Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: 0t2MpNasS1RBboGLy+JTagevuVpcGXnHb8NXKm8CQd0=
Subject key identifier: B2:0A:9E:31:8B:3C:9E:94:E1:CC:A2:05:BD:7E:3B:42:C9:83:16:7E
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 019921B263C9EC9F927255EDEA7ADDC0A70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:43 +0000
Manifest this update: Sun 07 Sep 2025 01:02:43 +0000
Manifest next update: Mon 08 Sep 2025 01:02:43 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: Y5mCVvOL1/3FHWpApGO8YWwxZF5zIHLCLoRQPy9QYkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:63:c9:ec:9f:92:72:55:ed:ea:7a:dd:c0:a7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Sep 7 01:02:43 2025 GMT
Not After : Sep 8 01:02:43 2025 GMT
Subject: CN=b20a9e318b3c9e94e1cca205bd7e3b42c983167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:d1:3b:d6:e6:40:cc:3a:72:68:62:46:57:
a2:3e:10:6d:7b:5e:c9:4a:42:a1:2d:7a:9d:01:91:
6a:81:6d:8f:f2:55:e5:71:f0:bd:c2:26:89:4b:48:
e9:d7:97:75:c8:ba:fa:aa:7a:bb:41:05:a3:9e:00:
52:ca:7f:5d:8a:a8:38:fe:f1:07:e3:c4:a4:4d:ca:
e7:6d:f6:3d:06:be:ee:b2:e1:a7:90:6d:5e:b5:9a:
48:13:38:4d:1a:d8:50:65:f9:65:20:e0:56:6b:c9:
aa:0c:75:af:d7:a2:10:75:f8:5e:40:61:2c:2c:71:
65:d0:e9:c6:a8:76:5d:0b:52:04:a9:a5:1f:26:3a:
2d:0d:10:50:db:27:e3:f1:67:9d:8d:df:69:3d:4a:
30:30:3b:18:e9:32:de:ff:dd:8d:44:6d:2c:4d:3b:
41:8b:4f:ca:09:58:c4:3d:51:9f:7a:a5:87:6c:5b:
53:cb:63:da:a6:f8:6f:70:2b:73:d2:bb:cb:ff:d1:
da:f7:c4:5c:33:7e:2e:be:a4:c7:2a:6a:69:f0:df:
d8:f2:93:1a:3a:ca:37:b7:16:28:dd:61:9c:2a:04:
eb:9f:05:eb:e9:19:7e:94:4f:bb:fe:43:d8:af:15:
56:9b:13:e3:e0:d2:50:a5:17:02:44:70:f6:8b:59:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:9E:31:8B:3C:9E:94:E1:CC:A2:05:BD:7E:3B:42:C9:83:16:7E
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:94:92:90:47:78:2d:e2:01:8d:52:c7:f3:b8:ee:6b:71:4f:
0e:5f:b2:1f:c5:26:79:44:6c:b3:f5:b5:e1:ea:5e:f5:91:7a:
07:ee:85:71:fc:9a:e2:ff:25:53:21:bf:a4:f4:bb:2d:73:d3:
f9:b3:f9:ba:47:ed:6f:a0:b4:be:ab:af:0e:ce:37:28:94:50:
14:04:fb:93:6d:b6:b1:80:66:0e:50:d0:51:20:c5:8e:7f:60:
2b:c9:53:7f:29:a5:f7:81:fd:7e:e5:8b:f9:b5:cf:ca:ce:ec:
21:1f:e2:69:4e:46:2f:cf:15:52:d6:f1:53:dd:74:31:57:be:
04:8c:ae:c5:1d:7a:11:99:b4:77:76:3f:4d:5c:f0:a6:73:a4:
ab:a4:bf:53:9d:01:1c:dc:51:9a:5e:af:cf:da:78:e8:c0:78:
45:73:fe:96:3e:18:8c:c4:7c:f2:e9:a8:ac:e7:a7:b1:b5:c6:
2f:98:ed:4b:86:36:90:3f:8e:14:92:f5:d9:1b:11:74:99:e9:
9a:19:a3:80:aa:50:68:8c:cb:05:74:59:65:a9:a4:87:31:1a:
42:95:ab:f0:f0:d8:51:7b:a3:4a:55:09:1f:0a:37:2a:37:e5:
39:1b:0d:1b:2b:0d:5e:d0:55:45:6e:d7:2f:64:6d:b2:b4:fc:
44:0d:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:32 2025 by rpki-client