Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: qQ2PrC3LAv7iwu+7zBNNTaC/20G6hw5QcBMOGduQuB0=
Subject key identifier: D1:1C:83:C8:F3:6D:39:FB:44:CF:4F:5A:E3:C0:AC:57:BC:EF:7D:5D
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 01988A32AA001B434C92A0FF60146AEB948F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 06D4
Signing time: Fri 08 Aug 2025 15:00:32 +0000
Manifest this update: Fri 08 Aug 2025 15:00:32 +0000
Manifest next update: Sat 09 Aug 2025 15:00:32 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: Ezojg6aaLlDCJEEhPQ8o0f35OVmRsXMyrnezaiKkr24=)
2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:aa:00:1b:43:4c:92:a0:ff:60:14:6a:eb:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Aug 8 15:00:32 2025 GMT
Not After : Aug 9 15:00:32 2025 GMT
Subject: CN=d11c83c8f36d39fb44cf4f5ae3c0ac57bcef7d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:f9:ef:95:a8:c8:54:43:f9:8a:62:cd:01:
50:bb:3e:4a:4a:6b:18:3b:5e:85:74:11:a3:77:36:
af:4e:2e:59:d9:9b:6a:44:ab:ac:7c:e2:4a:61:5c:
74:bf:c5:2b:13:33:73:76:8e:a9:6c:88:22:4e:f3:
ae:46:c2:67:21:b3:d3:04:7c:73:ec:3a:c4:eb:11:
b5:35:e9:e5:b1:45:c2:22:a5:7b:9c:76:b0:b5:c1:
8c:5c:53:6b:a7:fb:81:71:ea:87:55:97:ea:a9:b9:
eb:b0:90:db:5a:8f:04:e6:28:36:c8:0d:87:3b:25:
4c:dd:05:8d:db:c6:42:85:f3:8f:39:97:ca:8f:25:
13:a3:84:7b:53:2a:ee:c8:26:2f:be:be:ff:4b:27:
72:bf:11:2f:8f:00:ce:59:3e:5d:eb:80:f4:4c:75:
1b:48:db:b1:4e:db:0c:19:ec:a8:df:87:74:a5:6b:
07:69:ca:f7:cc:85:95:e1:57:54:4c:76:40:fd:48:
c2:cc:a6:bb:70:d7:8f:ed:dd:94:7e:97:8d:1c:33:
64:dd:e6:90:1f:4d:b8:c9:7f:b8:2d:05:75:26:82:
3d:9a:90:e3:a3:f3:ec:4f:05:4a:2d:d1:92:8b:52:
f3:01:0d:ea:3c:fc:47:8a:a6:09:db:1b:7d:22:84:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:83:C8:F3:6D:39:FB:44:CF:4F:5A:E3:C0:AC:57:BC:EF:7D:5D
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:86:7f:bf:e4:0f:80:67:d9:dc:41:41:a3:b2:5e:fe:a9:58:
4c:9e:bb:e0:79:4a:e3:14:d5:49:67:01:9f:ca:60:75:ae:e0:
a0:a5:0f:8e:d3:2b:7f:52:bc:a6:e8:71:3a:1c:5b:6c:a0:d8:
f6:0b:a1:ac:4a:48:73:24:26:e9:35:24:e2:61:d5:73:88:ac:
23:5f:1f:26:aa:c3:23:64:70:f1:c7:f0:fc:cf:e9:f3:88:60:
62:10:f9:6d:94:e2:cb:1c:a5:71:fe:2d:44:3f:97:35:f9:10:
f3:f5:b6:4f:14:d8:54:65:f1:f9:c4:a1:9c:cc:1a:af:f4:ad:
ec:6f:a3:1f:90:05:b1:6c:71:7b:80:db:d1:3e:05:21:19:09:
47:d0:e7:52:b6:ac:22:b1:33:a4:db:5c:12:f8:16:74:46:f5:
cb:41:7b:2a:59:d0:e4:44:3d:e1:18:c7:2c:7f:3f:9f:70:16:
99:22:51:f7:96:dc:a5:e1:dc:b8:33:29:cd:ce:ea:43:04:b3:
7e:17:ba:43:b3:32:f8:e9:db:22:18:ff:90:28:a9:51:fc:ce:
47:53:c7:a7:f3:73:6c:9b:44:99:21:2b:f0:31:15:86:da:5e:
ac:19:85:5e:2f:9e:9b:1d:5d:fb:50:e7:9b:94:f2:a3:97:d8:
aa:c4:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:04 2025 by rpki-client