Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: ysyqFyvu+9tvI3RHXyPfpTA9Ixj6xkCFdhgirvd9ij0=
Subject key identifier: 48:92:2B:B4:CE:BF:36:80:C3:9E:33:9F:F5:21:2C:F3:0B:3E:73:A2
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 0198819DF17D0067721FEC3270E4056403E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 23:01:08 +0000
Manifest this update: Wed 06 Aug 2025 23:01:08 +0000
Manifest next update: Thu 07 Aug 2025 23:01:08 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: VIzI32izD/zGHxnz2q9N8ygF7Xsf/pK9z8EJ82w2qag=)
2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:f1:7d:00:67:72:1f:ec:32:70:e4:05:64:03:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Aug 6 23:01:08 2025 GMT
Not After : Aug 7 23:01:08 2025 GMT
Subject: CN=48922bb4cebf3680c39e339ff5212cf30b3e73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:24:cf:33:f3:44:fa:82:5d:70:35:2d:16:
2e:36:17:22:b6:72:ca:76:03:ab:0a:44:53:dd:d1:
49:8d:77:98:1e:76:66:fa:1d:75:cb:9d:39:44:5f:
f3:b4:08:d2:e4:99:d2:69:b3:b4:e0:aa:d2:f0:b0:
c6:b2:1d:34:da:68:de:a4:8c:df:a5:f7:ee:6f:30:
aa:dd:ee:b7:fe:37:d3:f9:79:57:28:20:e2:b2:d8:
50:ab:f0:4a:e6:85:b2:c0:9e:ff:e8:f9:91:85:90:
48:88:36:cd:42:76:bf:c4:04:b6:71:0f:d6:2c:d9:
90:35:26:51:86:f1:ec:e4:70:01:10:7f:0f:ea:a6:
c1:fc:d6:7f:5f:cf:99:6a:16:b4:1e:79:72:79:ce:
4d:1f:58:da:fa:f2:62:78:39:6f:27:db:bc:2f:f4:
ea:51:47:ab:45:b6:b6:4f:37:29:24:ec:ed:c3:8d:
4b:50:17:c0:1a:dd:b2:92:a8:75:b2:58:61:74:bd:
84:76:ba:61:cb:78:23:ef:75:a7:ed:0c:91:04:70:
4b:be:cb:01:d0:42:7c:55:af:0b:68:eb:e3:65:d5:
2e:75:33:06:75:9c:4a:83:ec:70:2f:17:20:5e:14:
bb:af:b2:75:71:89:8b:d6:80:8a:bd:ef:55:c0:c8:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:2B:B4:CE:BF:36:80:C3:9E:33:9F:F5:21:2C:F3:0B:3E:73:A2
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:9d:4e:6d:78:c6:b3:e3:f8:b1:96:41:c0:2b:d0:f3:c5:
fe:47:cb:4a:a7:a4:4b:38:00:fe:17:a6:c7:fd:ca:dd:8f:3b:
e0:1e:b0:2c:67:8a:ad:89:49:bb:f5:44:03:f4:a4:60:19:10:
70:17:b1:55:a7:bf:6a:f4:72:2b:79:21:9c:51:c8:ea:a2:a8:
8c:82:8b:0d:92:68:3d:0b:55:97:e1:f9:84:e9:91:47:b3:96:
01:4c:7e:9e:f5:1d:8d:1b:29:08:ff:6b:d7:98:ce:a7:ce:43:
8b:2e:f1:d8:3b:ee:67:f2:93:f4:d2:3f:11:3a:5e:2b:7e:14:
9e:79:df:08:2a:ce:c2:1d:16:25:93:46:e8:bb:12:f9:02:c6:
95:05:34:f9:af:b0:4c:eb:b8:ed:a8:69:f5:45:65:71:00:12:
7d:82:d8:0d:74:b0:6d:e4:30:41:91:07:fe:07:09:79:28:59:
b9:78:9d:40:08:4e:f9:1f:fa:83:08:6b:a3:ee:8b:2c:ff:c5:
2b:5f:56:ee:7a:22:2f:32:ab:bd:11:36:5e:9c:b9:23:b9:44:
30:f2:a5:45:e4:7b:0b:ef:0f:08:d6:55:03:e0:b1:11:dd:e4:
4e:23:be:46:b2:8c:cf:74:0a:a7:64:00:16:ea:a3:4c:08:a5:
70:53:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:01 2025 by rpki-client