Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: 1gZLLj1bd9gZOmobZHpdVtAR72U5rfYAV6mR21jDlhk=
Subject key identifier: 95:7B:77:77:5A:AA:00:57:76:62:B2:0D:96:3B:1E:02:84:7B:FC:2B
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019A00A2FA684EE4A86E7C8A4E9708CCE6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 04F0
Signing time: Mon 20 Oct 2025 08:01:12 +0000
Manifest this update: Mon 20 Oct 2025 08:01:12 +0000
Manifest next update: Tue 21 Oct 2025 08:01:12 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: ifNv0T5XST7nDj5Hspb7u/E7xOAvtuVIbzZczJPYnso=)
2: kZsXR7fR0Ou_RuvSVexqd7WF5Zw.roa (hash: VeB6BvnRbCRLPDDkoYsxbMM4NdMeIicaUa0njjeL7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:fa:68:4e:e4:a8:6e:7c:8a:4e:97:08:cc:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Oct 20 08:01:12 2025 GMT
Not After : Oct 21 08:01:12 2025 GMT
Subject: CN=957b77775aaa00577662b20d963b1e02847bfc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:23:d8:01:cc:a6:c8:18:2c:f4:37:f0:74:
f9:1d:c5:8a:7d:3c:48:97:1a:35:70:73:69:1a:c5:
1a:42:8c:a0:9f:4e:b2:58:e3:df:91:6e:a9:4c:63:
22:d2:7f:9c:1f:56:b2:e2:42:df:5d:e3:67:91:b1:
39:df:e4:96:7d:0f:ae:bf:82:48:61:b7:e2:88:c3:
5f:4d:31:4e:5a:a7:35:84:c7:e5:82:b3:60:30:f7:
fe:f7:e0:c8:e8:28:f2:d8:8c:ec:a3:ba:77:7f:b9:
37:1c:48:81:34:91:a9:02:47:e4:b3:0f:71:1b:12:
94:48:63:2e:5e:a8:39:31:0b:74:56:bc:50:82:9a:
a2:24:52:db:a0:3d:d4:be:d4:fe:0f:28:5d:a4:6a:
15:40:c9:0d:9a:8f:7f:95:31:70:69:30:69:48:04:
b3:36:af:29:b8:57:4f:68:15:fc:1c:84:51:df:15:
d0:6b:70:47:8c:0c:c9:c3:aa:a8:49:5f:98:ce:08:
35:aa:30:4f:cc:f6:6a:50:20:2e:4e:86:00:2a:74:
73:97:80:dd:e3:05:b8:77:40:c0:ba:38:86:6a:7b:
f7:44:d9:4b:b6:3d:54:40:ab:0d:a1:6d:fd:92:88:
6c:bb:b5:e2:cf:06:ac:40:63:c1:d0:b6:be:8c:43:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:77:77:5A:AA:00:57:76:62:B2:0D:96:3B:1E:02:84:7B:FC:2B
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:17:aa:e3:c5:f8:7c:0e:46:aa:97:95:19:53:39:2d:04:b8:
c5:95:4a:35:13:2e:48:c0:c2:64:c2:df:72:e2:63:44:1a:4d:
cb:e5:64:11:eb:ad:11:cb:1f:fb:fa:fe:9c:77:63:6e:72:de:
ba:07:b1:c8:02:07:a1:e3:a9:e3:38:c6:fa:9e:3e:e6:4f:cf:
37:cb:33:0a:97:66:9f:8c:0c:42:8b:37:5c:cd:3c:4f:3b:74:
5c:38:9f:7e:9a:01:2c:17:2e:29:dd:3b:e7:ed:df:14:61:72:
24:fc:40:11:26:5d:80:b6:91:d1:e0:91:98:a0:61:12:36:2b:
4e:ec:13:8e:53:b7:e7:ba:28:b1:be:25:d8:5a:92:5c:58:51:
54:1c:24:7a:26:1d:63:5b:b6:1d:09:5e:27:31:1a:9b:4e:ea:
42:27:76:cf:79:a7:4d:06:84:04:5b:86:62:dd:0e:b4:a1:37:
27:fb:74:d8:78:48:2c:d8:5a:00:fe:62:18:b0:72:59:4d:5d:
31:14:5d:3f:26:1a:c1:fb:78:c2:ea:9f:b8:fb:74:6e:c1:57:
c1:f6:6f:28:90:15:22:51:14:e3:0d:93:42:07:f8:23:9a:60:
a9:56:cb:a1:9a:9f:8d:c8:48:a1:6c:38:33:15:41:5b:7e:8b:
47:73:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:23 2025 by rpki-client