Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: k1ytVSEPkgHtvyfQG34+TUiJJwMEf9Y4Loon3Mbb44s=
Subject key identifier: 82:10:C3:02:5F:CE:01:30:A7:7F:52:FE:47:CD:00:57:A1:08:D2:A0
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019889209AEE4BC877BFE35901F564ED2EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 10:01:11 +0000
Manifest this update: Fri 08 Aug 2025 10:01:11 +0000
Manifest next update: Sat 09 Aug 2025 10:01:11 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: 1pbygxRAEuiB64arowJ+qrkt27XC7MAJgBd3sD/ULoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:9a:ee:4b:c8:77:bf:e3:59:01:f5:64:ed:2e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Aug 8 10:01:11 2025 GMT
Not After : Aug 9 10:01:11 2025 GMT
Subject: CN=8210c3025fce0130a77f52fe47cd0057a108d2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:13:8d:cb:2c:50:ec:9e:54:e4:a8:db:b6:
0c:04:cb:d4:de:1e:cb:9d:ec:91:de:68:bd:87:1c:
3e:aa:d6:58:a6:04:41:12:15:5a:ed:9d:79:c9:2c:
8a:d8:ac:6d:a6:82:eb:3e:88:ce:09:a9:44:5c:89:
9f:c9:06:68:a5:68:c4:06:3f:c9:d0:bc:10:17:91:
b6:c2:5a:7f:f3:a2:dd:04:9a:e9:f9:b6:28:81:57:
71:75:37:7f:bb:4e:1a:39:66:f1:7c:88:cf:d0:1e:
93:ca:9f:e9:da:80:71:ba:b9:0a:36:48:3f:98:93:
9e:2c:69:fa:f3:d7:b0:81:70:c8:5e:80:6e:f2:cf:
9e:00:23:df:27:5b:5e:7d:eb:fa:40:9c:22:9d:34:
8b:ca:20:6a:34:2a:c9:6d:ca:dc:d1:b8:63:b7:96:
af:e1:d7:59:fe:38:a9:25:c6:d3:ce:06:7f:cd:0e:
d6:5a:d2:ed:23:8d:38:e3:f0:61:29:79:94:d8:a7:
bb:15:fc:d9:bc:8e:c1:ca:ef:d7:77:63:9b:9d:81:
97:17:f3:25:36:bb:9b:2d:9e:fc:e5:84:34:f8:2a:
76:5c:64:06:5e:2a:5d:ef:66:7a:9c:ef:7a:88:20:
26:e7:6e:68:c0:20:33:e7:74:21:14:b3:86:5c:b1:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:C3:02:5F:CE:01:30:A7:7F:52:FE:47:CD:00:57:A1:08:D2:A0
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:82:50:72:22:c9:bb:d5:91:17:e8:eb:58:3d:8b:e9:b3:
26:68:0c:9b:06:68:dc:20:9e:e6:29:2f:7d:c4:af:eb:7c:55:
8b:7a:98:24:be:f5:d5:84:94:64:25:b4:01:1f:65:f4:9e:a8:
ee:0a:44:1b:8e:aa:f1:cb:9b:37:dc:ee:da:56:cf:a3:b0:56:
ec:57:a9:e1:b5:1f:64:84:f3:a8:6f:3a:05:74:db:7a:df:c8:
26:44:26:50:45:56:d8:15:aa:68:ec:01:df:8c:0e:d5:9b:28:
a5:5c:b7:28:9b:07:6e:77:d9:2e:52:24:d7:c4:cf:cb:3a:57:
73:01:d4:76:89:a3:ee:51:d1:78:0e:b6:7a:34:8f:60:cc:8f:
fe:de:1c:c3:12:a5:99:d1:ad:47:77:8b:6e:c9:f1:1e:f0:c5:
b3:11:fd:f9:43:dd:19:e8:e0:06:13:31:43:18:44:0d:64:a8:
d0:40:f0:6e:a0:8b:0d:04:4c:fd:97:20:21:29:fa:4c:5b:52:
d9:3b:a5:02:19:53:0d:59:2d:dc:1b:18:f1:3f:e3:bd:a4:b2:
74:66:f2:99:e9:6b:ec:8c:90:d9:ba:4f:cc:19:9e:d3:01:95:
9a:66:fc:7c:11:96:30:12:5a:a1:78:3e:1d:aa:e2:9d:16:61:
ee:b2:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:13 2025 by rpki-client