Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: NMPq+g++3ppaX1Ijdpjj94FphoBmPOhszzoeZOrwD2Y=
Subject key identifier: D2:56:6D:C4:2E:1E:6C:D3:2E:6C:94:35:B7:2E:A1:BF:90:80:07:38
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 019922556A49C000085B6884A213D5B38AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 0DD4
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: 7tC4vq1aQ8pb3JjOQTDoRnw5bafp6RSrvSTcLFzVKPQ=)
3: UwN1BiytNRPdcWnqBjZDDgnoG8U.roa (hash: GAg0iRD5NjIqqH0MJGqVfIOd1Fcwz79I/HxN8NQjQ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:6a:49:c0:00:08:5b:68:84:a2:13:d5:b3:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=d2566dc42e1e6cd32e6c9435b72ea1bf90800738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:12:fd:1e:5e:2d:d6:b5:d4:72:53:0f:26:
6b:6c:3a:eb:86:58:88:0f:dc:6b:ad:f2:0b:39:7f:
a9:a6:f7:24:e7:46:96:1d:c2:f9:ac:1d:83:9f:f2:
87:39:b1:95:67:69:f2:b1:38:70:44:3a:99:d5:98:
21:87:bf:83:c4:58:cf:b7:51:57:06:16:db:e0:89:
82:ed:f0:7f:54:8d:70:93:c0:f6:ea:d7:8e:c5:af:
cd:c5:09:c1:99:3f:0d:a2:57:67:99:00:f9:d3:62:
8c:35:d1:c8:c3:f7:42:b9:68:5c:e6:52:c9:a0:20:
e6:f7:44:36:17:a4:4a:53:53:eb:6b:47:2b:3a:da:
17:81:b2:72:8d:4f:f2:93:fd:2b:c0:de:72:77:3a:
9f:8e:05:85:07:29:6e:51:fb:bd:b4:24:f8:53:3c:
0a:cd:cc:8a:e5:0c:46:b1:d0:0a:e9:ab:aa:0a:0a:
18:4d:e5:1f:e0:8a:b6:62:31:70:bf:30:a5:dc:de:
90:65:b4:63:4f:3b:af:b9:95:99:c4:9e:19:4b:8c:
65:01:f7:f4:e8:98:e0:0f:0c:e8:10:52:2a:26:17:
64:83:43:84:76:5d:91:4f:05:40:07:32:8b:c2:6d:
97:a7:a7:f8:5c:0a:2e:bc:94:74:37:f3:99:bc:0b:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:6D:C4:2E:1E:6C:D3:2E:6C:94:35:B7:2E:A1:BF:90:80:07:38
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:56:4c:32:78:06:3e:0b:0e:db:19:5f:da:91:e9:1a:9d:
d9:49:6a:45:a1:89:5e:ed:19:14:c6:aa:5a:21:58:19:37:d5:
44:82:9e:de:7e:6e:5f:fb:17:6d:46:c7:1b:23:eb:4f:ab:52:
d4:36:e3:12:b1:fe:cc:cd:ff:ac:34:e1:5a:8e:76:b7:6e:b8:
1b:73:4b:d9:a4:d2:79:5f:79:57:c4:61:39:d6:8e:a5:9e:a3:
35:4c:25:12:74:6b:03:28:3f:00:d4:a8:ca:a3:29:a2:56:38:
e0:f1:79:58:92:73:da:47:0d:d4:e5:53:62:57:35:7f:24:24:
e4:b7:40:b2:55:ed:33:78:60:c8:6e:3f:c2:09:6b:30:d1:bc:
cb:c7:cf:64:e0:0d:93:84:e4:38:fd:ed:7f:ac:3e:a2:0d:b2:
f5:0f:e0:89:15:9a:1c:f5:79:ae:96:48:8c:57:70:2b:a9:c5:
ee:52:12:92:ee:8d:23:1d:3a:64:1f:0f:77:f9:2a:8c:3b:bb:
e2:9b:c1:bb:29:92:f9:43:4d:e8:3e:4a:4c:0f:5d:28:3d:9a:
f6:f9:54:65:8a:e3:f9:60:e5:c7:54:76:21:ba:1b:78:b3:f9:
ee:5e:02:59:4d:44:57:16:39:1f:b7:f6:f2:a7:4f:1e:e3:2d:
d5:fb:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:58 2025 by rpki-client