Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: zlN/iZMwA3NnvbEYqOmoTyvR/icoPXn4tEsPfPngvTk=
Subject key identifier: ED:10:F0:C4:25:B4:5A:57:E7:64:00:59:5E:E6:4D:8E:B8:CF:24:FF
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 0198D6613426AA7697C82B7FEB487885D2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: eA6qnBBMrjSAHBit0FUNrPLeuDARY7IhnqvwjOUbj80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:34:26:aa:76:97:c8:2b:7f:eb:48:78:85:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=ed10f0c425b45a57e76400595ee64d8eb8cf24ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:84:cf:4e:fd:e7:6c:0d:c7:11:a1:29:57:
33:85:bf:6c:3c:db:28:32:6b:78:3d:57:9d:a9:3a:
22:c5:51:87:05:70:39:07:75:a3:63:91:92:03:9d:
44:b1:3a:c4:da:e8:02:02:a5:61:1e:bb:7c:13:18:
90:cb:aa:c3:95:60:1f:ff:f0:cd:99:dd:b8:4c:c0:
13:1a:f4:68:ff:10:37:16:79:1b:95:73:aa:b2:74:
e9:e1:02:de:9c:73:89:f0:61:21:c2:3f:69:ed:6c:
2c:b9:b2:66:54:6b:e0:05:b4:65:e1:fb:b3:d6:74:
fb:dd:fd:a1:c8:3b:34:db:8c:5c:51:a3:f4:26:ae:
1f:40:9f:94:25:0c:58:62:5d:97:2c:33:d9:b1:ea:
4d:e7:ae:03:a7:41:15:74:6d:3e:76:ab:06:ac:13:
c7:0c:d7:a7:a4:37:c3:af:e6:94:f3:0b:ab:81:7f:
e4:3c:28:8a:9d:25:fd:27:e5:23:01:c9:9f:c5:1b:
e6:3d:9f:d9:cc:a9:1b:ff:4a:4c:7b:b3:3a:da:7b:
e4:8c:c0:07:76:dc:8c:e2:83:96:15:84:06:56:2c:
01:36:d1:c6:46:ad:a4:2b:69:61:30:8d:b2:ab:47:
81:00:a8:0c:03:91:2d:57:2e:ac:bd:2a:dc:53:32:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:F0:C4:25:B4:5A:57:E7:64:00:59:5E:E6:4D:8E:B8:CF:24:FF
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9a:71:b5:38:b0:d3:ad:f1:d1:e5:72:63:bc:f9:eb:90:66:
a5:43:fb:2c:31:e3:4d:01:d6:68:5f:e5:a8:28:e5:85:00:7b:
28:e7:95:bd:0f:50:ad:bc:a1:07:60:7e:33:4e:49:49:4d:6a:
4d:05:1e:cb:d3:2a:4b:bc:12:6c:cf:ec:60:15:b9:0f:b0:c0:
76:d2:9c:be:38:27:1b:35:b6:98:a6:90:db:f1:ef:3e:b9:0b:
1f:97:0d:32:d2:a4:bc:b7:40:dc:e8:c0:8d:63:e2:aa:36:91:
11:fa:08:39:1c:37:82:f8:9e:20:8d:28:5d:66:40:12:63:76:
98:23:6a:be:89:ee:a4:19:cf:e9:2d:14:18:d7:9b:54:a0:f7:
a4:5e:50:da:4f:6d:35:bf:1f:60:a7:1c:c8:6b:c8:db:53:fd:
a6:12:57:44:1a:25:6b:2b:34:3f:8d:9a:10:6a:f9:2c:64:c1:
f5:a6:0c:de:e9:f8:55:88:9c:fa:04:aa:02:46:8e:e0:70:d5:
5f:16:b8:b8:a5:58:f2:e1:3a:28:37:02:5b:94:27:ae:3f:b7:
a1:5e:58:81:de:82:c4:a9:11:39:0f:7a:ba:91:a8:c7:ae:ca:
11:1d:68:83:7e:87:18:ca:23:74:20:ee:b9:c9:73:81:1e:fd:
50:d5:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:21 2025 by rpki-client