
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
File: 2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json)
Hash identifier: hhlYMpYqSPLXtdR5oknIezYnQo2mZLjxUgh+7OwNQ1c=
Subject key identifier: 4F:37:1A:D9:BE:0B:65:F3:C2:52:63:F4:A1:89:96:27:7F:56:08:FF
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial: 01987A890A2DEE8C131A2DAEEBB905EB1311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
Manifest number: 02EB
Signing time: Tue 05 Aug 2025 14:00:58 +0000
Manifest this update: Tue 05 Aug 2025 14:00:58 +0000
Manifest next update: Wed 06 Aug 2025 14:00:58 +0000
Files and hashes: 1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: 9nw/UyW3YvpwnjoeEOmn25S9peSrmxv1uqdoZcym+Rg=)
2: ktw-FkrMXPNswM8IraWY-5p7J3I.roa (hash: jzXeR9Bv5fkU8m0kPMqZ57dXqdxvNx+7MlrJIZfIQC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:0a:2d:ee:8c:13:1a:2d:ae:eb:b9:05:eb:13:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
Validity
Not Before: Aug 5 14:00:58 2025 GMT
Not After : Aug 6 14:00:58 2025 GMT
Subject: CN=4f371ad9be0b65f3c25263f4a18996277f5608ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:30:da:c9:c9:21:63:9a:8e:dc:1a:1e:45:
99:d2:ca:4c:72:37:32:61:74:67:17:ac:c1:46:8c:
c4:b6:8c:50:0a:e9:72:d2:9f:92:b2:9b:e1:1e:4f:
32:18:31:2c:73:af:fd:a1:6f:47:16:de:26:a4:f5:
31:dc:cd:a8:a8:9d:d1:22:a5:b1:6b:5a:17:a4:ee:
9f:ea:fa:b7:b9:b6:a3:1d:9d:64:ba:30:54:c4:1b:
ca:37:70:c4:9e:45:e4:25:08:70:04:ed:87:4d:fd:
76:20:40:02:ea:db:8a:6c:ba:1d:44:03:32:53:29:
b4:17:f5:67:0e:93:74:0b:d0:87:77:f2:56:b8:a2:
c1:b8:5b:b3:c1:78:96:a1:e8:6a:10:d6:1a:61:ae:
e4:6c:e4:f8:f1:f0:f3:21:b5:37:e0:68:ba:47:7b:
a6:44:41:cc:1f:24:3e:9c:84:70:74:0f:64:ce:8f:
a0:4d:bd:6a:ce:ef:af:4d:ef:8e:50:3e:29:9d:97:
09:fe:9d:4d:59:67:34:ce:e7:95:19:73:37:e3:6f:
14:48:1a:7b:22:4a:34:27:29:63:a2:13:82:a3:8f:
b2:69:69:89:7a:54:4b:4b:61:34:ab:ad:db:3b:b9:
68:c6:77:58:9d:ed:db:ad:64:6f:57:3b:68:ec:2f:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:1A:D9:BE:0B:65:F3:C2:52:63:F4:A1:89:96:27:7F:56:08:FF
X509v3 Authority Key Identifier:
keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e0:dc:00:b3:f1:19:93:75:3c:e1:ae:d9:6e:17:4b:41:5b:
3b:eb:c1:db:e7:dc:40:11:a9:6e:42:18:12:16:5c:a1:fa:f2:
78:74:7b:e6:04:e5:8e:fd:96:c2:dc:07:be:87:8d:59:23:8e:
92:67:8d:b4:cd:dc:c7:ab:32:6b:4f:07:07:d4:7c:21:2f:4b:
40:64:d5:82:6f:6f:e9:4d:2e:95:04:5f:2b:ca:67:6f:1c:9d:
9c:aa:a8:1d:ba:b6:eb:d8:20:f6:79:82:2e:e6:85:9f:ab:fe:
5e:5b:f5:fe:a9:e2:87:d6:88:0a:09:c3:a3:8c:e8:6d:98:61:
b8:d8:70:9e:48:44:39:85:4d:be:29:dc:ca:11:76:73:e6:fe:
ba:8f:43:8c:45:aa:e7:93:5e:49:cd:ff:7e:5f:0e:67:68:67:
79:c2:c3:e9:a3:d8:98:d6:a0:e1:d1:19:c6:c6:9b:3f:a8:e2:
aa:a0:8a:98:02:9b:0c:b1:a7:1e:e5:e2:7b:ec:3c:f1:1b:b1:
7c:39:1f:a6:40:69:02:39:23:ff:3e:56:41:c9:eb:68:61:97:
c8:b7:aa:b8:35:b7:51:f3:52:76:11:5d:ce:bd:e1:c9:90:b3:
3b:5d:98:24:c3:5f:22:ab:62:53:a8:1d:97:d1:93:58:56:35:
7f:d3:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:08:46 2025 by rpki-client