Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: SSfPG5F4x/vfz8F6Wjz6eizOEqZRsHSOLTAH3EZTvuw=
Subject key identifier: 92:B9:9B:ED:46:66:8E:C5:58:A7:BD:B1:C0:C6:62:CE:3D:1F:A8:B9
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 0198974A34501B82104265D74E2A34F8B1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 136C
Signing time: Mon 11 Aug 2025 04:01:19 +0000
Manifest this update: Mon 11 Aug 2025 04:01:19 +0000
Manifest next update: Tue 12 Aug 2025 04:01:19 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: SZh9nGMLp2OCTljow1tTpbO3aQ2Zlj0TR2zcUvz8Xco=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:34:50:1b:82:10:42:65:d7:4e:2a:34:f8:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Aug 11 04:01:19 2025 GMT
Not After : Aug 12 04:01:19 2025 GMT
Subject: CN=92b99bed46668ec558a7bdb1c0c662ce3d1fa8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:96:8e:73:8c:63:60:68:3d:08:20:e2:c4:
71:3d:c7:b3:19:75:28:22:e6:ac:3e:09:52:99:5e:
3e:e8:44:fd:46:a0:d8:9a:84:f4:2e:ae:5b:2f:6a:
93:5e:23:6a:59:81:d3:4f:d3:d1:52:e4:b5:9c:41:
d9:e7:3c:4c:46:9d:df:89:48:6e:ae:a3:a0:11:6a:
0b:96:44:dd:4f:b3:09:d1:d6:e9:dd:19:36:80:b6:
bc:0f:d6:1c:a6:2c:dc:6d:d0:8a:bc:4e:b3:01:d2:
5d:be:22:0d:3d:09:3d:54:8a:6a:17:7b:b6:55:fc:
f5:c6:06:1f:97:08:59:c5:da:4d:35:c0:ad:05:11:
eb:d7:04:ee:96:f3:62:29:d4:fc:97:a8:92:1b:be:
a3:7c:84:54:49:ec:35:a6:e6:cf:d2:d1:f1:10:f8:
d0:7e:ac:00:96:ef:d6:f9:cd:02:4a:26:a8:03:f8:
00:de:12:53:93:50:4a:f5:fa:5e:f3:61:85:1b:c0:
39:16:91:be:e6:4a:84:8d:c8:bd:68:6a:6f:15:f6:
c6:08:1b:ba:f4:51:2e:df:d5:07:29:7d:e1:a5:4b:
98:7c:8b:34:59:7a:97:e1:6c:bc:f1:d1:10:fe:3c:
4b:96:e7:86:4b:17:bb:45:2b:ec:46:ff:15:eb:f4:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:9B:ED:46:66:8E:C5:58:A7:BD:B1:C0:C6:62:CE:3D:1F:A8:B9
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a7:55:2f:fc:dd:f9:e0:30:f3:50:57:8f:b9:2f:99:27:76:
30:bc:30:96:78:6d:e4:db:6b:b0:fe:46:49:16:d5:c4:9f:2e:
04:b1:98:f4:5a:dc:77:f6:d0:e1:48:15:e7:7a:40:e5:2f:55:
7b:75:26:30:7e:2b:1f:45:ba:aa:67:42:1d:31:d9:93:fb:74:
14:ab:7e:5e:99:b9:71:ee:2a:b7:45:3f:45:36:fb:15:78:07:
ee:9c:77:b2:00:3a:6b:21:4e:5e:2d:57:8b:b1:e4:55:2c:20:
32:e4:b2:5f:cf:c0:f3:b6:e1:eb:dd:d1:93:be:6f:3f:fc:fe:
77:a6:c4:f4:4f:7f:16:4b:72:27:f4:1b:96:40:a2:4c:95:a3:
65:1c:98:88:27:d6:0c:6f:88:b1:67:0a:24:e0:21:81:8d:94:
4b:12:12:d9:46:71:5e:39:12:63:d7:5e:56:8a:f7:75:32:42:
f9:fa:cf:ef:6f:a2:e0:42:82:a4:c6:d2:e0:79:e8:81:35:31:
00:1f:74:b7:f9:12:60:11:8f:8e:97:3c:7b:35:32:23:c1:b7:
02:a1:1e:02:43:83:91:aa:f8:70:ad:4a:30:fd:26:52:b1:7a:
a8:a3:fa:2a:cb:b1:90:20:d1:5b:9e:d8:87:ab:77:9e:28:c8:
ba:33:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:51 2025 by rpki-client