Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: xgvVUJW6/8QO7KBvQS7wM0SWYrOUIA7lHiXVtDh5zKM=
Subject key identifier: 67:31:E5:EF:D4:A1:1C:8F:B7:67:09:30:D4:80:1A:64:19:8D:CB:EB
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 01987B9BD966B78108FA7104FA810BE4D981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 13EF
Signing time: Tue 05 Aug 2025 19:01:07 +0000
Manifest this update: Tue 05 Aug 2025 19:01:07 +0000
Manifest next update: Wed 06 Aug 2025 19:01:07 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: 7PkjdcdxDyOgJI7gEPnetGJZkHJCQ2YJjDsu0lgh0ro=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:d9:66:b7:81:08:fa:71:04:fa:81:0b:e4:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Aug 5 19:01:07 2025 GMT
Not After : Aug 6 19:01:07 2025 GMT
Subject: CN=6731e5efd4a11c8fb7670930d4801a64198dcbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:c2:70:8d:5a:a3:80:2f:1c:a7:62:17:56:
80:a5:e9:78:a5:8a:8b:74:e2:4e:98:0e:da:65:03:
e5:28:d0:8c:dc:dd:f7:45:ad:db:68:54:2a:8b:9b:
bb:96:c3:4b:59:9a:c4:e3:da:c7:49:08:86:8b:10:
36:c8:97:f6:ae:61:dd:ba:02:ce:4c:ab:c7:b5:82:
1b:73:cb:60:2c:05:d4:b4:ba:3e:14:7a:dd:10:41:
c7:d0:ea:52:4f:38:90:90:90:c9:3d:ab:54:8d:9a:
a4:e3:fa:f8:f3:d8:2a:cf:6a:4a:0d:c6:ab:a2:48:
f7:7c:19:6f:66:f9:ee:68:2c:37:75:af:8c:66:80:
b4:82:89:42:98:c4:c3:77:e1:33:59:43:2e:55:5e:
cd:cc:6f:3a:b0:96:d3:0e:98:f1:53:f3:c4:7d:aa:
23:23:64:5f:d2:ed:ba:43:79:38:c0:fc:17:f4:6a:
c5:44:b0:8b:ed:f4:af:3d:9c:c8:a9:5b:58:51:3f:
29:4b:2f:8e:3d:6d:5d:a2:c9:dc:f5:c8:e5:9f:67:
0a:5b:0e:34:26:45:ff:f6:ba:ff:b5:58:1c:e9:4c:
fe:85:9f:49:e8:04:e6:f0:8a:60:bc:af:a8:e5:d5:
47:a8:04:a8:4a:0a:a7:23:8c:a5:54:d1:ab:c8:95:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:E5:EF:D4:A1:1C:8F:B7:67:09:30:D4:80:1A:64:19:8D:CB:EB
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:ec:92:cb:e2:2a:7e:3c:ce:4f:00:4f:b3:8b:29:28:4d:
99:95:93:fe:59:15:be:0f:07:01:37:98:31:14:e4:af:c4:51:
1a:a1:96:ef:8e:43:35:59:0a:a8:a6:53:99:c2:cd:f2:81:0f:
2d:b6:bf:ec:4a:e7:ac:fd:0b:fd:1a:a6:3e:e1:7b:cb:08:1d:
86:47:88:f9:04:83:b1:f1:f8:74:52:b3:a7:98:d8:18:33:4f:
a2:33:d3:c5:42:4f:20:bb:c7:bd:e0:3b:f6:07:b1:47:bc:d0:
ef:86:7b:34:85:4a:06:51:05:94:9d:04:3e:2f:59:49:0e:14:
1c:e4:39:db:f8:59:f6:64:26:97:ca:ca:93:a8:f3:03:53:30:
4e:7d:f4:3e:71:4d:61:f4:bd:0d:ac:5d:e4:07:d9:2d:58:af:
b7:88:63:81:9c:5a:02:de:c2:30:bd:93:0b:79:ae:9d:34:e5:
37:a2:a2:d7:b4:23:95:37:19:0a:67:df:67:51:97:8f:6d:20:
51:74:80:d7:43:55:53:07:59:ca:71:54:f8:39:ae:20:3d:2e:
c3:f8:ed:bd:ef:db:07:44:6f:e7:0e:08:60:e2:a8:c1:be:b3:
b2:04:31:41:af:9e:b0:7e:55:b7:3f:15:9d:a2:8b:cd:ad:98:
df:d9:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:17 2025 by rpki-client