Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: aQmBwgSqWt+Dm6/79viryAfnI/czoK3F7J1jM8bkqoo=
Subject key identifier: 91:7D:E2:18:6A:F7:47:68:8C:15:4E:75:15:35:9E:BD:9E:72:06:37
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019955309522FF1D5F93AF19BE90FEA8C8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 03AB
Signing time: Wed 17 Sep 2025 01:01:11 +0000
Manifest this update: Wed 17 Sep 2025 01:01:11 +0000
Manifest next update: Thu 18 Sep 2025 01:01:11 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: KI4PCTwfkrrHZiIteoOTvilowzq3XIi0Xq791PhahyM=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:30:95:22:ff:1d:5f:93:af:19:be:90:fe:a8:c8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Sep 17 01:01:11 2025 GMT
Not After : Sep 18 01:01:11 2025 GMT
Subject: CN=917de2186af747688c154e7515359ebd9e720637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:e7:b6:1c:c3:c4:55:ed:6c:d2:eb:c0:be:
15:ca:33:d1:4f:d6:5b:08:f3:df:b5:c9:73:9c:f3:
f3:8e:f0:00:c8:16:ed:29:14:ac:81:1a:ff:d0:3f:
82:6a:00:dd:23:f0:91:63:c1:ab:7f:1a:66:b5:52:
19:02:28:c9:ce:7e:42:9b:71:8f:64:49:28:d2:06:
ef:90:d2:7e:75:ef:06:78:f9:aa:d4:a7:32:8f:de:
e0:5c:d3:24:a5:63:dd:b3:d9:fd:b7:61:6d:3c:2c:
e4:9b:b1:73:d0:d4:28:1d:07:c6:4d:e5:1c:ee:30:
0f:1b:97:1f:2c:2d:5a:9b:7f:3a:f1:8d:32:d4:33:
4a:97:bd:dc:1c:ad:b9:81:e1:48:d4:4d:76:74:75:
41:35:20:0a:51:bd:2d:89:42:f3:15:c5:be:b3:dd:
86:84:1d:15:da:fd:83:11:ed:a1:ff:a5:f3:32:61:
3f:c0:90:7b:5e:91:5c:d7:2e:86:c7:e2:48:a4:2a:
d8:a9:c0:e1:14:2a:bb:f0:51:e1:86:b2:67:68:46:
b7:b6:52:59:43:d3:2f:f4:bf:cb:04:6c:cd:a2:35:
0b:7d:37:94:33:e9:90:93:fd:e1:64:f6:51:00:28:
cd:b2:4b:02:ac:22:fe:a9:fd:b1:fc:00:ae:c7:9f:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:E2:18:6A:F7:47:68:8C:15:4E:75:15:35:9E:BD:9E:72:06:37
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:83:82:fc:5b:68:eb:31:63:8a:75:42:48:d6:00:ba:01:40:
3d:ab:02:c4:38:e6:6f:82:6b:84:92:31:8f:e7:58:36:c7:b0:
5d:f3:75:a2:12:43:8f:67:19:9b:89:c7:56:06:e3:2b:07:83:
cd:47:95:3c:1b:47:cc:2a:38:d1:e1:d9:25:02:5d:5c:20:5b:
b2:a4:89:47:cc:16:ba:e4:e0:fc:76:36:fb:d3:a7:35:f4:31:
63:6d:fd:9d:49:4f:10:8b:8b:9b:9e:c9:5d:98:ee:29:54:c9:
bf:27:65:6d:97:37:ec:2e:72:be:1f:8d:4a:3f:1b:b6:3a:15:
b7:94:34:4f:ce:da:64:e9:51:5f:a1:5c:4a:f0:3c:c7:86:0c:
81:8b:40:db:f4:17:7d:be:29:c6:3a:f3:43:d9:75:41:85:88:
11:ee:c7:b5:82:ec:a2:7f:bd:8b:fd:ed:79:fa:8d:6b:a2:b9:
a3:04:88:05:57:ef:78:e5:db:f1:1f:5b:32:bb:4b:cc:22:b7:
16:86:a0:1d:4a:86:d1:0d:65:15:80:ed:88:9d:07:15:31:da:
6f:d0:89:3a:be:d7:03:96:ff:e4:e6:cd:94:7f:15:15:bd:61:
15:41:13:fa:8b:0d:7f:ba:f0:92:d1:1d:6b:9c:14:fc:bc:f0:
c7:3d:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 05:10:22 2025 by rpki-client