Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: SrC5wXrDlCwJQx2gHiEwRxY8VdqwVyfVLL5LI9gJvcY=
Subject key identifier: 21:28:A6:40:9F:B0:ED:52:7B:61:EE:B1:E4:29:D8:79:5C:8D:16:61
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 0199240CC701CBD4A26A757FEF7A325D2903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 12:00:41 +0000
Manifest this update: Sun 07 Sep 2025 12:00:41 +0000
Manifest next update: Mon 08 Sep 2025 12:00:41 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: 0XoI/HbTyQmr60wqVE47aGJozIWqJ2n/Pw6xfEx52v0=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:c7:01:cb:d4:a2:6a:75:7f:ef:7a:32:5d:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Sep 7 12:00:41 2025 GMT
Not After : Sep 8 12:00:41 2025 GMT
Subject: CN=2128a6409fb0ed527b61eeb1e429d8795c8d1661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:e5:ed:13:ba:38:3d:f1:a1:32:47:18:fd:
5f:99:ea:8e:42:ac:1e:a3:1e:f1:f9:20:7e:2a:2e:
4c:96:61:da:85:c6:f7:33:38:0f:7d:65:b2:af:ee:
b4:db:0b:b1:45:8d:34:43:30:3a:06:d6:61:f1:ab:
18:c0:fc:b0:36:d3:3c:59:2d:85:3c:05:8c:8f:86:
c2:1c:8a:a6:f1:62:82:df:e1:44:d0:e7:09:64:50:
c0:8f:76:04:88:2b:1c:94:e2:4d:72:94:e4:18:8c:
82:63:d0:11:a3:a1:3d:a5:62:0c:82:d7:43:d2:93:
28:d6:1a:d8:c7:0a:af:f9:28:c3:37:7b:ed:55:73:
b4:68:d8:f3:53:3c:22:14:16:6a:d4:4c:5d:96:c8:
cd:42:3b:6f:f3:bc:36:da:d0:fb:d4:44:9a:48:21:
86:93:ce:a7:6f:e5:51:ef:00:4d:89:76:3a:76:3a:
21:c6:19:17:8a:62:c6:17:b2:14:62:90:50:16:01:
9b:c9:6a:b0:20:af:ef:52:8d:3f:70:30:31:f0:f0:
a9:e1:6d:18:7f:6d:5b:ae:43:83:4c:cd:9a:71:5f:
27:cd:16:28:9e:87:3b:2f:17:7f:f6:79:04:c7:f8:
dc:fe:e9:dc:38:be:0f:b5:70:9e:76:52:fb:8b:ff:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:A6:40:9F:B0:ED:52:7B:61:EE:B1:E4:29:D8:79:5C:8D:16:61
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:70:3d:5b:13:a6:59:3f:cc:0d:17:70:74:b8:3c:db:c0:c0:
da:ab:55:4e:41:0d:f6:62:28:23:ec:f1:84:26:47:dc:50:b5:
e9:98:92:25:e8:98:ce:ad:39:08:ce:c0:de:81:5d:46:2e:28:
fd:01:18:3a:ad:8d:9c:89:1a:1e:e7:95:52:f5:80:a1:76:46:
51:bb:6f:9b:5e:ed:c0:90:1b:2a:83:3e:08:ef:84:a8:5f:f9:
ec:61:5a:fd:2f:26:0e:14:bd:35:54:e2:7f:84:ba:62:22:d3:
ea:ec:1d:1b:91:5d:0b:14:de:54:95:8a:44:4f:8a:e0:a8:ff:
a4:69:31:90:36:8d:92:fe:bf:27:98:ac:cb:f6:3a:2e:ec:68:
0a:62:97:c0:ab:65:7b:e3:11:8c:f4:93:bd:d6:a6:18:e8:a0:
28:24:1a:bf:9d:c4:5e:98:3a:fe:be:c9:4f:ac:a3:f2:c0:c8:
b2:a9:65:e0:c2:06:1e:de:52:06:9d:b3:a2:c4:cd:5f:80:69:
e0:58:9e:8e:fe:2f:db:db:22:c2:a4:e0:9d:66:a3:f5:8b:80:
3e:0f:93:a8:0a:cd:0b:c2:75:57:36:1d:db:0c:da:84:8e:d1:
5d:dd:53:d8:14:8b:3e:bb:ca:f1:12:99:65:17:a6:ee:3c:8d:
82:80:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:04:39 2025 by rpki-client