Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: lQvnB8hWKHETLA6cqhqrnL9VwD980Gep1aZYlEgi1wM=
Subject key identifier: 6C:21:7C:22:B2:16:57:35:BF:2B:F8:20:EE:D0:89:5A:1F:88:5E:1F
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01987D1BFB2F6C4D23482F094C78A97B8AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 035A
Signing time: Wed 06 Aug 2025 02:00:42 +0000
Manifest this update: Wed 06 Aug 2025 02:00:42 +0000
Manifest next update: Thu 07 Aug 2025 02:00:42 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: AvjLSWjDCJS3irVlABarmKSl5fhR0Fz+nY5tcuMjZO4=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1b:fb:2f:6c:4d:23:48:2f:09:4c:78:a9:7b:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Aug 6 02:00:42 2025 GMT
Not After : Aug 7 02:00:42 2025 GMT
Subject: CN=6c217c22b2165735bf2bf820eed0895a1f885e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:93:99:c8:2b:ad:1a:24:8e:e7:b6:38:4a:
62:f8:f4:75:f3:91:48:db:3d:5e:6e:87:6a:bc:78:
1a:22:81:4e:bb:49:26:e7:b0:cd:e0:1b:d1:d7:bf:
c9:c1:b7:7b:f9:a5:1c:45:0a:4d:e8:22:8c:f2:b2:
06:ab:61:ca:ee:05:1e:55:24:e1:b5:85:a7:15:32:
87:71:0c:9e:16:0d:5c:a3:9b:62:f7:2c:05:34:a0:
e6:d0:19:d7:6c:4e:f5:f0:b9:cf:39:44:9e:38:b1:
15:f5:35:29:36:03:38:67:e4:d7:e3:9a:86:63:8b:
e0:77:99:7d:9f:9f:eb:fb:ba:3f:d0:bb:fb:24:7e:
1b:92:bf:ea:5f:8d:16:94:4c:fb:be:c5:ad:3b:a6:
c4:60:a5:1a:0f:f6:89:e9:da:fe:f3:e7:f1:1e:10:
18:08:25:b3:fe:79:34:05:59:67:3a:7d:df:20:e4:
a5:cd:b0:3c:67:6a:9d:20:d6:e3:f2:fc:57:83:11:
2b:1f:e9:76:fc:e2:22:9a:58:fd:b5:7f:da:fb:11:
7b:eb:fb:24:99:2d:c1:34:c5:88:29:c3:1a:60:ef:
61:17:e6:d1:d7:60:ed:8b:dc:14:1c:25:dc:0b:7a:
2e:e0:1d:fe:4f:bf:6b:c4:02:4d:48:7e:af:1c:bb:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:7C:22:B2:16:57:35:BF:2B:F8:20:EE:D0:89:5A:1F:88:5E:1F
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fc:23:f2:f9:b0:bf:6f:e2:5a:36:b7:f4:9f:9c:94:65:b7:
8c:d7:ab:f2:9d:95:e6:05:e5:65:88:86:cc:37:92:80:7f:70:
1f:51:22:63:a0:2a:1e:30:01:c9:68:c5:e0:97:67:0c:0e:c0:
73:96:ee:f3:4a:cf:cd:2e:59:3c:28:df:1c:4b:35:73:db:6c:
95:3d:cf:ce:a0:80:9d:7c:02:1f:5f:47:0d:37:82:7d:d0:a0:
cd:26:d5:4e:20:ad:c9:90:a6:c1:d0:4b:6c:52:1a:e8:ea:9c:
f5:cf:1f:91:40:25:c5:e5:91:b3:55:59:9c:3e:db:39:b5:19:
86:5d:fc:06:c5:a9:a5:b1:be:bb:99:4b:29:f0:66:fa:37:b3:
e7:40:db:2e:9c:b9:f8:d7:a3:c2:ff:2d:ff:19:a3:55:24:19:
20:28:92:f4:fd:bd:58:9e:13:fa:f8:03:97:ff:5f:13:ac:b4:
51:5a:48:55:5b:f3:09:66:82:ae:03:35:da:7a:cf:ca:a9:4b:
bf:db:d3:3c:b2:8e:32:eb:e9:c5:85:79:b5:a5:7f:30:4e:35:
94:10:72:dc:13:4f:47:89:a9:03:fa:57:64:28:68:f9:98:b2:
a8:b1:30:ce:99:18:47:70:a4:59:45:10:9b:c4:1a:40:5e:4d:
f9:8d:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:51 2025 by rpki-client