
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier: LSivrihcb8dfD99pycGIy53sxl0M+sZTYwYKh9JEhqE=
Subject key identifier: E5:3A:64:6F:B0:09:D5:B8:B5:34:7F:18:CE:DC:0E:7F:D0:07:87:B5
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 0199FFFE6AFA755AA21E3001DD423E407749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number: 0790
Signing time: Mon 20 Oct 2025 05:01:27 +0000
Manifest this update: Mon 20 Oct 2025 05:01:27 +0000
Manifest next update: Tue 21 Oct 2025 05:01:27 +0000
Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: R60GNxDrEztH4JpGz+s4PbDZHkqCIHOEAcd7r4V0wMI=)
2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6a:fa:75:5a:a2:1e:30:01:dd:42:3e:40:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Oct 20 05:01:27 2025 GMT
Not After : Oct 21 05:01:27 2025 GMT
Subject: CN=e53a646fb009d5b8b5347f18cedc0e7fd00787b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:22:a3:4c:16:0a:03:de:a0:ad:18:18:21:
a4:00:4a:2b:df:f0:c1:ca:f4:6c:36:31:8d:1a:84:
d3:e4:2a:fb:81:38:7b:5b:0d:b0:1f:53:c5:f2:7b:
7d:20:41:a7:41:d0:ec:8e:67:b3:ce:7c:33:f9:f0:
23:27:8d:35:9a:a5:17:00:b4:6f:de:4f:f5:82:4e:
8f:5b:4e:68:b9:56:82:42:f5:43:e1:3d:a8:d5:6c:
1e:51:a0:0d:9a:9d:0e:a0:c2:49:ed:80:16:21:13:
79:f8:73:d0:e2:4c:80:46:67:eb:ec:b4:95:05:56:
ab:de:c8:fb:f9:c7:80:d1:b8:09:1a:db:74:52:9e:
d6:b0:e3:23:04:4c:ae:70:f5:49:fc:c5:2e:cb:2d:
fa:ac:d9:6e:70:12:67:9e:01:44:48:68:63:a3:22:
8e:71:77:59:43:31:bc:27:70:02:b5:7e:6d:94:b1:
23:87:7d:2f:09:b1:68:d6:0b:b1:36:2c:09:24:0c:
f3:bc:c3:f7:a1:b5:4d:75:85:d4:7b:01:fa:76:f7:
de:f7:30:14:78:e7:1f:71:98:cf:24:09:13:1b:10:
eb:ac:23:18:4e:d6:18:3e:37:d1:4c:35:fc:d3:d7:
4d:42:dd:80:76:9a:76:86:db:43:51:f7:7b:de:6f:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3A:64:6F:B0:09:D5:B8:B5:34:7F:18:CE:DC:0E:7F:D0:07:87:B5
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6b:b6:12:48:39:2d:74:72:bb:b5:74:f1:08:d8:d9:5b:84:
d4:60:b4:6a:48:6e:f8:9b:2d:ce:3a:c8:3f:8b:41:5a:9f:67:
42:93:79:4e:fa:64:82:f3:8a:62:b5:93:6d:64:1d:7b:59:c8:
32:db:c3:3a:9a:04:32:61:51:23:9a:74:9b:84:d2:44:4e:13:
a9:e5:46:a1:cd:e9:b8:6b:b6:d9:6e:2b:0c:1b:fd:03:67:a2:
71:15:8a:81:3c:7b:06:25:08:9b:81:1c:91:19:8b:0e:bb:ac:
14:6d:7e:f8:51:1f:f1:95:cd:22:44:5d:21:54:b1:d0:74:f8:
f8:9b:b3:ba:d1:24:87:0e:40:e1:ba:cc:91:49:0e:4a:88:ec:
af:ff:94:ee:72:9f:5f:70:cb:6b:5d:ac:25:dc:8f:ad:e3:3f:
47:f2:71:a5:78:14:7c:6b:32:3b:77:5b:f2:11:76:94:ad:c7:
cd:30:b3:bc:a1:16:d1:0b:8d:41:42:02:0b:ed:d8:f0:6d:e6:
7d:4c:72:d2:c4:4a:75:60:c4:18:9b:06:f1:6a:63:9c:89:39:
ba:7c:5d:73:63:ac:f6:1f:24:d1:74:0a:df:5b:a3:88:a0:39:
d3:11:5a:44:87:e4:05:4d:97:c7:e9:12:3e:e8:47:a7:c0:26:
67:74:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:14 2025 by rpki-client