Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: UhOnCPdCM7KYXfMUvmALLDhdf4qGS2eLQs6+/+OgIeM=
Subject key identifier: 10:AE:B1:8D:8F:F6:E5:0D:5F:0D:50:09:EB:DA:49:B5:6F:99:06:AA
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 0198D773AE004D6274DFC5F9597E299CBF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 1259
Signing time: Sat 23 Aug 2025 15:02:19 +0000
Manifest this update: Sat 23 Aug 2025 15:02:19 +0000
Manifest next update: Sun 24 Aug 2025 15:02:19 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: GLcfYxtbYrDHftm4cwnXni3cZWeABR/CTMLud34vDx8=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:ae:00:4d:62:74:df:c5:f9:59:7e:29:9c:bf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Aug 23 15:02:19 2025 GMT
Not After : Aug 24 15:02:19 2025 GMT
Subject: CN=10aeb18d8ff6e50d5f0d5009ebda49b56f9906aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:d3:72:e1:e8:ac:28:75:c4:14:06:cf:6c:
21:6b:a0:80:7b:b5:50:6c:1e:e2:b9:0a:a1:48:d0:
dc:fc:79:f0:52:27:ae:9d:68:f1:e8:79:8d:74:1f:
5b:6f:f0:ef:5d:58:6c:36:52:93:56:d5:98:eb:58:
b7:31:71:5c:6e:f9:4e:f5:28:0c:bb:60:e6:c8:1d:
83:74:7e:d0:47:17:d2:33:c2:b4:f2:7c:46:7b:e4:
62:4f:cf:19:29:cf:b0:d5:4f:97:f7:88:1f:b9:dd:
bb:22:bd:86:c4:8a:dc:da:b2:ba:df:97:ce:65:4b:
4f:64:18:e5:17:15:b3:0e:a4:4e:36:d6:3a:4e:c8:
da:f1:e4:6b:dc:21:3b:99:94:7f:14:f1:e2:be:ad:
bf:a6:fd:82:07:36:0d:51:d1:e0:84:53:fc:bb:4a:
d6:9f:1f:c2:9e:e1:ab:a6:0c:37:6f:f7:29:a1:92:
f6:b7:bd:44:d4:b7:db:02:c2:32:27:41:9f:64:19:
72:ee:7b:0a:2a:ba:3b:8a:a6:ef:12:46:4b:13:48:
b1:03:cf:67:13:5c:9f:3a:98:9e:83:90:16:0e:d2:
e1:0d:44:a4:58:d1:cb:2e:fc:b5:b6:f4:b0:e2:08:
8b:45:ee:f2:ee:72:ee:26:ad:d9:15:0a:8c:0f:17:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:B1:8D:8F:F6:E5:0D:5F:0D:50:09:EB:DA:49:B5:6F:99:06:AA
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a2:d8:2a:bd:15:4e:94:85:57:68:d2:42:df:a5:e5:36:64:
4d:a2:5d:da:8e:ae:92:12:bf:81:b9:ce:69:2b:7c:9c:c1:27:
b1:ad:11:89:67:d7:94:5e:17:f3:1f:a6:6f:fa:f8:d2:cb:66:
3a:93:2c:26:ba:27:57:1f:a1:f5:a9:07:e3:ed:15:00:43:c7:
16:34:68:1f:f3:2e:b5:f6:34:f0:ac:1f:dc:79:5d:09:37:e6:
fa:e8:d6:52:a3:8b:5e:ca:22:8d:00:03:29:1a:b6:75:4d:a3:
56:9b:e1:52:cf:1f:c7:f3:e4:41:e0:6e:e8:a8:9f:e0:29:f4:
00:db:04:34:68:db:34:f1:57:65:3e:f8:f4:9e:f1:74:75:41:
22:f8:64:5c:c7:9b:68:b7:7a:aa:6e:11:c1:35:ef:27:7b:f0:
a3:e3:c3:9c:41:6b:88:e4:b6:89:b3:49:0a:3a:9a:46:75:12:
f0:65:5b:2a:84:65:ca:d1:1d:c8:93:69:36:3c:6e:0c:1a:85:
8d:c2:eb:5a:0f:e0:7d:75:1f:d3:e5:af:b1:cb:f9:8e:7a:48:
b1:26:e2:71:23:29:10:dc:ed:e8:fc:89:eb:0c:d8:73:7c:2c:
c5:cf:f6:c4:74:c8:81:92:73:4e:59:f2:43:82:1c:c9:ab:ad:
50:a0:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:16 2025 by rpki-client