Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: gf5vA1AR5tXdUqivkP6u/iKHF9BM8/JG00wdlEswgxs=
Subject key identifier: 7E:1D:8E:89:BF:BB:4F:C4:9D:05:AA:82:2B:20:93:AC:83:13:75:75
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 0198752C2457EC15AAE3685135CF0F035802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0ABF
Signing time: Mon 04 Aug 2025 13:01:23 +0000
Manifest this update: Mon 04 Aug 2025 13:01:23 +0000
Manifest next update: Tue 05 Aug 2025 13:01:23 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: RqrQ8dDAH5o8GSUHiVJ+vSE1ltBZAgyjbYRT5OAlFYw=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:24:57:ec:15:aa:e3:68:51:35:cf:0f:03:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Aug 4 13:01:23 2025 GMT
Not After : Aug 5 13:01:23 2025 GMT
Subject: CN=7e1d8e89bfbb4fc49d05aa822b2093ac83137575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:25:c9:6c:85:98:26:1f:46:66:52:79:6d:
af:fb:a5:d7:63:c6:ae:72:96:a8:5e:a1:44:76:d5:
88:5d:1c:e2:be:bd:16:52:69:7e:ad:c8:a4:8f:4a:
e6:a8:86:96:c8:86:33:15:c6:d6:3b:76:99:79:95:
9d:90:1a:cb:b7:fc:e6:a3:25:ac:5e:fd:b5:b6:26:
09:9e:4c:b5:44:0d:9f:00:f2:ff:2e:50:77:d2:f1:
fe:b9:21:1b:60:d9:d8:b4:d2:04:2a:3f:5e:04:fe:
48:70:db:95:ff:e7:85:fb:60:2a:b1:d6:4c:5d:72:
b0:43:62:4c:56:f2:21:1d:f5:1f:a7:74:e8:85:48:
6b:49:2c:ba:8a:2d:8a:45:4a:e8:02:cc:79:80:c9:
2f:3f:f8:19:47:c7:ef:55:f4:3b:a8:57:91:ab:72:
5e:6a:93:82:cf:38:ef:76:2b:27:c1:0b:a4:d8:36:
38:75:94:60:5e:1c:fa:22:01:c8:74:88:2b:bf:b8:
86:fd:19:b8:b0:02:25:a4:a9:9a:ff:ac:da:0b:f3:
3e:93:3f:6e:f5:80:92:16:ff:9d:7c:c4:27:a6:4b:
2a:35:b7:6a:81:b9:44:57:4e:71:ea:b7:96:aa:bb:
2c:eb:e9:f8:68:8f:e9:60:11:f5:61:35:9f:5a:14:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:8E:89:BF:BB:4F:C4:9D:05:AA:82:2B:20:93:AC:83:13:75:75
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6e:9f:c3:6d:af:fd:d1:99:83:92:d6:e4:8d:0c:49:57:27:
76:27:ca:b2:b6:49:0b:d1:a2:11:6c:f8:03:6d:b3:ef:f8:8e:
71:2e:76:b3:03:90:4d:73:6b:d8:68:44:c4:8f:48:dc:aa:d0:
7c:7b:5e:31:b4:a8:b1:68:08:a3:15:df:5d:62:56:ad:a5:74:
73:12:ed:73:86:23:bb:e0:fd:35:9f:57:c4:7d:8e:96:06:09:
07:97:ce:3f:64:97:34:b9:c4:32:a2:44:51:df:8e:e0:06:8d:
1b:c8:aa:dc:63:6d:f6:02:82:e1:f6:5e:8a:64:59:cd:2a:a2:
d1:a1:d1:be:9b:d6:ad:68:ec:47:1c:b3:9a:52:28:3f:95:cb:
24:3a:42:53:a4:0d:a6:3d:ec:3c:17:14:6f:b4:1c:e9:dc:67:
dd:7a:a5:78:80:4f:1a:d8:0c:24:20:26:c7:3d:c6:ea:a0:03:
e1:ec:3c:75:70:be:8d:0f:f9:e5:92:a9:8b:d0:7d:43:7e:3d:
a5:d7:ce:38:52:b6:8e:9c:e6:dd:84:a9:a6:f1:43:88:b5:7c:
9e:6a:9b:eb:62:c3:a6:cf:de:b6:b1:8b:fb:a9:5f:17:bb:7d:
8a:3d:62:6c:45:86:94:80:bb:8b:24:0a:da:01:5d:16:7b:b3:
5b:a0:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:27 2025 by rpki-client