Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: fzESI9KXc2cko0YQDKZXZ9iILhfHBBCzOmH8D94oB7Q=
Subject key identifier: 9F:F6:09:90:8C:17:58:BB:92:13:86:5F:56:61:C4:A4:D0:06:6D:04
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 01984A09D295898E37B86CABBFC700241865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 148B
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: v58pqmAim8F5gFgqE4GUw4OLqszzzlZRd+iBDCyP6Kw=)
2: Y5hh8AgGKAUf_2S15Xwk_892p60.roa (hash: baZuJeVmztFazA/spLlePhpdINyXpI1DJgHdXLAL5/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d2:95:89:8e:37:b8:6c:ab:bf:c7:00:24:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=9ff609908c1758bb9213865f5661c4a4d0066d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:bb:70:82:2c:9f:a8:5a:df:67:88:20:6d:
24:32:78:d1:88:86:4b:c3:d3:6f:6f:ca:25:92:8b:
af:70:ed:f8:41:46:12:83:54:d1:05:e4:68:3a:61:
5f:20:35:c8:c3:db:90:8c:2b:9d:f9:bc:af:2e:2c:
2f:4c:12:bf:9a:95:25:d1:83:9a:8d:72:f1:a1:bd:
35:2e:72:49:0c:4f:6d:7a:95:e5:41:7a:7e:21:ac:
73:96:85:38:87:c1:49:99:94:fa:e4:d1:b9:3b:68:
16:af:ef:41:8e:81:de:f7:7e:40:10:c8:36:7a:b3:
9c:0a:59:f7:94:7a:a3:4b:e4:32:7d:6c:f0:1e:11:
b6:be:6d:60:d0:4a:de:7e:27:fc:85:7d:f0:cd:57:
22:73:eb:db:b2:84:5d:e7:06:ab:7a:e1:05:d2:c3:
fa:66:52:2d:b2:59:50:2d:d6:51:cc:75:1e:36:b5:
d5:5a:f9:54:42:14:a7:7b:8d:1e:d1:8c:3f:cc:90:
a7:1d:96:06:95:67:79:0f:ed:4a:5a:41:d6:85:aa:
b4:6d:09:d2:41:89:50:b5:4d:db:cd:47:38:2b:75:
aa:a4:7e:28:86:ee:d2:30:dc:75:7f:59:b6:c4:cb:
6f:46:49:1e:cb:1e:3a:23:34:1c:ec:92:24:62:11:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:09:90:8C:17:58:BB:92:13:86:5F:56:61:C4:A4:D0:06:6D:04
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9c:75:57:9a:fa:fb:ef:37:9a:5a:53:08:17:8a:3d:d6:b8:
db:d0:2b:3d:78:7b:7f:bf:9e:7b:34:24:c7:31:7c:4b:d2:9c:
11:94:43:1c:18:ce:cf:10:ba:43:46:df:a5:11:61:db:b1:9a:
27:bd:1b:f1:24:17:93:0c:f7:2d:44:e2:e2:0d:b0:dd:b2:41:
f4:1e:d4:e0:f7:28:e1:da:0e:61:6c:48:a3:9e:01:b0:e8:33:
4b:06:52:b7:cd:ed:a6:d8:d7:3f:36:fc:7c:81:6e:b3:d1:02:
b2:ae:da:12:fe:40:fc:ad:5d:7b:08:4c:90:96:c4:e3:52:e4:
be:50:83:03:47:9d:67:da:cf:39:57:41:10:82:7f:bf:d5:15:
3a:ce:b0:6d:2d:48:b0:49:0d:0a:42:82:5c:59:f0:22:f1:5f:
ae:e7:89:d0:d7:a7:a8:8e:16:45:9a:a7:5b:5a:b6:02:4e:b3:
b5:8b:a7:ce:f6:fa:08:c9:8e:c4:e8:54:e2:19:f1:60:f7:03:
d2:aa:8d:dd:40:aa:c0:02:6f:c7:2f:94:82:ff:13:64:5f:71:
d2:c7:26:ef:2c:cd:ea:57:c8:72:60:08:fe:dc:69:7f:0f:5c:
f2:9a:d6:f4:22:c1:9d:a0:ed:3f:16:8e:7d:eb:5e:a6:aa:43:
33:b7:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:28:48 2025 by rpki-client