Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: ztehI0OP9UkeWKL3jdxQZZZv1uezPr3mUaad8WxgaN0=
Subject key identifier: 3D:A8:D3:B0:73:1E:D2:ED:FF:F3:83:77:CE:C9:3B:C3:8B:23:39:6E
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 019A00DA47C42160299BE4D59C283234CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 12F3
Signing time: Mon 20 Oct 2025 09:01:36 +0000
Manifest this update: Mon 20 Oct 2025 09:01:36 +0000
Manifest next update: Tue 21 Oct 2025 09:01:36 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: mEPEGN2K6yNhghLdx4QsrE/AUubOIP8QUprig6H8Hpc=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:47:c4:21:60:29:9b:e4:d5:9c:28:32:34:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Oct 20 09:01:36 2025 GMT
Not After : Oct 21 09:01:36 2025 GMT
Subject: CN=3da8d3b0731ed2edfff38377cec93bc38b23396e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:de:b2:5f:6e:c2:d3:e7:f5:17:08:74:f0:
1f:64:6e:a2:a3:5f:d0:b5:2d:41:8c:00:85:e9:de:
cf:de:65:c3:16:b7:7f:f8:f7:b2:1a:d0:d8:5a:60:
36:6f:e8:27:25:af:63:07:b1:a1:ae:f4:c4:8d:a4:
0d:9a:ce:58:e4:46:b9:b9:84:7d:cf:1b:0c:0e:57:
b6:3d:a4:1b:3c:44:85:7a:26:59:da:6a:71:95:d2:
d3:d8:8f:28:23:75:f4:47:d3:b3:c5:f6:56:f6:70:
f8:a5:bd:57:ed:90:9a:d6:3e:14:02:3f:e9:54:76:
e4:9f:1b:af:8e:64:93:25:c4:6b:da:d2:87:42:2e:
92:c1:5c:c0:40:5a:9f:01:c2:32:32:0f:57:d9:ab:
4d:cc:13:3f:2d:90:d1:c2:9c:1e:af:6a:29:49:27:
22:2d:a1:66:d0:f8:84:90:ee:9a:cd:36:a4:e6:b1:
d6:0a:de:6f:33:3e:30:26:19:30:43:9f:ef:ec:a7:
30:a1:51:d2:ed:45:52:6b:ca:29:04:71:41:e3:fc:
7f:07:14:0a:36:8c:58:b2:7b:e2:d7:5a:e7:5a:4e:
b3:98:bf:f7:a4:c7:bd:60:54:7c:74:33:17:bc:8a:
23:83:12:bb:5a:a5:9a:b1:b5:a1:45:7d:6a:c5:91:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:D3:B0:73:1E:D2:ED:FF:F3:83:77:CE:C9:3B:C3:8B:23:39:6E
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:87:0e:86:c6:64:e1:c2:d1:18:64:42:26:df:46:75:f5:da:
e0:cd:47:b3:3f:05:8a:11:2e:24:dc:3e:5c:06:31:3a:7f:0d:
b9:8c:b7:99:8c:28:c8:1d:c1:f0:09:ba:3e:f3:40:64:68:92:
9c:a6:c4:30:68:03:2d:64:08:d2:d3:d1:9a:50:f5:63:8b:54:
b8:3d:e0:ed:89:91:11:70:91:91:69:5c:8a:0e:6e:b8:02:38:
dd:d9:bc:8b:e6:fc:24:41:fd:f6:9c:e1:67:67:f0:62:29:f8:
ee:f1:8a:11:9c:c2:56:c1:c0:48:6c:50:c2:2d:ec:5e:8e:f4:
67:94:6c:56:76:3b:08:ff:2c:60:a5:75:9f:12:13:fe:8f:df:
8c:b4:f2:6c:90:9f:3c:ef:aa:5d:e9:22:b1:b4:e3:bc:94:09:
a9:06:5f:27:c3:66:c9:46:b2:46:21:f6:9f:27:71:b7:74:75:
c6:6b:12:2f:2a:87:7b:95:c9:92:c9:97:69:97:f4:a1:65:d1:
08:d3:3c:bf:7f:91:c1:40:8e:53:d3:bc:8a:db:7c:d1:53:aa:
e6:e2:f0:5c:78:ac:c6:8a:c9:c0:af:d3:c3:11:43:44:ab:22:
e8:34:77:79:f2:6b:c6:31:3b:1d:93:a8:e8:9b:9d:33:cc:2d:
02:70:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:09 2025 by rpki-client