Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: K1YfTT1qpzDgoWimfj+vJtmldfQOjXxaesUSDdYsXbE=
Subject key identifier: CF:FD:17:AC:20:9F:41:3C:78:45:E3:E2:B4:4D:7F:90:B8:6B:98:80
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 019874F53A0B12F14AF0F3F8B610D7AD25D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 1226
Signing time: Mon 04 Aug 2025 12:01:24 +0000
Manifest this update: Mon 04 Aug 2025 12:01:24 +0000
Manifest next update: Tue 05 Aug 2025 12:01:24 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: i1RsEMg+2fgnRnQFKVJT3UXC1D9k9Sr8Hme6m3ferno=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:3a:0b:12:f1:4a:f0:f3:f8:b6:10:d7:ad:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Aug 4 12:01:24 2025 GMT
Not After : Aug 5 12:01:24 2025 GMT
Subject: CN=cffd17ac209f413c7845e3e2b44d7f90b86b9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:25:46:cf:cb:96:85:86:fa:64:fc:37:9d:
74:de:02:52:86:6f:78:15:66:8a:83:40:dc:cf:0c:
6c:a9:cf:1c:b0:96:bd:70:50:6f:3c:b1:de:bc:66:
dd:9d:ed:bb:3a:fd:d7:5c:eb:ef:8a:2a:7d:64:ed:
d1:f5:11:f1:f7:9c:6e:fc:a4:25:fc:bb:10:3e:62:
ca:92:4b:63:25:e5:9d:c9:da:5c:31:1d:b0:97:04:
ac:9f:83:66:18:c5:11:34:53:a4:65:e8:cb:e2:5a:
41:92:94:e0:44:0e:0c:a2:a2:94:a5:d9:c9:c1:21:
8f:a2:cc:be:d8:91:5c:be:aa:4c:f4:ac:bb:67:49:
73:25:41:74:48:a5:fa:fe:d9:f0:7d:bb:c6:5c:1b:
4c:62:8e:d2:f9:b8:cf:20:fb:8a:35:e5:da:4d:2c:
4f:ea:81:00:63:c9:82:bc:5b:63:61:33:36:8a:5d:
82:51:dc:74:f5:8f:ee:1f:65:1c:60:e6:21:a7:2a:
b9:10:1d:fa:f6:d2:58:dc:67:1e:da:d5:66:89:45:
18:fe:bf:05:66:d1:ba:9e:ad:ba:18:8d:32:cf:65:
eb:aa:d6:d6:66:43:e5:2d:30:1c:fd:1d:3d:b7:e7:
8c:46:69:b1:04:37:46:9d:28:8a:09:1a:a5:b8:af:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:17:AC:20:9F:41:3C:78:45:E3:E2:B4:4D:7F:90:B8:6B:98:80
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:3b:4f:63:23:a7:b1:bb:dc:fd:94:29:f6:fc:ef:e4:8e:
4a:22:35:22:33:77:bf:5b:cb:72:ca:10:95:0e:ef:0c:94:6a:
4a:16:5c:ba:bc:ae:9e:7e:2c:41:9e:ac:91:90:41:3c:0d:6c:
b3:83:34:4b:29:50:7c:33:51:d6:35:de:0b:6b:5c:6a:f4:72:
fa:4d:40:9a:4e:ff:fc:2f:eb:74:f4:3d:c7:57:8c:7a:36:42:
3f:69:91:3d:37:39:a2:dc:9a:d8:60:d4:e8:fa:c2:a3:fc:00:
d4:5d:1a:2f:ee:fe:14:af:43:43:06:fa:ac:9f:c2:4b:31:2a:
f0:7d:e4:ee:d3:fd:3c:46:28:14:da:28:c5:1d:0a:d7:32:d8:
53:99:2d:9c:e9:36:67:af:d2:82:45:67:5f:9e:8a:75:7c:e0:
54:6b:e4:a9:8e:51:92:29:c9:03:3e:69:04:81:4b:68:4a:dd:
f2:e0:0f:f9:04:db:ca:c3:14:a3:44:a0:a3:d4:43:2f:83:5f:
41:e1:0e:2a:8a:5c:48:39:67:e5:bf:df:ba:5c:ca:01:cb:d6:
de:77:fa:a9:84:93:15:73:28:c3:a3:de:72:2d:32:9d:36:4c:
25:fa:ed:3d:28:72:d2:f6:3f:55:ca:fe:a2:7e:49:4c:c4:d0:
9a:6e:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:46 2025 by rpki-client