Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: N+w1sIe3BC32ggk03M5+S3VO2dIBnM2WziBsg8dady8=
Subject key identifier: 9B:50:95:E7:ED:02:47:E9:DE:B2:8C:F9:77:D8:43:24:CD:1A:48:52
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 01988FC762C404ACBD700900DDC8C4D49179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 17:01:05 +0000
Manifest this update: Sat 09 Aug 2025 17:01:05 +0000
Manifest next update: Sun 10 Aug 2025 17:01:05 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: 5bFR6OH/PqX9GWmqwdNk2mfz+ZsgsPgqzDcTReOkFM8=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:62:c4:04:ac:bd:70:09:00:dd:c8:c4:d4:91:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Aug 9 17:01:05 2025 GMT
Not After : Aug 10 17:01:05 2025 GMT
Subject: CN=9b5095e7ed0247e9deb28cf977d84324cd1a4852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:cb:53:52:8e:0b:3a:56:61:7d:cc:69:45:
b2:b4:fe:28:a4:e8:9b:9e:6c:5d:b3:39:6f:3c:ca:
1c:cb:fa:ab:2a:b9:64:ae:7a:e4:30:51:e6:8d:28:
02:ea:9d:b8:6a:b4:c8:db:60:e4:be:d4:ae:7b:2f:
19:bf:b7:bf:47:0c:29:89:14:bb:59:50:1a:5f:8a:
81:7b:e7:c7:93:c9:08:ad:bc:6c:50:4a:56:ed:cd:
92:a5:06:8d:2c:41:ff:88:d9:d0:2f:95:ae:80:29:
14:0d:e9:0a:68:81:10:0b:d5:1a:e8:fc:d7:db:d7:
d4:e0:8d:45:97:24:58:ba:e1:53:71:d5:f3:f9:a5:
f8:4a:69:08:ac:ff:d1:6b:b1:e3:56:96:44:dc:1e:
9a:27:94:4d:d9:7c:8c:14:f7:f8:cb:50:23:bf:03:
df:38:47:a2:74:f7:c8:d7:ea:5e:b4:19:9c:8d:a5:
02:a0:b9:fe:1f:7f:f0:b5:7a:5b:45:7f:d4:4c:50:
72:34:90:33:53:09:a6:40:d1:6f:b6:24:e8:dc:9b:
67:db:fa:5b:60:af:26:35:cc:c2:e0:46:49:9d:96:
86:d1:fd:d1:ae:cc:d3:26:75:b0:37:48:6b:d6:bc:
80:11:fe:13:18:e1:35:2e:a6:3e:40:64:05:96:c3:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:95:E7:ED:02:47:E9:DE:B2:8C:F9:77:D8:43:24:CD:1A:48:52
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2f:10:4f:d9:ba:0b:2c:b8:99:6a:3a:8a:9e:05:71:68:b8:
4c:8f:c7:42:2d:09:9f:80:8e:b5:61:89:dc:4f:9d:4d:e4:1f:
ee:f2:a9:9d:a8:a9:80:1b:01:dc:1e:55:05:e6:45:50:c2:6f:
3f:6e:b4:e0:d1:74:ab:14:41:ef:93:c6:93:7d:18:f1:a2:a4:
9e:0e:56:26:8a:88:3e:c6:47:64:a7:b0:35:ad:1b:0a:9d:4d:
ac:38:7a:15:a8:99:5d:23:71:bd:1a:62:13:dd:46:51:4d:21:
11:dc:e0:6d:77:2c:36:2e:57:58:b0:87:7b:3e:e0:1c:c5:5a:
01:d2:46:08:d3:ad:fb:78:e5:1f:96:52:e7:26:0b:9e:fb:3f:
f6:e2:fd:4e:49:5b:7c:3d:cf:9f:d1:38:1b:f5:d4:78:3b:bb:
20:a1:0e:5f:56:eb:e0:38:3c:4c:7e:e8:8e:d5:d3:07:8e:b3:
19:a4:86:28:dd:76:29:5d:36:17:37:0d:9d:ca:57:32:6d:b2:
75:da:90:1b:46:79:db:19:f4:b7:3c:cd:61:95:e6:4a:3f:6e:
a8:db:2d:c2:ac:1a:ac:2f:4f:36:16:4d:ce:89:a0:8a:45:08:
60:ef:a0:5b:e4:1d:26:0c:a4:30:4f:e2:36:b7:e5:f7:a9:81:
0b:e5:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:26:47 2025 by rpki-client