Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: CH6ss43U/PrxIcFAqm2Ojia0wQRVVFhkO8Iobc1qeqs=
Subject key identifier: 96:D9:BB:35:25:C4:A6:FC:25:6A:0B:31:7E:79:64:AA:ED:92:6D:60
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019921E77D5EEEA25A3D59A5127C25C0CC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0D53
Signing time: Sun 07 Sep 2025 02:00:43 +0000
Manifest this update: Sun 07 Sep 2025 02:00:43 +0000
Manifest next update: Mon 08 Sep 2025 02:00:43 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: Vyoke/JEymozXV5yZ/1EFzLdc0s8Hm8UWElVmlo6JjY=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:7d:5e:ee:a2:5a:3d:59:a5:12:7c:25:c0:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Sep 7 02:00:43 2025 GMT
Not After : Sep 8 02:00:43 2025 GMT
Subject: CN=96d9bb3525c4a6fc256a0b317e7964aaed926d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:6b:59:a3:15:af:08:0b:19:20:f2:34:63:
2c:06:06:cd:21:c0:42:a7:60:bd:0d:df:c1:64:3a:
ca:70:cb:47:92:aa:f3:5e:cb:82:e0:3b:d1:65:26:
f4:e5:5b:28:75:99:d4:70:cb:34:b8:5a:65:3b:59:
7e:58:27:4e:29:42:99:cf:99:b1:0a:51:a1:b8:cd:
9c:89:4e:96:35:a1:95:df:67:4f:ce:35:83:e6:dc:
38:ce:b9:cb:04:d3:bf:3d:09:8b:9b:da:ac:c8:c9:
ee:76:aa:9a:a9:19:ba:77:cc:e6:9b:1d:2e:ca:95:
07:bd:d3:a6:dd:d3:2f:b1:95:2a:29:83:73:69:20:
89:8a:76:40:d3:cf:0a:7c:d2:03:e6:d5:0c:66:23:
d1:df:48:c8:26:79:0c:e6:bb:32:c6:25:c9:b4:bb:
e1:6a:9d:ea:01:1b:79:9b:4a:ee:ca:07:b5:3d:59:
bb:50:c3:95:63:e3:49:3d:d6:19:f2:57:75:d8:de:
0b:26:72:1c:91:a1:74:3d:9b:25:50:63:df:ad:f0:
35:62:54:82:82:d8:8f:eb:cc:3d:8f:5a:25:10:1e:
5d:ce:45:f7:c5:32:15:22:11:65:74:ca:e1:b8:cc:
59:c2:9c:91:c7:45:93:b0:ec:d2:86:a8:15:e6:a8:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:BB:35:25:C4:A6:FC:25:6A:0B:31:7E:79:64:AA:ED:92:6D:60
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:a3:1d:9c:02:9d:c8:d8:41:1f:42:73:f7:4b:7c:61:80:
b1:9c:22:08:ff:8c:c1:4b:ea:4d:33:e7:0f:a0:ab:5a:cf:12:
c2:6d:25:85:05:a0:25:1b:61:04:c3:fc:59:dc:38:00:a7:45:
3f:39:bb:98:69:65:64:1b:21:9e:8f:52:8e:7c:35:24:71:8c:
df:db:6d:0f:7e:0e:9c:9e:ad:b7:31:0e:48:b7:6a:e2:dd:0f:
17:7c:04:fe:c0:94:cd:75:c8:c4:5c:58:3d:80:47:90:00:79:
ef:f4:dc:14:36:59:02:ab:c7:76:4c:3e:e1:7a:fd:a6:89:7f:
00:51:50:cc:2d:f5:1d:53:ab:63:c5:d0:43:11:90:b4:64:58:
c1:03:3a:38:f8:43:75:bc:14:03:4f:79:9d:96:8f:c6:f0:6a:
94:16:01:f6:41:d4:c7:ae:e8:0d:fa:b0:f7:1e:ae:2d:75:41:
69:d7:76:d1:ae:02:82:2b:24:d2:63:9a:b0:b0:d1:37:73:1d:
58:ec:98:9c:7a:5c:6f:0a:c6:ef:c7:8f:bc:2a:2b:d4:e7:69:
ef:27:9e:3c:bb:9c:01:e8:5a:4f:45:d9:1b:80:a0:ca:82:e8:
af:92:87:f5:c5:31:e0:2c:dc:55:6c:33:36:c8:8a:99:4b:60:
fe:17:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:21 2025 by rpki-client