Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: 7K6prkAfHvWm3wl8RhRu/H9vmUJJke+2gfvl1FFEWNY=
Subject key identifier: 46:3C:40:4A:7A:BC:9E:FB:FE:98:E0:57:F6:F3:35:EE:89:0F:8D:60
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 01987C4043907A785643999F2C8006F450FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 12E2
Signing time: Tue 05 Aug 2025 22:00:43 +0000
Manifest this update: Tue 05 Aug 2025 22:00:43 +0000
Manifest next update: Wed 06 Aug 2025 22:00:43 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: jaCoBE/nf9KLaT193qoUJB7ZGdfm/mv+r160HA43uKE=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:43:90:7a:78:56:43:99:9f:2c:80:06:f4:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Aug 5 22:00:43 2025 GMT
Not After : Aug 6 22:00:43 2025 GMT
Subject: CN=463c404a7abc9efbfe98e057f6f335ee890f8d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:1a:3a:39:37:f0:f0:1c:71:fe:91:17:fd:
4d:47:fd:e7:9b:54:c6:27:6c:24:e4:ff:38:10:ea:
fa:4d:23:3c:e0:04:6e:92:36:cc:86:96:55:34:8e:
33:6b:b1:11:e7:7a:ef:22:11:d4:73:96:82:6d:cd:
2a:86:17:22:60:13:73:69:b6:33:6b:f6:40:6f:9e:
bf:a7:9e:d4:a3:80:d9:ad:dd:89:36:a1:f1:55:52:
3c:28:aa:f3:7e:09:32:6e:01:89:57:4d:2c:6b:ae:
65:bd:38:f0:42:c2:0f:9a:2c:d9:10:87:48:f8:c3:
86:19:e6:54:18:d3:90:31:2d:ed:80:35:df:a1:6a:
57:99:f7:f2:70:e5:34:88:ec:14:06:70:55:f5:d1:
3e:21:3f:4a:97:b0:1c:6d:77:d2:81:89:36:ab:23:
6a:78:0e:64:f2:ee:aa:84:16:e3:6b:c0:4d:dd:c5:
11:07:3f:05:96:72:0e:ba:3f:d5:ae:e6:c5:68:e5:
39:3c:3b:79:bf:12:62:58:78:d0:4b:a6:32:81:0c:
da:13:f6:0c:8f:72:64:b1:96:0b:c0:5c:84:12:b9:
72:06:9c:56:50:cd:be:43:89:7f:17:c1:5e:2a:f6:
db:a3:df:ce:4d:5f:76:b7:0c:33:9a:15:46:80:30:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:40:4A:7A:BC:9E:FB:FE:98:E0:57:F6:F3:35:EE:89:0F:8D:60
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3d:67:9e:3c:79:9f:6a:28:62:a6:6b:a1:ac:2c:e7:71:1b:
96:b5:83:6a:e4:24:d4:78:33:af:2d:ae:3c:69:18:80:1d:a4:
c2:d6:2a:f4:40:82:0b:1d:f2:29:b0:27:40:fb:13:ff:c7:b4:
16:54:33:04:b8:b2:ae:0d:7a:8a:31:4a:29:87:9c:e6:81:ac:
b9:a6:a8:75:7f:28:d3:b3:6f:8e:07:12:2f:94:72:cd:30:2e:
f1:3c:32:d7:89:a0:8c:ca:27:ea:66:09:f6:76:0d:7f:1c:11:
f2:b3:ff:02:cd:8a:72:15:0c:7e:8c:b3:79:01:af:8c:e4:6e:
f3:85:7e:6d:1c:48:b1:68:5d:7a:b6:e2:21:4b:c1:82:0c:85:
70:e0:3a:54:1a:e3:ec:72:ee:1a:1a:20:2c:e6:48:dc:76:dc:
93:ee:60:10:de:1d:58:54:be:3b:59:e1:08:35:da:d6:b6:24:
0a:ea:fa:07:2f:69:46:a3:2b:7f:fc:74:06:b2:c1:9a:98:7c:
b4:bc:b8:e7:f2:95:2a:b8:d7:04:8a:23:b7:52:08:46:ec:ad:
15:ef:8f:76:18:5f:92:71:e5:7e:89:16:eb:25:cc:8d:9d:1c:
00:26:19:db:40:fd:e8:69:43:72:d2:18:8a:44:46:55:33:64:
1d:2c:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:46 2025 by rpki-client