Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: /QmsvGR8hSoJrASCmzWkpLxQuKRpRGQ1S0n+E4X0wlI=
Subject key identifier: F1:F8:74:4B:5D:42:14:5F:63:D3:31:5F:04:D8:A9:40:31:72:4C:7B
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019931C8AFC35F7EE2F5EBD6875F97133F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0DBE
Signing time: Wed 10 Sep 2025 04:00:59 +0000
Manifest this update: Wed 10 Sep 2025 04:00:59 +0000
Manifest next update: Thu 11 Sep 2025 04:00:59 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: dH/yMSIuHz5+WMnYaP9FNpLpzNuXI41V8KWunG8d+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:af:c3:5f:7e:e2:f5:eb:d6:87:5f:97:13:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Sep 10 04:00:59 2025 GMT
Not After : Sep 11 04:00:59 2025 GMT
Subject: CN=f1f8744b5d42145f63d3315f04d8a94031724c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:b4:61:37:29:8f:b4:31:c5:45:03:70:82:
75:03:f6:51:9e:81:9b:00:26:5b:cd:28:68:fe:f0:
23:8f:ca:db:ac:f7:b5:2c:d1:d1:bd:b7:e0:a3:8e:
27:0a:12:b3:a9:75:32:26:8d:07:b2:73:a3:70:b7:
20:25:5f:01:d5:fc:de:d8:b4:05:f7:a1:4d:d6:2e:
f7:a6:eb:fa:c5:a8:34:80:ce:ad:a5:3d:41:e6:03:
a3:cf:47:dc:41:9a:11:0a:2c:3c:17:aa:86:b8:c9:
3d:2f:e8:25:31:93:cd:9c:43:aa:36:18:42:1e:75:
b6:db:b0:0d:57:50:fa:39:de:4f:df:55:f9:8f:02:
4d:5b:cb:89:6a:c7:f6:11:70:36:a4:48:07:7e:0e:
38:05:6c:6e:17:c8:4b:13:f1:8a:25:dd:b2:6e:e6:
69:3e:e9:05:81:cc:10:8e:ad:13:e3:01:0e:8c:62:
00:41:7b:e4:1d:27:fb:2b:52:85:e1:aa:1b:f5:1b:
1a:46:50:c8:58:cc:13:c9:ba:a9:34:d3:83:15:f9:
42:80:6b:ea:29:df:b0:55:49:56:90:72:f3:4a:02:
40:8d:7e:f4:0e:db:0e:7f:38:93:b4:17:23:76:0b:
49:69:45:45:fd:43:d3:4b:b8:cf:4f:60:ce:bf:6d:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:74:4B:5D:42:14:5F:63:D3:31:5F:04:D8:A9:40:31:72:4C:7B
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f3:6c:3b:24:80:df:81:d1:35:c0:ec:04:30:40:cb:ff:af:
d4:6c:91:61:e7:21:d1:1d:cf:ea:52:56:ec:87:ab:8a:71:cd:
6d:5e:52:5c:cf:58:b0:98:b2:05:61:7a:6a:f2:a6:c4:e1:6e:
d9:22:af:47:cf:dc:12:c6:eb:11:57:b9:47:6b:cc:80:0d:bc:
f8:64:8c:e3:fa:a8:e8:44:92:1f:39:be:f6:d9:2d:a5:3e:ed:
97:6a:e9:4b:cc:8f:1b:07:6a:bb:3c:ee:3d:91:43:cf:5a:18:
3b:9d:cd:cc:32:52:4b:a7:a8:b2:91:99:64:28:86:9f:b3:c3:
1b:d5:53:cd:80:7d:d6:a7:ca:ca:3b:6e:c4:b4:5d:87:a1:0c:
2f:82:7a:59:f3:f4:1d:8d:0b:d3:7d:f4:96:94:05:dc:5a:14:
c0:4b:10:32:c2:eb:52:40:e7:b4:03:cf:ec:d1:94:a5:1d:94:
c7:2a:5c:a0:19:9b:55:6c:7e:a7:74:2e:fc:bb:a5:69:cd:03:
5e:57:21:9b:8c:ab:aa:08:af:f1:15:6c:89:d9:46:8d:d4:45:
4b:d3:7d:42:a2:de:c4:f8:32:53:f8:b3:09:36:83:cc:c6:ef:
57:ae:cd:3d:6a:85:9a:43:79:4b:e7:d3:b2:d3:7e:5d:8f:91:
1f:53:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:54:14 2025 by rpki-client