Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: jSxe61jIERnTETLUNg5gcAIWRyZNCrToYEz4y+5aQTI=
Subject key identifier: 1E:39:82:CD:CC:D1:AF:19:31:14:BE:9A:F1:6D:EF:E3:97:BB:B9:5F
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 01988B0EBC6C26AE2DCF02B720026DD471F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0B89
Signing time: Fri 08 Aug 2025 19:00:55 +0000
Manifest this update: Fri 08 Aug 2025 19:00:55 +0000
Manifest next update: Sat 09 Aug 2025 19:00:55 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: kOCECYW17rFYgpBMls6KwzR07IZBTmBFne6CHnH9KLI=)
2: pEoCff1DtYoEMHzC9EANzQRBsC8.roa (hash: +m2VMtZgdFPS2/0zJPg1ZLBtRhUd6KXSgxAw6jiEMMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:bc:6c:26:ae:2d:cf:02:b7:20:02:6d:d4:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Aug 8 19:00:55 2025 GMT
Not After : Aug 9 19:00:55 2025 GMT
Subject: CN=1e3982cdccd1af193114be9af16defe397bbb95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:ac:c7:72:90:d9:dc:00:0e:7e:38:82:87:
f5:c9:3d:cc:07:c9:17:76:52:2f:f9:5a:28:21:47:
61:28:68:3b:08:d2:fd:7f:e3:19:72:de:db:00:2b:
c2:29:12:f8:10:5e:c4:78:91:f7:ab:10:ac:66:24:
f1:06:83:2c:38:e8:21:64:45:ba:be:d2:69:14:8a:
62:38:02:4a:dc:6d:7e:b6:f0:fe:0b:c2:1f:ab:9e:
e9:fe:ec:73:1d:f3:ed:e2:b3:ea:c0:1e:ee:c1:14:
ac:53:d4:b1:02:39:65:1f:29:d6:f7:31:02:e1:84:
80:23:b9:4e:85:4d:ed:36:b2:c0:41:e2:c8:d3:fd:
85:ee:71:06:62:cc:07:d1:29:fe:3a:9b:f7:bb:62:
e8:a4:83:7c:1c:a9:dc:18:a1:90:4b:6a:4c:1d:4a:
dd:9c:fb:43:bf:c3:fa:57:30:78:c5:2f:68:1f:19:
cf:e9:e4:c7:59:b5:ec:25:7e:42:b7:ba:12:aa:f7:
9d:f9:fb:9e:a0:a2:ca:9a:b3:25:1d:38:f0:8a:a1:
2c:ef:9c:1c:06:2e:8a:03:14:a5:d8:be:b4:bf:be:
77:83:6a:27:3a:f9:aa:21:36:2a:76:1e:d4:69:9f:
0f:b0:fa:51:63:6e:ac:29:20:8b:16:cc:3d:e1:e9:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:82:CD:CC:D1:AF:19:31:14:BE:9A:F1:6D:EF:E3:97:BB:B9:5F
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f4:f9:9a:c0:56:86:83:2d:64:94:c8:42:54:d7:36:ad:b3:
d8:b3:a3:6b:cb:fc:94:9f:cc:41:90:04:d8:c0:b1:25:39:44:
f5:80:3a:44:72:fd:49:a1:02:aa:44:d9:f9:11:28:b0:41:3e:
06:2b:97:1e:2a:b6:f7:5e:77:81:92:ba:86:a7:72:99:30:aa:
e6:3d:c2:0f:f3:8e:e6:9c:9a:fc:c4:f5:da:d8:a7:43:d4:bb:
9a:0f:20:3f:fc:f9:b7:57:3d:bc:98:0c:a8:36:80:51:a9:22:
aa:42:d3:18:fd:9a:93:1b:6d:fb:1f:a9:4c:f2:8d:5a:c8:2a:
3f:60:f6:6b:6d:d9:54:ce:fd:2b:aa:eb:99:b4:e4:df:fa:1d:
6d:91:73:0a:2d:95:f5:73:99:68:b5:90:07:92:29:bb:17:31:
4d:cb:a2:3a:27:6e:4e:70:4b:11:d3:f1:b4:d6:6c:30:c2:23:
44:61:81:43:6a:11:5c:84:98:dd:93:2a:aa:94:a7:f0:fb:28:
b9:97:f3:81:19:e4:ab:42:5d:4f:c3:48:98:41:81:de:51:d4:
93:8c:e1:b7:cb:d8:ec:55:bd:1c:3a:f9:a1:30:b1:de:06:de:
7f:a9:b0:24:bd:f1:90:94:fc:d7:1e:14:d4:48:10:4c:34:3a:
37:6d:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:59 2025 by rpki-client