Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: Z7GCr+aIvd+2pl6ejVWy6dhdfUcBRsCOOANQr4HEulI=
Subject key identifier: D8:D8:88:5E:BB:D6:B9:02:1D:3B:3D:EC:1F:46:4E:4A:6B:18:32:0E
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019849660F9284DEA039E9F23DC437E3B1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:22 +0000
Manifest this update: Sun 27 Jul 2025 01:01:22 +0000
Manifest next update: Mon 28 Jul 2025 01:01:22 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: VAJTD/IHYwmP6tlFO2BQAW+8GSsi/nqCKgKqto6PHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0f:92:84:de:a0:39:e9:f2:3d:c4:37:e3:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Jul 27 01:01:22 2025 GMT
Not After : Jul 28 01:01:22 2025 GMT
Subject: CN=d8d8885ebbd6b9021d3b3dec1f464e4a6b18320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:19:6a:82:e0:44:43:fd:ed:02:f2:d3:a5:
8e:9c:c2:0d:3d:a2:a2:58:f8:eb:2a:8b:0d:08:ca:
af:00:02:d6:87:76:6d:1d:b1:ce:c7:e7:be:5f:07:
fe:b3:c6:8a:4f:46:36:8a:74:97:dc:4d:ef:8d:b7:
4a:0c:ba:2d:c8:e4:a3:03:ca:65:1c:07:95:a9:13:
28:c7:89:fb:b8:bb:3b:75:5d:d8:f4:7c:0a:fa:a9:
d0:75:49:94:ef:ab:96:32:55:ac:a9:3a:e9:28:d0:
bb:9b:ea:d2:41:98:94:f6:46:c2:bf:a7:3f:54:ef:
fe:89:62:d4:07:7f:00:32:0c:1b:ad:e2:34:00:0c:
0d:a9:d6:d7:43:7a:97:46:83:21:6b:6e:c5:93:f9:
e9:97:03:15:df:4f:12:c9:a5:9a:ac:98:c3:ee:ae:
fc:04:0a:ff:11:f8:22:92:90:2c:07:28:cb:4c:e0:
3a:9b:1f:fa:20:29:df:fc:27:d4:c1:83:5e:67:20:
d4:24:00:8a:1d:dc:0b:ba:95:3c:7b:e9:c8:c3:a6:
2c:50:06:25:bd:1d:29:34:42:6a:be:b8:a3:3d:2f:
99:24:1c:c5:32:b5:88:89:09:e4:a0:43:1d:0f:54:
e1:53:b3:66:4b:20:2d:11:74:ee:58:a0:8d:db:c2:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:88:5E:BB:D6:B9:02:1D:3B:3D:EC:1F:46:4E:4A:6B:18:32:0E
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7e:ff:75:0a:b1:5d:43:1a:01:83:e8:e0:84:6a:e8:8d:d4:
c9:27:c0:94:35:98:45:56:92:5e:bb:9c:8a:a5:94:fc:07:e5:
a9:14:83:f8:d2:50:a9:ce:0d:bb:ce:a0:5c:5e:2e:f4:64:6e:
00:cb:09:2c:f0:60:17:ad:37:de:d1:ab:7f:f9:e6:0f:e9:91:
e9:c5:ec:9d:a8:fa:5a:15:74:1a:da:74:7f:05:e0:13:ac:36:
d7:9f:8e:fb:1e:5f:1f:4f:6b:7a:5b:5c:bf:7e:4b:87:d7:10:
33:9a:64:52:83:a8:5f:10:f6:06:3b:cd:1c:53:8c:43:dc:25:
59:21:d0:3e:3e:42:a9:57:fe:cc:83:af:7e:3e:bf:39:f7:45:
05:82:7d:54:9e:a0:c4:5e:20:5f:b4:ec:a0:97:b9:c6:9a:67:
4e:54:d1:1a:f7:7b:fb:e0:40:32:cd:3b:90:b4:50:c3:14:28:
f8:da:1b:78:ba:db:75:3b:14:1f:57:c0:6c:ca:2d:73:d3:e9:
f4:db:ae:52:71:dd:e0:22:38:01:89:d0:9f:9d:9a:e8:91:ec:
a2:f7:81:c2:1d:ad:8c:e3:2f:6a:92:6e:fd:d0:52:a1:1e:4a:
52:24:08:77:fb:b4:a0:b6:2e:21:4d:49:61:d6:8b:f1:75:72:
ef:5d:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:54 2025 by rpki-client