Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: NJqgPpFKl8YxfxBbtWjHOXYwdRVo7WFnzkgCo6vQixI=
Subject key identifier: 31:21:3D:04:A8:C3:84:4C:F1:1D:C8:B1:76:02:CF:72:7E:70:C8:20
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 01988A331B1E11C359E31297259059E80C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 0EF7
Signing time: Fri 08 Aug 2025 15:01:01 +0000
Manifest this update: Fri 08 Aug 2025 15:01:01 +0000
Manifest next update: Sat 09 Aug 2025 15:01:01 +0000
Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: ojXBH9aawPoobIvOEMJT5qLl2iDg0w9ekxrmQgdZYkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:1b:1e:11:c3:59:e3:12:97:25:90:59:e8:0c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Aug 8 15:01:01 2025 GMT
Not After : Aug 9 15:01:01 2025 GMT
Subject: CN=31213d04a8c3844cf11dc8b17602cf727e70c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:e7:52:c6:3c:be:31:aa:20:1b:50:63:37:
69:ab:a3:93:11:bb:4d:ba:37:a7:97:e2:c6:8f:15:
d3:9f:a1:11:ac:a9:bd:6b:e4:6c:4a:f6:3a:c9:87:
39:82:3c:69:cd:d3:3f:79:19:9b:6f:af:5b:a6:84:
0f:72:e9:16:b3:bf:98:a0:f5:f0:cf:f7:36:c8:9d:
81:bc:4b:20:d6:16:d1:ec:39:86:0b:87:11:e8:08:
a3:7d:b1:66:b0:b3:5a:b2:22:17:05:62:0a:03:e6:
8f:42:1d:4d:1c:1d:58:d6:42:b9:0a:11:35:1a:e4:
d9:d4:34:29:69:b4:54:ba:c3:bd:07:87:cf:cc:a0:
e8:72:e9:a8:8b:e3:3b:8c:b3:16:2f:4b:4b:a8:ea:
74:ae:0a:a5:52:a7:01:b0:cc:c7:b9:41:3b:94:19:
55:83:c4:2b:bd:e5:12:d6:e8:dd:30:66:82:86:5d:
b5:9c:67:fc:84:23:5a:f1:d8:cf:96:05:16:49:80:
ba:88:63:6f:3c:96:43:16:dc:4a:76:2a:6d:e5:32:
9e:87:be:95:b9:97:69:f2:7d:ee:67:fd:9c:c4:b2:
c8:d4:ba:ba:5c:5b:a0:a4:75:68:27:88:b5:37:bf:
56:2f:c1:cc:33:20:d8:e0:1f:69:0e:60:50:09:cd:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:3D:04:A8:C3:84:4C:F1:1D:C8:B1:76:02:CF:72:7E:70:C8:20
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:29:2c:08:0a:b6:59:20:47:54:c2:ff:9f:80:f6:30:ba:9f:
91:89:ec:ad:ab:db:c7:ec:9d:7b:7d:e6:3e:22:15:21:5a:d8:
1f:38:47:9e:eb:80:a0:6d:a0:a4:18:da:6b:d7:7a:ea:da:df:
73:28:b2:a6:68:01:7c:45:2a:8c:2f:49:99:a1:33:d4:15:03:
1c:b4:86:91:8a:35:8e:2e:ae:87:9c:28:86:dd:ed:d6:46:d2:
9e:ce:e7:27:67:9e:d0:c4:dd:c5:d7:4e:4e:f7:12:3c:fc:bd:
5c:8a:62:74:d5:32:0d:32:95:0f:90:ec:43:ea:67:97:7e:5c:
c8:65:b6:d3:7b:1b:74:eb:67:b1:9b:94:87:83:a1:6e:ee:f3:
62:6f:cb:e7:1b:3c:66:3e:88:f2:c1:92:e5:33:10:44:3d:d5:
d2:88:ba:7b:b0:af:79:8d:59:43:54:de:7c:d6:67:78:4d:cd:
c1:ca:31:9f:f3:1a:fe:57:20:92:4f:18:83:c9:98:ad:cb:a7:
dd:10:96:b2:00:e1:c3:27:aa:f9:b0:df:93:0f:e4:36:0e:d5:
5b:63:62:07:28:c6:c6:d5:f3:b2:ce:40:ac:35:f0:28:b9:f3:
6f:59:56:35:82:c9:2f:0a:8a:30:dc:4c:9e:65:47:53:f8:55:
f6:25:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:29 2025 by rpki-client