Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: XWvV6Qf8Cpzx3Z2JiOeDjUqX3KpOBYxZ0WSMo4g879w=
Subject key identifier: 1C:46:A7:8B:1E:56:C4:53:8E:37:FD:A1:8A:E3:AE:49:58:BB:F5:3F
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019896A6A1E34C4BFD6258BB2E155029F492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0A80
Signing time: Mon 11 Aug 2025 01:02:39 +0000
Manifest this update: Mon 11 Aug 2025 01:02:39 +0000
Manifest next update: Tue 12 Aug 2025 01:02:39 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: OGlc0NHRFlwsISCLWKHkrgDpR5aLiiGypGewC5iGa0Y=)
2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:a1:e3:4c:4b:fd:62:58:bb:2e:15:50:29:f4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Aug 11 01:02:39 2025 GMT
Not After : Aug 12 01:02:39 2025 GMT
Subject: CN=1c46a78b1e56c4538e37fda18ae3ae4958bbf53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:21:f4:c7:b7:6b:1d:b6:3e:5a:82:43:97:
1d:93:80:dd:1b:d7:3d:2d:44:99:b5:96:1e:03:63:
be:f2:fd:8a:f6:21:76:65:26:0f:90:96:b3:c3:aa:
63:24:6d:cd:0d:a3:f0:10:ac:84:b4:6e:d9:38:f9:
98:68:cc:69:88:a8:dc:74:f9:2a:6f:64:54:a2:a7:
e9:b7:c1:62:14:35:5f:e5:7b:67:6d:c2:3a:54:bf:
66:54:3c:24:28:36:c0:1b:9a:cb:af:7d:b8:ff:44:
23:76:e9:48:28:b3:ed:15:e1:98:10:e8:88:fa:06:
db:71:68:de:6b:bd:0e:55:2d:bc:7f:b7:f4:d8:13:
d0:3e:ee:1d:e7:4a:99:55:46:bb:24:a4:81:ff:00:
07:c1:57:de:cb:c2:ad:d6:d1:a4:1b:a5:e4:c8:e1:
35:ca:18:c0:64:b8:0b:aa:fb:ec:4d:3f:f2:db:62:
a8:2a:21:4b:fe:fb:f2:62:4b:6c:ab:16:fa:50:67:
95:18:aa:f7:84:bc:20:30:9c:29:33:02:a0:02:84:
14:9f:11:76:7d:38:2a:e7:bb:5c:2b:40:aa:b8:42:
cf:5d:3f:e3:b0:7e:f5:dd:1b:e0:8a:e7:df:e6:17:
c7:c5:d5:b5:f2:97:ec:d0:c3:fd:47:55:89:bf:1c:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:A7:8B:1E:56:C4:53:8E:37:FD:A1:8A:E3:AE:49:58:BB:F5:3F
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f9:4f:e3:70:5e:85:52:0b:70:58:a0:75:1b:28:f2:1c:07:
26:99:0a:80:81:86:4d:73:8b:c4:19:a9:5f:2b:b5:d9:4e:3d:
14:bc:8d:c0:22:9d:65:d0:cd:3d:a1:16:fb:92:54:0b:7f:4e:
e6:57:b1:42:01:f3:be:98:e2:74:65:9e:c0:d3:86:3c:ef:4b:
97:d7:b8:a1:4b:5f:c4:16:f7:58:5c:89:ce:db:87:4b:f6:b0:
96:48:c7:04:db:b6:02:1e:4b:80:84:a3:7b:6d:3d:f1:94:e7:
5c:70:a4:65:c8:93:61:d2:95:75:b2:e1:d4:8a:12:76:de:5b:
af:e6:b3:47:40:a2:e6:b1:82:58:81:d4:58:d6:77:35:35:fd:
db:c1:1c:25:89:c5:81:7a:43:0c:63:9c:2d:7a:78:c0:4b:57:
49:ea:49:ca:9e:6c:cc:5c:f9:58:81:bf:fb:58:76:ee:cf:a8:
35:43:7e:ca:d0:43:21:40:89:bf:30:97:5d:a1:16:d1:1a:35:
e7:44:ea:cf:2d:b1:31:f0:0a:ba:38:b8:ab:48:f2:14:3a:05:
17:76:3e:73:01:7c:d2:28:d6:d6:5f:6c:e4:d6:29:47:c5:e8:
73:7a:1a:83:31:bc:fb:c9:f7:91:f5:9c:cd:5f:6f:0f:b2:ca:
32:95:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:21:42 2025 by rpki-client