Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: +5tv36SMCPGJ1T82BRfHXcMWnv5Om/i2rhA2pLrr3j4=
Subject key identifier: 9B:5A:7B:B6:4E:8A:2E:E3:C2:65:04:1B:DB:67:CE:02:19:6C:7F:2E
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 0198838C1A88455B97C3CA2F36FDAA50AF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 08:00:53 +0000
Manifest this update: Thu 07 Aug 2025 08:00:53 +0000
Manifest next update: Fri 08 Aug 2025 08:00:53 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: dH+/Dz9mHEMNYPfW0xfDDSgT109mj4rfDhKcP9fAu3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:1a:88:45:5b:97:c3:ca:2f:36:fd:aa:50:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Aug 7 08:00:53 2025 GMT
Not After : Aug 8 08:00:53 2025 GMT
Subject: CN=9b5a7bb64e8a2ee3c265041bdb67ce02196c7f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:04:87:49:dc:e5:6a:29:94:74:41:47:25:
18:e2:42:63:d8:7d:62:5e:5a:f6:45:95:3f:e9:a8:
20:b2:44:7e:36:29:74:19:f8:22:cb:f2:32:e3:ee:
01:6c:9d:a3:a1:30:00:fc:25:af:83:a4:13:58:79:
bc:15:49:e3:8f:7d:aa:7e:9e:af:86:a4:53:77:78:
06:d3:11:a8:d5:0f:6d:14:e2:56:4f:c2:b8:de:aa:
33:fe:43:38:88:d5:9d:62:9f:a2:f7:e3:72:72:26:
17:a3:be:c2:5a:7c:db:b6:13:72:d2:e8:b8:45:21:
d7:1e:86:e6:3f:0d:97:10:4f:9a:0e:58:73:77:b0:
dc:a0:5f:15:b3:a0:bf:7f:70:9d:31:66:90:c4:3b:
0c:67:ba:f1:04:75:36:57:d0:0a:b5:c8:df:83:42:
11:91:c5:93:83:24:a4:f5:1d:33:d3:14:12:a8:fc:
64:3f:35:a2:32:ca:d4:dd:b5:f4:8e:db:5a:6f:e5:
c2:85:84:9c:c0:f6:18:dc:6c:50:bb:9c:27:52:38:
f4:9a:99:1d:ba:47:13:53:a6:97:a4:b8:f1:e5:c8:
e6:c6:4d:76:4f:36:13:97:85:ed:af:0b:6b:bd:8c:
57:6e:cf:d8:c2:b8:80:ed:11:a3:88:40:7c:3f:c7:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:7B:B6:4E:8A:2E:E3:C2:65:04:1B:DB:67:CE:02:19:6C:7F:2E
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:51:1b:96:d5:0d:7e:81:fd:90:b5:93:a2:7f:ba:28:6a:39:
a6:05:a3:0b:3a:28:4a:4a:67:b2:7b:31:b5:70:0d:cf:6d:12:
5e:f0:43:6e:d3:17:bc:f2:9c:c1:18:c0:2f:b1:89:73:36:d7:
e2:c8:e9:0c:6d:6d:9e:16:14:11:74:15:82:b3:53:6b:11:d8:
47:6f:66:28:93:10:19:e9:7c:65:7f:73:5d:84:bc:23:09:b4:
ef:6d:3b:9f:51:1a:1b:07:98:1f:f2:2f:9e:69:09:04:67:f5:
6c:03:b2:6d:20:5e:87:b9:ce:ad:c9:43:aa:d9:37:77:f2:7c:
f3:08:7a:98:f4:19:cd:73:e3:c2:ae:8a:7c:4a:e7:79:fc:34:
66:48:63:2d:cc:b6:7c:4e:a0:1d:d7:d5:0f:8a:69:dc:aa:46:
cc:66:5c:f6:45:d6:46:a9:9d:18:93:f1:bd:54:7b:a2:2d:41:
fd:dd:df:e1:c5:5b:16:e6:99:eb:47:63:a7:78:5d:36:5d:ed:
85:df:60:89:57:4c:05:32:39:1b:93:bf:28:38:64:3f:a0:8b:
ac:de:a9:6a:b5:82:08:79:35:db:80:5a:dc:5a:11:5a:4f:ac:
35:11:51:c9:8a:dd:08:fe:c5:cc:9d:85:6a:7b:96:75:6c:9f:
39:68:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:25 2025 by rpki-client