
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: CSUKCZeOMXlB9+HFHw3Y+y81bXNRaPgWAREeJVf6DeQ=
Subject key identifier: 04:B9:FA:73:28:FA:DD:01:2B:06:26:01:C8:2E:55:DF:00:9B:E2:FA
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01987450680015D404E1D7DF9B40B15353B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:23 +0000
Manifest this update: Mon 04 Aug 2025 09:01:23 +0000
Manifest next update: Tue 05 Aug 2025 09:01:23 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: Djg3wWTsEmHuFNeStqBRPd1BD0nFnpQaFbVVTQ4ZhIs=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:68:00:15:d4:04:e1:d7:df:9b:40:b1:53:53:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Aug 4 09:01:23 2025 GMT
Not After : Aug 5 09:01:23 2025 GMT
Subject: CN=04b9fa7328fadd012b062601c82e55df009be2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:af:b7:09:35:a5:30:d2:ef:ab:3b:91:77:
04:0c:ff:30:00:80:27:84:87:d0:81:4b:66:7c:ca:
2c:49:f4:ba:3c:ac:91:4c:c9:61:48:05:da:b8:61:
a2:7c:76:c0:3b:db:2c:7e:36:dd:c6:75:a4:b8:7c:
c0:99:b5:d5:4f:ec:b7:54:81:dd:31:e6:51:11:f8:
44:3e:ab:f2:b9:f9:84:12:ca:0a:01:64:c3:7c:1b:
db:ed:95:9c:3d:78:f6:61:35:28:45:01:75:6d:4b:
b2:a5:93:08:76:f4:93:e5:13:2e:f6:9e:a8:81:0b:
e8:03:3f:4b:4a:74:df:cc:ba:e9:88:f7:f3:d1:f3:
b5:46:3e:7f:bf:0a:ff:c2:7f:46:22:ec:d5:a4:7e:
f0:7a:21:99:36:68:db:29:6f:88:69:34:97:cf:29:
4a:87:31:45:3a:d8:34:03:b1:1f:88:2c:9a:f0:8f:
c1:37:5a:fe:3f:00:4b:be:a2:91:dd:f4:fc:03:14:
95:07:9b:31:f9:dc:59:90:97:d7:87:b4:5c:99:f5:
74:39:e9:6c:d0:fb:5b:60:98:22:ec:e6:85:45:38:
b5:b2:31:f5:71:11:68:4d:6c:65:07:b4:dd:b6:d7:
57:03:30:c5:8b:bc:08:33:31:de:b0:f7:f2:3b:ad:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:FA:73:28:FA:DD:01:2B:06:26:01:C8:2E:55:DF:00:9B:E2:FA
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:93:12:40:37:2a:51:49:f9:5d:95:fb:d7:92:4d:eb:3f:
9e:d5:04:2e:6f:57:e1:08:17:65:11:2c:0c:db:35:7b:ee:14:
26:0e:23:b2:6c:f8:52:5f:6f:70:47:bc:22:8d:dc:0c:fc:9c:
d8:75:4c:b3:28:13:66:1f:46:c6:35:84:ce:00:55:d6:4c:0c:
f8:08:30:da:d7:ee:4d:77:52:72:eb:e7:bf:5e:62:58:ca:8d:
4f:22:37:c9:98:d9:32:62:4c:7e:12:92:5a:74:30:8b:25:15:
12:26:79:69:62:3d:fe:7d:25:7e:ec:c2:04:7f:73:ba:ea:45:
9c:0a:4b:34:c5:d7:8c:86:4e:f1:36:05:19:56:62:72:be:28:
9c:d5:2e:c6:bb:9a:0d:f0:c0:82:df:54:c1:d7:54:fe:e0:b0:
dd:5d:d3:07:34:7c:48:b2:9a:2c:86:1d:3e:35:3e:09:d9:2b:
99:86:24:99:49:e9:8d:7f:d3:f7:99:43:63:c8:ef:73:09:f7:
a7:a1:d6:8f:34:51:d5:44:87:90:82:dd:a5:b4:e9:a7:f7:55:
f3:ce:9b:18:74:6b:c8:76:5c:89:3f:25:92:f7:3c:ce:98:64:
09:a0:15:44:63:15:64:98:b8:fd:46:3d:22:ca:83:98:bd:58:
ae:a6:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:58 2025 by rpki-client