Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: 4Rub1WvXuTWdhNgc3mn+xX+28mLc5Avwp72t2X1A/BA=
Subject key identifier: 3E:72:49:9A:15:B7:44:15:24:0E:42:4B:26:36:39:E6:9A:B5:03:A7
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019A15E07A5F104FD14C8CA39057F468D2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 04FB
Signing time: Fri 24 Oct 2025 11:00:24 +0000
Manifest this update: Fri 24 Oct 2025 11:00:24 +0000
Manifest next update: Sat 25 Oct 2025 11:00:24 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: QcwGywlcEGWfM3ALD9cLhpqkt60UM50vZrJDinEyfSQ=)
2: kZsXR7fR0Ou_RuvSVexqd7WF5Zw.roa (hash: VeB6BvnRbCRLPDDkoYsxbMM4NdMeIicaUa0njjeL7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:7a:5f:10:4f:d1:4c:8c:a3:90:57:f4:68:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Oct 24 11:00:24 2025 GMT
Not After : Oct 25 11:00:24 2025 GMT
Subject: CN=3e72499a15b74415240e424b263639e69ab503a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:9f:90:66:d3:6b:ce:21:db:d9:44:be:44:
e8:ab:4d:52:95:2a:3a:82:8d:60:95:4f:a8:52:b5:
20:45:4b:85:2a:8c:7f:e8:f9:0f:d1:5e:be:9f:7b:
68:14:44:5d:2d:ca:6d:12:4d:91:9e:e1:1b:ed:4b:
ed:df:16:9a:17:e3:7e:63:77:e6:db:af:ce:4d:5b:
59:c0:aa:22:8c:5a:c9:3e:2a:fd:92:89:52:d4:bb:
07:7c:d0:c7:1b:de:d8:35:ac:8f:7a:a7:73:d1:51:
52:bc:ff:00:67:49:bb:a3:e6:ad:58:b1:99:6e:28:
f0:5e:50:00:f7:c8:18:f4:71:7c:4d:b7:02:d2:f9:
04:3a:a9:b2:76:37:84:09:ef:98:f4:45:ba:14:67:
08:58:29:3c:0c:ee:3d:fd:2e:9d:97:aa:a0:88:5d:
20:ee:83:b6:a6:0d:f3:cf:e3:98:d0:e1:bc:37:c6:
7e:2d:a3:a2:e8:61:f3:83:40:a3:24:69:5e:4f:67:
6b:a8:b7:8f:3a:8a:ed:75:8b:67:ee:4c:f1:d0:ab:
88:3d:7a:24:33:e6:95:8a:89:35:cc:0b:d9:84:64:
17:f4:73:14:73:69:fb:01:85:df:e2:8a:6c:0d:8a:
11:8d:2d:39:b8:00:a6:42:e5:03:bc:e3:4f:b0:79:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:49:9A:15:B7:44:15:24:0E:42:4B:26:36:39:E6:9A:B5:03:A7
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:f4:3f:18:43:bc:80:4e:9d:e8:9d:de:b9:b4:b8:da:be:
2f:68:3c:fd:c8:27:b9:45:32:30:df:0d:f0:0d:b2:e3:73:4a:
20:e7:ec:5a:2c:31:3a:f3:4e:f8:a5:03:06:6c:43:65:0d:2e:
c8:2e:1a:53:72:c1:ee:1b:8e:02:4e:e1:46:38:be:fa:d7:a7:
a1:b2:ff:67:25:24:5f:e3:59:b2:48:24:c8:ac:26:3c:ce:b2:
3c:52:0e:d5:bd:d1:75:29:9a:96:67:68:e9:45:41:14:3d:f0:
91:cd:35:0b:fa:b7:84:96:be:4d:88:3e:fe:b6:86:1d:1b:f1:
fe:31:87:6f:81:fd:41:3f:42:f7:40:62:b5:0f:f6:b3:c5:5d:
e8:e6:94:c0:3b:e4:a4:74:ef:11:60:ad:b2:13:e3:1a:98:cc:
1d:16:e2:d2:a5:9b:e8:55:30:ae:cd:10:7b:b7:42:aa:75:80:
ae:29:71:4e:9d:39:cc:c5:f9:89:59:9f:cf:38:3d:c0:13:39:
6f:60:5a:6b:b3:b6:34:b2:46:14:d9:cc:77:00:6c:a2:c2:8b:
08:b3:5f:c8:69:e5:79:96:56:b2:86:be:6c:91:f7:d3:2a:a1:
96:19:01:31:5c:12:35:71:db:41:44:ea:aa:85:cc:99:72:12:
d2:2e:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:26:35 2025 by rpki-client