
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: OYQTwMAzjx8mPtaDi1rR7MRktDilAbUtSw7GD/T2PNQ=
Subject key identifier: 1B:16:DB:AC:49:BD:3C:C0:0D:E4:FF:8B:29:5C:FE:9A:C9:EF:C5:15
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 01988B7D000125759B3EA5A90C8214D16368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 132A
Signing time: Fri 08 Aug 2025 21:01:21 +0000
Manifest this update: Fri 08 Aug 2025 21:01:21 +0000
Manifest next update: Sat 09 Aug 2025 21:01:21 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: 4hflD7onSqi7+fG9IckVkt4A2NQvBJ0HF+seWntHaSY=)
2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:00:01:25:75:9b:3e:a5:a9:0c:82:14:d1:63:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Aug 8 21:01:21 2025 GMT
Not After : Aug 9 21:01:21 2025 GMT
Subject: CN=1b16dbac49bd3cc00de4ff8b295cfe9ac9efc515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:24:41:04:51:df:c7:1f:fd:2f:5d:53:c1:
a1:e6:e7:9a:6b:41:13:1e:fb:f8:18:df:0c:31:2f:
8e:47:39:e5:5e:eb:34:66:79:6d:f3:01:f0:62:7f:
81:1a:1d:3f:65:49:04:36:79:a9:2b:bb:c6:06:97:
73:e5:78:18:97:32:8b:8a:eb:2e:51:2c:01:ab:c8:
86:a6:3e:88:00:a5:8f:01:eb:49:35:7c:b3:8a:45:
b9:b6:63:b4:74:54:aa:b9:a1:15:66:38:32:a8:c1:
90:1c:74:d5:48:53:cd:07:3a:e9:8c:ee:34:db:aa:
e8:40:fc:aa:d6:8b:4a:b4:39:41:ab:1d:c8:7e:02:
a7:9c:15:dc:1c:16:a5:6f:24:97:49:de:4b:f2:60:
b8:14:56:7d:d8:2e:2d:91:a3:fa:3e:c5:bd:07:e7:
8c:e5:7d:2a:3a:8f:98:c3:d1:f1:65:94:f2:e1:fe:
f2:a0:ea:5b:0d:62:34:30:ce:60:34:a0:60:60:33:
8c:85:a9:28:ce:4c:3e:2c:23:5f:b7:b2:55:ff:c3:
46:6d:81:58:d9:4f:0d:fa:da:bc:93:2e:ab:bd:06:
88:8e:b0:7f:55:6f:d0:7a:31:e0:d1:5a:fa:a7:2b:
c6:70:a9:71:ed:d3:6c:ad:b0:fb:2f:ce:e7:5b:fc:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:DB:AC:49:BD:3C:C0:0D:E4:FF:8B:29:5C:FE:9A:C9:EF:C5:15
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4e:48:c4:6f:68:63:c1:61:3a:fa:68:cd:24:87:35:9c:5a:
64:13:8a:37:c6:73:83:70:c4:0d:1b:8f:d8:9f:df:45:28:c6:
4f:58:47:fc:22:1f:d2:a9:08:7b:02:b8:dd:32:6b:42:ed:a4:
06:32:da:2a:c0:61:e3:a4:ae:4d:1b:0f:58:e2:8a:54:3c:cf:
b9:b9:34:97:a2:e9:38:a4:e1:e5:18:f9:0c:8c:3b:f2:60:d9:
5e:d7:9e:3f:69:4c:0c:21:3d:28:cc:b2:40:74:ec:0f:43:e0:
b8:91:8c:52:ee:c6:dd:96:1d:f9:62:6d:56:3a:eb:f6:1f:ce:
f2:23:4d:03:35:e2:0c:f5:c2:0b:c6:82:48:58:5b:bc:0e:7c:
9d:ec:c5:e8:b1:a2:69:d5:5f:82:1e:c6:af:9f:37:92:9f:0b:
49:2f:07:eb:ac:79:2d:31:27:39:98:d5:13:65:ff:77:3f:db:
2b:c2:cd:c9:a9:0c:34:e8:71:72:c4:df:5f:00:6d:24:a7:e7:
81:f9:41:a3:fa:a7:4e:ea:f2:d5:06:ee:99:06:10:52:86:f7:
5d:2e:26:da:78:f1:2e:9e:75:3f:31:d2:67:15:e9:da:c4:77:
a2:10:50:33:f0:d3:da:04:c2:8a:50:e9:c6:98:67:7f:e8:a7:
71:ba:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:50 2025 by rpki-client