Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: inqWgsxeLUeS/vUhM3V3HPqG8oS3yr770PKitYvs3Yk=
Subject key identifier: 4A:44:32:15:E5:5C:21:B2:A2:E0:6B:11:C5:EA:8B:91:BC:C1:B1:17
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 0198790856CA2B72DBF403FFF57B45C0B088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 07:00:46 +0000
Manifest this update: Tue 05 Aug 2025 07:00:46 +0000
Manifest next update: Wed 06 Aug 2025 07:00:46 +0000
Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: fmMxS1nd8bU8PH5XBfxmptMmm3MdifcVhfOe2VWDYrw=)
2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=)
3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:56:ca:2b:72:db:f4:03:ff:f5:7b:45:c0:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Aug 5 07:00:46 2025 GMT
Not After : Aug 6 07:00:46 2025 GMT
Subject: CN=4a443215e55c21b2a2e06b11c5ea8b91bcc1b117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:18:ee:f3:49:5c:d5:13:db:34:ec:f7:de:
cc:47:bc:ed:81:af:3b:59:62:e7:a6:5f:f5:d8:76:
6b:f4:4f:e6:71:0b:9a:be:a8:7f:ee:a3:03:36:49:
ab:2e:44:81:0b:8d:ed:6b:dd:42:27:ea:4e:b5:ff:
75:d3:64:7d:74:a0:da:d9:da:d7:e8:c4:e0:f3:9c:
7c:18:9a:77:f1:94:e0:51:97:a6:ca:a3:62:98:25:
5f:13:7b:b2:9b:81:64:3d:10:7b:fe:e1:f1:a6:e9:
b1:e2:21:94:89:01:29:95:a7:07:26:89:12:a4:3e:
79:dc:b4:d8:ca:fd:7e:23:7a:df:4b:c4:75:7d:15:
de:81:a0:98:26:78:b4:7e:73:e9:06:3d:96:78:2f:
21:9b:49:cb:d0:f6:b8:54:c2:48:91:56:68:6a:de:
60:b3:74:04:d7:bb:4b:30:11:0a:a0:4e:55:54:97:
98:3f:41:0e:75:ce:a9:9a:c1:1e:73:ef:6c:72:c4:
6c:b4:6a:0d:56:cd:50:96:68:ab:f7:68:15:e7:37:
b1:31:3e:81:24:ae:f1:7c:33:33:f7:74:6d:a8:50:
68:22:b4:28:6c:25:77:dd:6b:45:c5:3d:2f:3f:2f:
d3:fb:a3:44:20:a6:07:82:53:10:c8:35:f6:2f:5d:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:32:15:E5:5C:21:B2:A2:E0:6B:11:C5:EA:8B:91:BC:C1:B1:17
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:60:54:33:a5:98:87:f2:14:71:de:14:f9:e1:94:b5:4d:8d:
06:f5:f7:45:ca:6c:81:54:f5:0b:d1:e6:59:00:c0:57:2d:a0:
d8:1e:9c:93:a1:57:99:cb:f4:3e:c8:ea:eb:97:3a:9d:79:07:
93:d2:dc:a0:01:c5:76:78:37:dc:29:41:fc:f9:f6:a1:d9:71:
fb:87:bc:ad:69:08:ab:3c:65:b9:a1:f0:bb:67:6c:e5:3a:58:
4d:66:3a:bd:4c:5c:1b:5d:ba:a0:c8:93:3e:23:34:57:f9:3e:
a5:84:e2:8e:59:a4:12:1f:ba:40:fd:5e:9c:11:a0:f6:03:b8:
3e:c7:a5:27:9d:c4:ad:7d:c8:ca:d7:eb:96:0f:65:00:e6:95:
0f:a9:78:a9:5e:83:17:84:5e:bc:5e:2c:cb:60:b8:1d:9c:f1:
51:31:d4:c2:07:49:56:69:96:34:a3:ce:e7:8c:f0:87:ba:d4:
6b:e6:33:b5:4d:c9:59:ed:88:9c:40:cd:b2:a7:b1:e4:aa:63:
d0:61:02:23:5e:9e:a6:d8:11:ae:33:99:92:c9:3e:77:bc:aa:
1f:25:c2:8d:a1:3d:dd:d4:12:63:25:64:fd:ec:f1:55:bc:77:
c7:25:ab:85:ce:03:19:03:67:6d:a7:77:b7:59:47:a0:62:5d:
a9:f4:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:13 2025 by rpki-client