Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: wg52ZEGFRLZti1T0aDbPn3M8MEop0vi1bUN7+dhMaHw=
Subject key identifier: FB:B2:18:3B:DF:5C:05:D3:67:0F:C0:1E:B9:0C:89:A1:81:CE:64:17
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 0198D4A7E0C0448DCB2DE7314D83D16EED1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: VnQtdIHFlKqy94H5BdImZwAyOodLomvrbslHFUEF9XA=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e0:c0:44:8d:cb:2d:e7:31:4d:83:d1:6e:ed:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=fbb2183bdf5c05d3670fc01eb90c89a181ce6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:6d:ce:dd:f0:71:30:27:69:64:88:f4:11:
f2:86:ce:27:28:df:49:19:75:88:2e:49:64:19:b0:
ab:52:4f:80:5a:61:a3:db:ae:60:52:64:a6:56:91:
c8:23:9b:50:b6:97:d6:dc:49:ef:49:53:e1:29:92:
53:04:fc:6e:fa:b1:e5:e4:8b:cb:5a:1d:b3:d8:05:
b3:1c:ff:66:62:b0:3c:91:3b:20:01:f0:13:f6:ab:
0c:96:68:cc:93:0c:2e:01:c0:9b:83:27:94:ea:89:
b7:44:68:55:b4:dd:ed:f8:3c:72:8f:bb:74:7e:c0:
82:18:8a:a0:df:6e:bc:92:c1:64:d2:e5:d7:42:8a:
f5:fb:7c:36:0d:cc:42:9f:6a:1d:0f:9e:9c:68:a2:
12:a4:f1:0f:3e:02:ac:59:68:f4:dd:95:e8:14:38:
9b:6e:97:11:ef:22:61:95:d7:54:d9:cb:1d:94:9a:
4a:b4:87:be:4a:bd:b0:ca:c7:0e:0a:74:7b:01:17:
cb:07:ec:ec:c7:26:93:dc:02:d5:23:62:52:6c:3d:
a7:4a:4d:c1:30:41:09:7b:b1:a3:1d:48:cf:9d:13:
a5:a6:e3:77:b2:b8:82:93:be:7f:5f:1d:f3:ed:f7:
04:4f:55:a5:51:28:c0:e4:20:13:e9:e0:f7:b2:12:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:18:3B:DF:5C:05:D3:67:0F:C0:1E:B9:0C:89:A1:81:CE:64:17
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:15:d5:c8:7a:79:1d:77:a4:9f:95:3f:3b:21:40:11:64:
ad:ea:fc:93:de:eb:9e:03:ab:47:7a:68:1d:e9:a2:d1:a0:c2:
67:0a:48:70:e8:9d:7d:5c:1c:0b:bb:30:ee:7e:83:69:75:12:
b8:fa:c4:8a:f5:a5:d5:7a:58:af:53:6a:71:05:bc:f1:f5:72:
f7:f0:ac:37:f4:25:0d:43:01:59:01:9a:44:66:07:da:36:39:
26:dd:82:64:2c:70:2b:4d:ca:e6:23:1b:76:8c:b3:97:99:7c:
d1:d3:a4:a4:53:f5:38:11:72:c0:49:93:46:29:6f:b4:6f:f8:
a1:31:39:a9:f9:6f:e2:9f:8a:f0:19:77:12:21:5f:d6:8c:fa:
8b:06:62:eb:3f:79:f0:23:37:52:ae:bb:d8:b9:b9:c4:c6:79:
e1:d0:c4:07:2c:8c:95:c7:cc:0b:cc:26:b1:24:f0:9a:17:c0:
63:f8:3b:0a:fb:41:da:8e:cd:d9:6d:fc:e6:1c:c2:f0:4c:3e:
44:75:88:c7:8e:77:bd:99:c1:5d:45:93:89:6c:8b:25:75:c1:
6a:4c:91:d6:3a:c7:e1:75:a8:fb:e4:e7:bd:5c:3a:95:8c:f9:
7d:67:01:3b:64:61:8b:a7:7b:e5:a9:e5:7e:c9:cd:0a:15:29:
02:5e:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:35 2025 by rpki-client