Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: huf/1I4Xlcn/ls80Hx4uxn2NcJEfvH6B3s43PbJRf6M=
Subject key identifier: B5:DB:B9:AE:2D:99:DE:68:21:A8:AE:09:73:80:29:43:14:01:3D:DB
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019872CF4D57D504284CD46D0FCBBC0F3C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 095C
Signing time: Mon 04 Aug 2025 02:00:44 +0000
Manifest this update: Mon 04 Aug 2025 02:00:44 +0000
Manifest next update: Tue 05 Aug 2025 02:00:44 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: Tod/AHJ5wWbw4/xfr5wZE29O9YpMXvfaRqhujOT6cUk=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4d:57:d5:04:28:4c:d4:6d:0f:cb:bc:0f:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Aug 4 02:00:44 2025 GMT
Not After : Aug 5 02:00:44 2025 GMT
Subject: CN=b5dbb9ae2d99de6821a8ae097380294314013ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:5f:94:97:71:fc:4a:74:43:3a:2f:e7:fd:
26:c3:6c:46:46:2e:0e:e6:64:41:59:0c:b3:1d:0b:
dc:09:ba:92:ee:99:cb:18:41:9f:d5:03:9d:7c:57:
87:e2:0e:6d:30:1d:7b:fb:1f:ba:23:7c:71:58:c0:
67:44:f7:e8:5c:2b:6e:93:a2:bb:16:b9:8b:88:bb:
4d:35:7b:25:a9:25:11:89:54:36:5f:17:b8:23:ee:
65:12:83:24:55:8d:2c:4f:29:35:e6:79:29:2e:d1:
09:e8:5d:26:63:05:46:91:08:3c:45:f6:70:3f:1d:
6b:22:2e:4c:3e:2b:4f:7e:76:bb:81:a9:07:b4:ce:
5c:0a:af:b3:85:95:f3:00:d9:41:76:02:02:61:84:
39:fa:9f:fd:e0:aa:35:e9:47:fe:9b:83:a2:da:ab:
32:90:91:b2:98:d1:8c:51:47:43:94:e5:da:bf:f7:
cb:40:5b:4d:74:e3:40:7f:07:23:42:34:58:e8:64:
dc:ee:dc:a1:30:c8:1c:00:17:e9:ef:31:6a:c2:e7:
5a:ea:c9:f3:ec:36:5d:59:08:43:90:fe:42:57:1f:
dc:f7:2f:36:03:69:7c:23:c8:d1:54:ac:47:70:9c:
22:dc:81:64:ca:14:b2:b7:1b:1f:42:03:ff:8b:30:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:B9:AE:2D:99:DE:68:21:A8:AE:09:73:80:29:43:14:01:3D:DB
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c5:7f:77:90:de:aa:8e:5c:30:e4:94:50:a9:84:ff:31:19:
e0:ef:3f:7d:ce:8b:d4:5d:8d:01:3d:23:94:0d:97:0b:d9:30:
cf:9b:84:8a:ec:6b:5d:8f:8d:69:70:cc:68:37:15:3f:47:db:
c1:2e:c1:ec:0c:b5:1c:e8:ff:6b:d4:28:3c:35:39:5e:5c:38:
49:6e:40:f3:76:85:a7:43:21:93:b6:47:e9:a6:40:07:a4:75:
ae:25:b3:40:54:92:06:e5:c1:c2:a5:d9:c5:79:89:9f:47:d0:
16:76:80:5c:fc:1a:41:3d:5a:cd:d6:a7:ba:1a:bc:75:1e:66:
cb:ef:ed:e0:20:09:8a:93:3b:5a:ab:d4:45:f7:e5:9f:53:2d:
78:ca:0b:56:38:53:73:85:0b:d4:46:45:de:d5:b7:13:17:16:
db:84:a1:17:6f:50:f8:a9:cc:e9:ad:98:8e:7b:61:fb:97:bd:
97:74:45:7a:7d:73:29:72:16:e5:6c:b4:7c:96:fd:81:80:ec:
d0:03:12:fa:11:88:dc:72:9a:02:ba:4c:16:13:2a:a9:a0:d9:
79:9b:62:53:1d:16:41:4e:d5:87:c8:5f:6f:a3:c8:be:7e:dc:
6c:f4:44:6c:4d:1e:bc:28:8b:e8:55:78:30:a8:cc:92:95:bc:
2f:60:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:26 2025 by rpki-client