Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: BNQ3ocSm43VtT3ZD6MjS0f2SoxUGiQwkq9E9iwO8G0I=
Subject key identifier: 8F:AD:0F:08:7B:DC:3D:94:82:3C:0D:64:10:FE:8F:96:5E:68:42:EF
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 0198A04CB77EFFB59DDADD4754551FB6095C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0E2B
Signing time: Tue 12 Aug 2025 22:00:38 +0000
Manifest this update: Tue 12 Aug 2025 22:00:38 +0000
Manifest next update: Wed 13 Aug 2025 22:00:38 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: 9Zetj/VZYtJILZmPIkPZaONn6yFbxkGJqEcLKCgXpMo=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:b7:7e:ff:b5:9d:da:dd:47:54:55:1f:b6:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Aug 12 22:00:38 2025 GMT
Not After : Aug 13 22:00:38 2025 GMT
Subject: CN=8fad0f087bdc3d94823c0d6410fe8f965e6842ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:43:5a:7c:6a:5e:70:6e:2c:a4:47:ea:47:
f3:0e:60:e7:94:fd:55:1e:0a:8d:c6:34:7c:03:d3:
df:b7:29:e5:c5:05:98:70:c3:0e:c4:4d:a2:68:c7:
23:17:1a:a9:0c:48:9d:6c:e9:0d:cf:d9:e2:4a:eb:
44:15:99:6b:5f:b6:65:5d:59:1c:9f:9d:bf:53:39:
83:73:78:ea:49:6a:e2:4b:c1:9b:b5:55:ac:12:29:
0b:cf:ed:53:63:49:56:46:14:64:dc:ab:65:21:90:
56:e2:3a:a9:ed:28:e8:be:03:fd:de:d6:c9:2c:b8:
86:2b:4f:bb:e8:7c:c3:83:9d:8a:b3:6d:bf:7a:15:
31:c1:65:08:4d:5e:49:af:94:42:85:16:15:3b:17:
27:54:f7:7f:fb:b6:9f:66:db:8b:de:aa:54:f0:91:
b6:f7:31:9c:40:35:07:8f:8a:3d:d6:db:73:b8:9f:
f2:01:5f:4c:75:71:87:4a:36:a8:e3:bb:56:ef:27:
0a:7c:32:f5:51:be:c2:dd:be:05:36:86:15:dd:15:
0e:85:b2:b6:6e:2f:2e:3a:25:2a:c0:c3:1f:8e:a0:
74:df:b1:0a:f1:a7:50:23:b8:c5:31:62:a9:59:54:
e1:73:fb:8d:15:63:54:16:96:ea:70:98:86:0e:13:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:0F:08:7B:DC:3D:94:82:3C:0D:64:10:FE:8F:96:5E:68:42:EF
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4a:c1:c1:d8:6d:b5:15:9e:c2:92:41:33:14:a5:45:39:ac:
27:4f:5c:7a:b3:57:5b:82:bb:f2:40:9c:a3:3a:31:2e:99:17:
5a:fc:45:e2:13:7e:e5:5a:78:c9:8a:30:d9:89:ab:87:86:a1:
eb:a5:a5:54:00:ce:9a:05:40:ee:e0:9d:af:ec:03:f7:16:4f:
89:55:1c:50:aa:7a:55:44:14:cb:3e:ae:93:4f:9a:0b:4b:58:
81:26:3a:d7:a9:8b:a0:0f:05:67:77:05:0a:30:18:95:08:02:
7b:95:88:fd:8b:c5:62:6f:0b:b0:f8:91:91:40:76:27:95:00:
99:8a:bb:36:8a:f3:27:2f:07:a0:db:3f:ea:b5:07:af:fb:82:
52:f9:4f:41:94:d1:88:67:56:49:9e:0a:62:85:9d:4b:cd:c7:
fd:23:91:30:16:19:d5:f7:3f:4f:37:f1:6a:13:b3:c0:24:80:
34:c2:bd:63:29:56:69:d4:84:b9:73:10:f6:35:52:12:0e:0e:
7b:5c:d4:0f:fa:f7:29:c7:de:58:cf:20:2f:d2:9d:91:72:ff:
17:71:78:3d:ac:af:0c:01:27:81:26:6a:4d:6e:d8:8a:b3:b0:
7b:b3:70:43:48:ad:d1:6b:37:23:68:45:12:3c:b6:1e:59:bc:
3c:69:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:06 2025 by rpki-client