
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: QT2xCkhF3vMZeFCJKyulb9HoZ5ULMxLEhsWysXS3GB8=
Subject key identifier: C5:C8:55:CC:97:95:70:AD:46:44:A6:CD:AD:8C:81:B0:9D:80:04:1D
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 019889570D181A033D1897BFE412242970F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 11:00:40 +0000
Manifest this update: Fri 08 Aug 2025 11:00:40 +0000
Manifest next update: Sat 09 Aug 2025 11:00:40 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: yDg+u8X4vB3fa5YVSYDXHYEJKHlwj/zUlcWyrbXVUKY=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:0d:18:1a:03:3d:18:97:bf:e4:12:24:29:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Aug 8 11:00:40 2025 GMT
Not After : Aug 9 11:00:40 2025 GMT
Subject: CN=c5c855cc979570ad4644a6cdad8c81b09d80041d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:a2:35:73:e6:78:1d:ae:9f:83:6a:49:b3:
2a:aa:a2:b2:16:a1:64:4f:e5:18:19:b5:13:1a:70:
ae:cc:f1:a3:c0:85:06:58:9d:19:cb:64:43:ac:ee:
77:29:11:37:b9:d2:a4:c7:17:34:ab:e7:9b:12:af:
50:dd:d5:05:17:a5:3b:f7:e7:67:ea:c6:2b:82:73:
f8:1c:b4:60:0c:60:b1:2b:34:07:a2:88:16:06:a6:
15:ce:2d:d8:be:6b:84:c0:52:50:26:68:63:1f:9a:
5d:6b:c0:3a:52:14:81:af:ab:e9:18:c2:5d:f5:30:
eb:8b:3b:bb:8f:9c:6e:a6:d6:ee:dd:9a:c1:aa:c2:
7f:38:15:32:a9:33:4e:64:00:22:9b:6c:bd:74:11:
dd:b0:05:9a:99:94:64:1c:6f:28:e5:a8:13:9d:06:
49:49:4f:38:87:08:a1:2e:10:dc:91:ef:58:dd:dc:
65:1a:cf:08:19:98:e9:fc:88:53:e6:46:84:0b:67:
a1:b5:2d:6d:7f:7c:24:be:3a:cb:dd:99:32:dc:1b:
79:16:cc:d7:33:d7:a7:1e:d7:51:3a:18:f6:39:83:
5e:01:c8:e3:c5:a1:72:87:7b:bb:f8:21:65:06:b5:
68:2f:37:77:8a:74:37:aa:0e:15:cc:a4:49:06:14:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:55:CC:97:95:70:AD:46:44:A6:CD:AD:8C:81:B0:9D:80:04:1D
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:44:77:0c:ad:97:ae:06:1a:8c:6e:e7:10:4b:1a:74:8a:
7d:90:e5:5d:1c:6b:c3:ab:5b:a8:41:61:a7:a7:7e:0a:dc:63:
71:42:a6:e5:5d:c3:61:bd:3a:f4:fd:8b:9c:90:80:95:67:b5:
60:00:ac:69:96:10:b9:2e:d6:91:92:ce:b6:38:ec:53:08:84:
6f:94:a6:ae:15:15:87:69:c8:e7:12:97:04:57:2b:c5:ac:06:
4b:3e:ce:27:d8:79:7f:7d:f7:07:22:a9:de:8c:9d:a0:37:e5:
bd:f3:51:d3:44:52:7b:2f:14:5f:a5:94:a0:bc:b9:a1:e7:04:
c6:6f:f6:bc:50:8b:f2:22:5b:7e:d8:e5:17:4e:db:26:e4:37:
1f:56:6c:83:b1:b1:99:8a:30:cd:5e:bc:68:9c:7d:85:7b:19:
96:59:4e:54:1e:04:ec:4b:94:d8:75:62:f7:a1:f2:bd:97:7f:
3d:07:58:77:32:4f:19:d4:f7:6b:ab:9e:6a:80:ac:c7:2a:5b:
97:8e:73:4d:30:7c:f1:79:89:43:db:ea:12:0e:58:92:a4:b5:
b0:7b:76:82:90:18:f9:3d:3f:d7:04:51:27:02:df:7d:f4:35:
cb:ab:49:44:df:c9:ff:d9:6d:f8:35:64:6d:75:22:32:93:77:
bd:23:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:57 2025 by rpki-client