Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: DTNXmeWti1NRe207oKBQxT2TgsYqPcxzG0WJ/qGa83Y=
Subject key identifier: 80:AD:D7:69:F9:33:3A:4C:B9:F6:6A:61:E1:00:84:18:E8:91:13:FB
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 0199FC5912074D39EE9D5C9FC16A962F844F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 077D
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: RhbURPdlu9FgCt8Vk9iZfyjYzA3+jWrY8hyLHjZ7M0c=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:07:4d:39:ee:9d:5c:9f:c1:6a:96:2f:84:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=80add769f9333a4cb9f66a61e1008418e89113fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:4b:38:15:a9:f8:55:df:19:ae:cd:0f:e5:
c2:f0:b8:05:4c:31:d6:fe:25:57:58:47:d4:1a:d2:
50:fa:dd:c3:b6:1d:14:a6:b0:99:96:4e:5c:9e:35:
54:22:32:6b:4c:1a:10:1b:5c:a3:41:5c:40:0e:ca:
91:0a:55:b0:38:49:51:7a:9c:5f:78:1f:42:c1:a8:
1e:6e:e2:c0:7e:73:47:75:a2:61:02:97:ca:38:4a:
9c:fd:a0:d8:e4:ee:10:63:f5:f7:02:db:4c:f8:45:
dd:69:4d:f7:7d:3d:58:82:6d:72:14:3f:b7:04:6b:
6e:ed:00:fa:59:0b:60:9f:5c:de:9c:14:95:f6:89:
4c:29:02:a2:bc:17:88:17:d5:cc:aa:e9:02:58:ec:
e3:54:a8:11:15:d0:0f:c5:89:32:44:21:79:b7:59:
2c:57:d7:87:1c:ac:77:db:b2:a4:58:7b:a5:9c:05:
e3:23:62:71:45:04:28:ae:3d:cb:42:d6:83:61:14:
cc:1a:c9:ef:aa:a7:f7:5a:86:76:c5:4c:35:53:7f:
86:81:a3:84:9b:f0:23:8b:24:4b:1f:d1:78:38:68:
6a:24:68:09:ed:62:c9:ca:4f:55:35:79:c4:ea:86:
2a:18:ad:91:63:32:6c:43:cb:82:fd:06:fb:c1:d7:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:D7:69:F9:33:3A:4C:B9:F6:6A:61:E1:00:84:18:E8:91:13:FB
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:07:72:8e:10:9c:c1:82:74:ba:2c:78:da:98:be:47:bb:ff:
13:9d:06:a1:45:15:e6:3f:6c:ad:04:8f:f0:b8:6c:32:32:6f:
03:c5:d6:b2:61:e3:cf:32:a1:66:18:56:41:d0:9e:39:da:c1:
a8:42:8f:2e:fa:4c:a1:23:e4:bd:fd:34:1b:bb:0a:c4:54:d8:
5c:c4:84:19:b6:81:8c:ab:19:5e:5f:dc:dc:81:63:ae:20:a2:
c3:30:3b:38:c8:b6:9e:55:ed:31:50:e7:73:a1:65:a9:a6:de:
9f:50:90:bb:97:09:c6:5a:f8:92:a7:d9:c2:fe:8e:2f:6f:89:
4b:ea:ed:c0:ce:38:a5:85:df:19:a6:81:c2:7a:7c:3c:1e:27:
7b:bd:ee:05:9f:58:51:ed:aa:50:19:d8:5e:65:71:2a:5f:6a:
e2:ff:90:7f:2c:f7:77:18:cf:f5:02:79:cc:ef:ed:bc:d6:a0:
b0:fa:29:10:f4:41:81:bb:27:89:4a:65:5a:ca:03:45:43:75:
61:fd:dd:bb:45:89:98:ff:e4:f7:7f:bd:8e:0f:ae:a1:d7:91:
6f:25:c4:cb:f2:ce:39:f0:e5:04:ec:38:b7:d4:f3:d6:2f:bd:
fd:ee:a8:53:4f:86:bf:cd:4c:dc:75:02:88:c6:58:99:25:9b:
64:a6:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:47 2025 by rpki-client