Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
File: qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft (raw, json)
Hash identifier: dd6FX8OqM84hLdeOn+7pgCa9bZVuYiJeu3JUg8EZRl8=
Subject key identifier: 1F:63:80:FA:D2:95:89:FB:26:C8:5A:A7:C0:BE:14:87:98:3F:AF:16
Authority key identifier: A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
Certificate issuer: /CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Certificate serial: 01987C774DE3CD4896911F137B30F65B35C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
Manifest number: 0B41
Signing time: Tue 05 Aug 2025 23:00:50 +0000
Manifest this update: Tue 05 Aug 2025 23:00:50 +0000
Manifest next update: Wed 06 Aug 2025 23:00:50 +0000
Files and hashes: 1: LQO8Jka9B_Ga8wSNJ-H4GWRMbUM.roa (hash: 9Hoa1JZkYbMn9eEYjrKfJwUHw8DrzeOwQXlGIKyXqwo=)
2: qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl (hash: QOeZQ/oUORogZhA65gMNKvikFOoqehMyeopURy6Mrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:4d:e3:cd:48:96:91:1f:13:7b:30:f6:5b:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Validity
Not Before: Aug 5 23:00:50 2025 GMT
Not After : Aug 6 23:00:50 2025 GMT
Subject: CN=1f6380fad29589fb26c85aa7c0be1487983faf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:81:8d:d2:98:c2:b5:cc:7a:75:f6:6e:ff:
d4:c9:db:02:d3:d5:a5:90:3a:2d:06:a5:36:32:f2:
33:e2:62:f5:7e:08:b9:87:4b:39:cb:ad:97:98:a8:
65:78:53:3f:03:7c:4f:d3:c1:d4:7e:68:6b:c0:18:
60:0a:86:66:11:22:01:9a:e5:39:2c:a8:f2:b1:80:
b2:97:07:71:78:90:76:f1:67:9b:c1:82:3f:1a:a2:
a2:44:0b:28:2e:74:5d:d6:01:12:92:7a:7a:28:09:
d5:75:bf:c0:e2:f4:3c:8e:59:b5:76:44:fc:b4:12:
db:4c:05:59:85:55:ee:c5:55:c9:cc:7b:39:70:54:
6b:2a:d5:1a:88:bd:b0:29:ef:ff:12:dd:1d:fb:ac:
e7:f1:7f:f3:51:40:87:6f:a9:62:d4:ff:28:8d:95:
de:ed:ac:9e:b3:85:95:f7:66:9f:b8:f4:98:43:9c:
0d:21:66:04:33:45:01:bd:f8:ca:bb:51:fa:08:1c:
d7:20:54:16:53:74:35:9e:55:e9:b3:00:69:95:79:
1f:47:15:db:e1:cb:f6:c3:a6:78:96:40:9b:75:b6:
90:5e:03:21:cb:c0:bc:d1:e5:6a:70:f6:c9:50:79:
5b:0d:49:7b:af:98:8d:9d:c2:b6:51:0c:be:d5:ca:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:80:FA:D2:95:89:FB:26:C8:5A:A7:C0:BE:14:87:98:3F:AF:16
X509v3 Authority Key Identifier:
keyid:A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:27:7b:8e:3b:7b:cc:5c:93:81:71:4e:60:81:60:cd:cd:85:
01:d5:86:85:63:9f:37:60:50:19:7b:d6:80:55:bb:c5:e8:2a:
ee:a9:f8:fc:95:01:27:cc:e3:60:d9:bb:eb:08:94:56:a2:bb:
23:de:5e:43:91:a4:a5:12:0a:b9:06:15:2b:85:38:5f:9b:c4:
41:3a:c9:52:b2:1d:41:0d:35:1f:52:5e:54:ad:f6:bf:e5:16:
40:3f:0f:12:2a:26:7e:3a:41:94:ef:5e:d7:15:63:62:fd:22:
f9:05:54:e1:90:91:de:a1:8d:a3:46:5d:fc:ed:5b:80:ba:d7:
ee:74:e7:85:62:3c:bb:39:32:9f:f0:20:22:ff:8c:79:1a:bf:
9f:b6:f2:e9:76:bf:07:ce:3b:cf:9f:53:5f:55:4c:9d:60:48:
51:b0:ca:85:d2:f9:fe:f2:6f:c5:24:bc:85:ae:18:0e:00:f8:
4d:95:08:4d:13:15:1f:af:13:14:8d:92:bd:0f:d1:11:89:6c:
8f:c8:b8:6f:52:10:b4:f1:d7:3f:62:6a:10:47:23:19:84:65:
e7:c0:82:7d:4c:43:72:91:cc:7e:83:b9:df:c7:ea:a3:07:fb:
7f:80:4d:b7:77:b1:9f:81:8f:21:cb:23:7b:b0:02:65:45:15:
63:4c:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:22 2025 by rpki-client