Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: OAQBbmK22jGFkg0+5UrqhjA8DF5lsiEpfxrRU3akM/c=
Subject key identifier: 2E:FC:48:2E:12:0A:75:EE:73:02:96:78:7E:93:DF:C6:DB:33:73:19
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 0199228D16F723A20BA2DCC04C173038FC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0E89
Signing time: Sun 07 Sep 2025 05:01:35 +0000
Manifest this update: Sun 07 Sep 2025 05:01:35 +0000
Manifest next update: Mon 08 Sep 2025 05:01:35 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: 9BNndkp1kt4UNpIQWZaxCXyaKfLmQH9TQXbZCHxxzr0=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:16:f7:23:a2:0b:a2:dc:c0:4c:17:30:38:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Sep 7 05:01:35 2025 GMT
Not After : Sep 8 05:01:35 2025 GMT
Subject: CN=2efc482e120a75ee730296787e93dfc6db337319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:70:16:15:13:1e:c3:b9:33:7d:7c:9e:b8:
cf:48:26:9f:60:ae:a8:82:5c:cc:b1:6f:43:5b:e2:
f0:24:c5:39:45:a4:a8:20:da:cf:50:a2:46:b5:85:
b8:58:47:9e:87:fa:c6:1c:24:b0:77:2d:e8:6b:8e:
ed:30:93:37:96:06:80:32:1d:b7:41:a3:b6:87:8c:
54:47:77:b2:ba:fa:80:be:f4:21:cf:1b:35:e7:48:
13:da:c6:a8:3e:98:80:2e:1c:e1:e0:c0:ba:06:69:
a2:4b:00:34:e3:3f:21:20:ca:d9:35:63:3a:08:3a:
47:b4:86:47:4a:d4:78:db:26:27:62:99:e4:ba:ad:
f1:09:ed:99:8b:ad:1a:81:a8:a3:fd:8b:5f:b7:6d:
fc:5b:a9:e2:38:35:f9:d6:2c:82:9e:d4:47:b2:43:
f8:f4:04:4e:5d:17:6c:7f:55:86:66:b0:62:09:3c:
97:b4:ec:83:20:44:d6:eb:b5:90:57:a7:63:d7:21:
1f:08:36:ed:7e:8e:57:79:99:11:df:e0:59:6f:34:
45:a9:7c:e7:e1:a3:c4:b9:a6:3c:34:a5:05:0b:27:
80:37:80:aa:35:a1:2d:ce:d8:fa:4b:ab:b5:02:02:
9c:3e:ee:7a:cc:ef:f3:5f:55:f5:e1:42:e2:88:d7:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:48:2E:12:0A:75:EE:73:02:96:78:7E:93:DF:C6:DB:33:73:19
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6a:f7:be:10:5e:ba:a8:ab:40:ba:d2:e2:da:aa:10:61:15:
4a:5e:a7:1f:f0:aa:f4:5e:6a:46:d5:78:ae:41:43:c8:ec:8d:
cd:56:02:e0:ab:37:5b:55:0b:46:f9:19:3b:de:20:24:1f:ba:
3f:13:f5:b3:f3:70:b7:66:5c:f0:40:0d:db:22:8c:82:8a:3f:
b9:9f:7a:3f:d1:ed:66:aa:85:51:a7:cb:01:6b:ce:0d:33:dc:
fc:b5:c7:b5:c3:88:7f:ad:ed:e2:08:d6:69:f6:05:28:35:8e:
be:6d:db:33:ac:68:ba:94:29:20:40:77:ec:88:1f:b3:36:4c:
59:51:9e:35:2c:98:d4:33:90:7b:37:af:26:34:d0:92:7a:9e:
35:2d:12:8f:8e:a6:6b:9e:e1:c2:be:4b:72:0e:75:33:ed:d5:
86:8b:0a:39:2a:c1:f6:18:bd:fe:b4:a4:39:c9:29:8c:7f:d3:
f3:23:29:34:99:f5:f5:80:4d:24:57:11:9c:0b:f8:89:c6:74:
a6:cb:2f:b4:d0:71:11:62:59:8f:c1:c4:78:43:e8:9e:84:01:
8d:2c:8d:b3:dd:00:ae:1e:80:a4:7b:2f:0e:33:a3:b2:4d:e7:
39:14:34:f9:db:26:8f:93:67:ea:70:df:45:47:a3:64:fe:40:
69:a8:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:25 2025 by rpki-client