Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: 2adVC0olXZpHiYOhV3hkvdfK8XBiU1k0kLeocgC29/I=
Subject key identifier: E8:13:6E:AD:C0:D1:48:EB:BA:14:3F:78:2E:1F:7B:A8:52:0E:A2:BB
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 0198A128F6D4CAF22C868376CF090782E9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0C0D
Signing time: Wed 13 Aug 2025 02:01:13 +0000
Manifest this update: Wed 13 Aug 2025 02:01:13 +0000
Manifest next update: Thu 14 Aug 2025 02:01:13 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 1usMNmAsPVyhw8tkdPIlrreSP7Sqm2+83tCWauv3tpQ=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:f6:d4:ca:f2:2c:86:83:76:cf:09:07:82:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Aug 13 02:01:13 2025 GMT
Not After : Aug 14 02:01:13 2025 GMT
Subject: CN=e8136eadc0d148ebba143f782e1f7ba8520ea2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:5b:a0:23:21:08:62:11:81:f3:dc:49:d1:
05:25:a3:13:53:68:60:d7:a7:0a:10:5b:a0:1d:b8:
46:db:b0:88:2d:f2:bd:31:bc:51:d1:73:ae:05:ca:
ef:7e:77:4b:df:fb:82:63:c3:79:24:1e:9e:1b:0d:
ce:3a:23:f3:56:09:3e:68:f8:b7:77:a1:23:5c:44:
e0:5c:47:a0:18:af:7f:92:4d:a5:88:6e:b2:e4:02:
40:ac:8c:96:ea:84:6b:76:49:ab:fa:50:ad:7f:33:
b5:97:c1:78:9a:83:9f:68:49:2e:26:2a:35:82:96:
a6:8d:2b:09:7f:87:fd:68:a0:c8:b6:d0:7b:73:20:
78:1a:b1:4e:9d:25:75:57:8c:71:f5:1d:ef:af:6e:
d5:f3:28:87:03:17:81:9b:52:49:c6:4e:8f:14:58:
ba:d7:89:fe:96:c9:3e:bf:9c:94:2f:e9:76:8a:e2:
85:d3:4a:e0:1e:5b:64:9f:a6:a9:8d:1f:77:a4:ae:
67:74:3e:e9:1b:56:7b:80:28:a0:19:7e:74:aa:8c:
b3:48:87:d9:e8:f0:16:8a:69:0c:9e:33:18:06:30:
6c:4c:74:2c:ea:65:79:00:0a:46:a7:8a:ab:85:16:
38:6a:dd:20:09:86:99:f5:e3:c3:9d:dc:24:70:19:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:6E:AD:C0:D1:48:EB:BA:14:3F:78:2E:1F:7B:A8:52:0E:A2:BB
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:6c:27:f3:ac:60:46:42:43:dc:99:86:4d:19:e0:8b:3d:
34:d2:85:21:b7:6a:67:50:6b:23:a5:14:52:d1:8d:ce:6c:69:
b1:2f:bb:ff:56:4c:58:a2:2c:36:04:ac:44:23:1a:62:3d:2a:
11:e7:88:95:94:69:19:c2:05:b7:31:d8:3b:01:b2:5e:63:05:
bd:c7:62:70:5a:db:4f:97:04:9a:07:77:e3:bf:21:27:12:b5:
5d:fc:4e:c8:61:9f:9b:06:11:f2:a0:27:97:2a:e2:78:10:f2:
4a:4b:44:4e:ac:48:da:bf:4d:9e:73:cf:4e:aa:1f:8c:56:22:
cd:a2:0a:cc:c3:af:50:90:6b:9b:eb:8c:62:e9:09:20:fe:04:
a0:fc:67:a0:34:a9:e9:a8:85:17:58:78:e3:e3:f8:69:6f:43:
34:e7:5e:05:d3:f1:be:32:62:6a:3e:c6:a1:82:33:9a:b0:a4:
15:db:ef:f1:38:ef:80:b7:01:98:3f:3e:ea:a3:56:0d:ff:55:
f6:cb:b0:10:a1:69:d8:54:3f:47:f0:50:e5:6f:9f:7e:92:8b:
87:e0:cb:fb:1b:bb:7d:b4:4f:65:da:86:b0:5b:82:8d:89:8a:
c4:aa:06:41:0a:e1:70:d6:49:e0:1d:85:0b:cd:b9:d3:0f:bf:
40:d3:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:46 2025 by rpki-client