ee:
2f:8f:0e:2a:b5:31:3e:19:fb:bb:b5:92:1a:46:c3:a1:51:bb:
39:21:e4:8b:d2:40:bd:1c:17:df:2a:68:b3:e6:fa:38:a2:6f:
7c:64:90:1a:da:02:f4:4c:d6:c7:2c:21:bb:0d:14:a2:2b:c2:
a1:0e:8a:a0:1a:59:09:cc:60:0c:0d:37:37:d1:71:57:e0:50:
16:45:a9:37:07:6d:8d:69:34:db:52:22:f1:12:bf:53:82:17:
48:99:72:33:c6:bd:63:76:f6:9e:e8:02:81:dd:ce:6d:7a:29:
d8:42:74:85:f6:79:8d:ae:ad:a1:15:2e:56:65:fe:9d:82:4d:
ed:de:c5:ac:f7:5f:b0:63:74:da:44:47:77:64:fb:c1:9c:a6:
85:5e:2d:9b:ff:61:9e:09:21:27:8e:c9:1f:2e:a0:ff:3c:f1:
56:46:c5:bc:cc:f2:a5:d1:33:fa:d9:d7:0a:96:8a:1a:ef:f5:
0d:d6:f7:a0:e0:c1:72:54:a1:fa:cb:69:02:58:52:24:5c:31:
1c:74:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:48 2025 by rpki-client