Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: ZsQ+v1DqDNqcxgN9x0rl34rXGodEV8++JVh3+wpRtR4=
Subject key identifier: E5:73:70:30:4E:F8:46:84:1E:08:BD:B7:2F:EB:89:9D:92:47:C9:B1
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 01988355BAA99F9E984A3DCB754F4A8F2561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 07:01:30 +0000
Manifest this update: Thu 07 Aug 2025 07:01:30 +0000
Manifest next update: Fri 08 Aug 2025 07:01:30 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 5wVqxM6qh2WfakT9Rq9aMLOAKkohu2kXLcFo2mSK/o8=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:ba:a9:9f:9e:98:4a:3d:cb:75:4f:4a:8f:25:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Aug 7 07:01:30 2025 GMT
Not After : Aug 8 07:01:30 2025 GMT
Subject: CN=e57370304ef846841e08bdb72feb899d9247c9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:88:73:a4:eb:b6:e9:f1:ae:5f:1d:f4:38:
af:1e:bc:3a:68:ac:c3:4d:ec:27:5e:0a:bd:67:f2:
9e:64:f6:04:ca:7d:2d:fb:aa:a4:e5:e2:0d:76:c4:
ad:92:a0:b4:f0:67:67:cf:65:4e:1a:8c:97:a5:a8:
b4:70:6b:a6:41:8e:eb:3c:a9:5d:33:bb:47:7e:1e:
2b:c2:66:76:60:53:f3:6f:53:a7:13:cb:da:4a:08:
ab:ba:0d:a0:60:05:66:14:cd:66:2d:d7:65:8d:59:
db:aa:c4:78:46:5f:30:a9:6e:89:a1:c4:c7:11:6c:
68:11:86:d1:b1:75:a6:45:c1:b3:76:3e:69:18:11:
60:6e:89:6e:b0:d6:d7:fb:b2:3b:37:75:83:a2:07:
60:68:6e:27:d9:51:18:bc:e7:ab:b7:6f:fc:02:33:
a6:3e:1e:b9:a6:4b:c5:a9:70:dc:2d:10:9a:c9:66:
1d:30:12:47:46:67:36:66:d2:53:fe:c9:90:f1:a2:
f6:fb:c8:28:b6:e6:4a:e3:32:50:ba:c0:be:60:76:
d1:44:60:29:4d:ed:d2:a4:2f:3e:da:45:6d:d7:de:
a6:8c:04:6d:3a:a8:31:d8:c9:45:d8:bc:63:8f:2a:
c6:30:fa:cb:30:60:a1:4d:df:7f:72:ef:9a:ca:38:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:73:70:30:4E:F8:46:84:1E:08:BD:B7:2F:EB:89:9D:92:47:C9:B1
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:43:22:2c:fa:03:54:41:eb:51:43:d8:e7:3e:6f:c0:5a:1d:
d7:a3:34:5d:93:4e:a8:6a:08:4a:13:1b:69:d3:4f:e3:c6:b3:
f6:10:26:d7:91:5f:c9:4c:4b:81:08:39:e3:5f:03:db:e7:43:
06:1d:4e:ba:51:9d:b2:c1:fd:12:1c:86:51:4a:2b:30:e7:0e:
44:f0:a3:40:0e:1b:f5:8d:f7:10:c4:8d:51:c4:53:e1:8a:80:
71:2a:82:7d:ee:ef:fb:6f:57:b8:49:fb:10:78:aa:c1:41:11:
12:b4:a0:6d:e4:65:83:a7:53:03:15:e4:1f:b8:a6:c6:01:ee:
f3:12:0a:53:11:a0:1a:f6:64:0a:6a:7b:69:01:20:0f:cf:0a:
8c:40:06:82:61:e0:f3:00:52:89:9d:57:73:3d:0f:15:07:e3:
2d:e5:2e:41:41:2b:77:a1:81:76:b6:ba:70:4f:1d:4a:aa:1a:
9b:2e:1e:72:a3:61:b1:7d:83:6a:b2:8d:a0:f5:7b:ab:39:85:
7a:97:1c:a9:9c:cf:77:2b:18:05:6c:4d:3f:ec:a1:af:f6:97:
db:47:db:88:0e:9f:8e:5c:0a:b6:33:21:fa:73:55:71:ee:8b:
81:ab:9e:a4:86:f4:e8:68:b6:0a:14:ec:7d:14:ef:06:04:e3:
92:29:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:51 2025 by rpki-client