Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: 19mrsyR+b2legImev61N/O0mFNj9wHjvypYYBsobjmc=
Subject key identifier: F9:98:24:7A:20:74:F8:AF:78:01:20:4A:D3:19:29:36:6E:47:83:3E
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 01988FC76D05B587BBA96BD2876A250BCEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 17:01:08 +0000
Manifest this update: Sat 09 Aug 2025 17:01:08 +0000
Manifest next update: Sun 10 Aug 2025 17:01:08 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: 8RN2kTsBjbqdlatFiNRRD1gBQvzvx1NQpdP/3KmY8cU=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:6d:05:b5:87:bb:a9:6b:d2:87:6a:25:0b:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Aug 9 17:01:08 2025 GMT
Not After : Aug 10 17:01:08 2025 GMT
Subject: CN=f998247a2074f8af7801204ad31929366e47833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:fd:03:6a:37:3e:48:fb:3a:2c:79:77:e9:
0e:71:65:95:46:d9:a3:f6:52:a0:28:d4:92:87:6e:
a0:3a:69:b6:79:ae:c5:a6:14:59:40:7c:9e:c9:3c:
28:8b:43:11:88:81:02:e5:fe:1b:bc:66:3d:78:5d:
e5:41:44:12:c9:42:cd:3e:86:46:8c:c8:a2:cb:57:
ea:cb:04:eb:5e:99:0d:fa:89:73:25:b2:99:a2:25:
f1:b1:83:1e:fe:c2:2f:56:a7:7d:6d:68:1d:1d:93:
dd:1c:5c:3b:7c:34:a4:27:25:30:c1:9f:69:d6:91:
4f:42:93:9f:71:43:4a:bf:cb:b2:a7:ea:93:9a:54:
ca:6b:2b:12:94:df:d9:49:ed:1f:aa:d1:c5:4b:7c:
2e:41:f8:4c:a4:8e:f6:0e:12:b4:2c:a3:21:9a:fa:
46:f5:54:23:3b:83:9d:3d:6a:03:5c:0d:53:a3:a1:
d1:7e:0b:70:1d:ca:65:09:1e:08:b8:57:dc:90:5c:
90:5e:a1:00:24:bf:20:5d:c4:4a:df:14:8f:ee:f7:
37:f1:77:e3:0b:cd:a8:1e:7f:64:d9:83:56:7a:51:
fc:bc:4c:bd:60:03:3c:da:0f:6b:57:99:54:cc:8c:
0f:b0:2f:dc:5b:3f:c3:a9:33:dd:ea:d1:b6:80:b6:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:24:7A:20:74:F8:AF:78:01:20:4A:D3:19:29:36:6E:47:83:3E
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7d:72:7d:74:19:90:97:fc:30:30:a3:f1:18:87:08:34:6d:
e9:2d:c4:c1:c4:4b:58:5d:39:66:c0:4d:8f:15:b7:b8:45:78:
59:c8:eb:1b:8b:78:5a:34:b8:9c:96:1e:08:82:85:bc:dc:cf:
7d:63:ec:6e:c4:03:53:4c:3c:a8:fb:69:b6:fc:31:99:dc:74:
f8:61:c2:08:b8:78:68:ca:1d:da:83:f3:75:02:7b:b7:7f:71:
c1:cf:de:f0:0e:6f:2b:30:f3:fe:f2:a2:3e:32:a0:1b:1f:aa:
c8:5f:80:7d:8c:4a:73:c8:39:73:fd:f3:96:7f:dd:de:34:49:
bc:14:90:e9:b5:60:af:b9:8a:e9:e4:24:03:50:e8:83:a9:6b:
4c:19:a2:87:0f:6a:78:c2:bd:8a:55:a5:cd:21:de:dd:ef:f0:
b4:4e:4c:03:b0:09:57:31:d1:5d:a9:ff:a0:95:a9:9b:22:e8:
29:ed:d1:66:59:21:49:5d:26:8c:94:ab:bb:6f:60:07:85:ab:
ce:1d:8b:ea:8a:3e:07:26:7b:58:49:ac:4b:a5:8d:b4:c9:bd:
38:31:c4:8e:74:22:68:1a:f3:d1:0f:4d:48:93:8a:7e:74:98:
30:34:0e:91:23:5c:f1:9c:e1:1c:52:dd:d1:5d:67:82:42:76:
4b:df:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:06 2025 by rpki-client