Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: TsmotpNaGd/idTG+h5wDiKz7ZrLnERmNlMpNantArgM=
Subject key identifier: DA:3D:11:F4:D8:A1:EE:BB:FB:BF:C6:FF:C1:2E:DD:49:5D:F7:D0:F9
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 0199239FE2E85FFB8BEDA9766FFCA20F7FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 0E11
Signing time: Sun 07 Sep 2025 10:01:44 +0000
Manifest this update: Sun 07 Sep 2025 10:01:44 +0000
Manifest next update: Mon 08 Sep 2025 10:01:44 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: 3prmCsJHn+bixPYekwtIKVIbqqYoXr2TbegJ0MQG31w=)
2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e2:e8:5f:fb:8b:ed:a9:76:6f:fc:a2:0f:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Sep 7 10:01:44 2025 GMT
Not After : Sep 8 10:01:44 2025 GMT
Subject: CN=da3d11f4d8a1eebbfbbfc6ffc12edd495df7d0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:5a:09:66:ad:fc:2f:6d:6c:eb:12:6a:31:
e5:7e:b6:dc:76:c6:25:3a:7d:80:dd:d7:05:a2:c6:
89:03:c2:4d:2b:78:7d:a6:05:f9:66:14:7e:79:af:
3b:b4:96:d5:ea:c1:ca:e7:7e:87:04:56:e0:47:9b:
5a:c7:65:b2:62:9c:38:08:a2:90:c7:1e:02:9f:16:
66:1e:5c:c8:73:39:8d:4a:a5:2f:91:a4:c9:4b:31:
bf:58:06:f7:c1:eb:7a:8d:8f:12:9f:53:8e:aa:31:
46:c8:4e:22:03:98:ff:c5:67:6c:50:ed:81:ef:34:
07:ec:06:22:7d:33:62:6b:dc:8a:48:13:c9:44:19:
fd:ee:f5:1c:2f:f2:f9:7f:56:7d:81:85:81:71:6e:
76:04:38:00:79:bf:6a:fc:95:30:f0:f6:43:70:a5:
0d:2c:60:0a:8a:0b:2e:1b:80:61:06:8f:d8:7a:a0:
b3:42:31:bc:85:52:3e:08:a9:80:4e:de:6b:8d:66:
74:ea:37:11:8b:11:c0:77:8f:7b:14:71:ec:dd:cb:
d0:32:47:8f:06:2c:38:d6:9f:0f:8b:ab:f4:87:81:
b0:18:8c:39:55:19:e0:62:54:10:7d:b1:9a:6e:a8:
cf:d1:13:92:57:ad:61:57:7c:10:b5:c4:45:8a:0c:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:11:F4:D8:A1:EE:BB:FB:BF:C6:FF:C1:2E:DD:49:5D:F7:D0:F9
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ef:db:21:9f:60:94:1f:ba:5b:19:24:94:9d:f7:03:6f:f7:
eb:2d:1d:02:8a:2b:27:f7:c0:88:9f:ef:bd:5a:95:16:37:af:
2c:60:e6:02:df:75:5f:ad:c8:38:97:5c:62:c3:4d:2a:74:26:
5e:57:ab:80:0d:b6:72:0e:51:7c:9e:9a:38:bd:41:3f:92:ff:
d2:ce:90:0b:2b:35:d0:49:4c:de:36:30:bd:21:ae:30:12:25:
75:a0:dc:9b:4b:ea:df:d4:8e:8c:24:91:20:a8:77:86:56:79:
74:ab:27:ce:a4:db:23:bc:38:71:85:8c:69:44:de:3e:fa:45:
ab:c2:d4:bf:60:33:82:1d:21:25:33:b6:1c:02:92:98:6a:4e:
54:ca:59:5b:5b:16:95:a5:e2:d0:74:b8:4e:30:27:ea:c0:29:
df:74:51:84:b3:3c:48:a0:ba:dd:f0:35:a7:7f:b1:d3:f1:1c:
3c:44:35:35:bf:ee:5a:43:5d:46:f2:ba:ae:79:86:8e:e2:5c:
b6:a1:25:f7:00:e9:f6:ef:f2:4a:1e:5c:42:91:4e:b7:13:e6:
32:72:1e:ce:2d:62:67:fe:03:76:34:0b:4d:fd:d2:8b:56:3c:
c4:8b:5d:7b:70:85:9f:f5:13:8d:4e:b1:04:f1:d9:6e:aa:1c:
c6:2b:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:18 2025 by rpki-client