Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: fcEuDJYSMJmJ6FbGRyUac45A7tStQv+HVQ8do8tFRi4=
Subject key identifier: B9:AE:17:52:B4:AC:EF:AD:12:E0:91:67:B5:1F:7F:7E:6C:49:38:10
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019892C8694C313F7CAA16D5DF8F927E5618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 24
Signing time: Sun 10 Aug 2025 07:01:04 +0000
Manifest this update: Sun 10 Aug 2025 07:01:04 +0000
Manifest next update: Mon 11 Aug 2025 07:01:04 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: iummGiIyIQ367N+TM9wB90mVbnuFQB0+ouXvtweroFI=)
2: DnzCg_u4NFNmMwRYc8qXyMIRWiY.roa (hash: xF2+ZjEPkdHENu1uFlay4DzSYMCWEitq04qek3Yq/2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:69:4c:31:3f:7c:aa:16:d5:df:8f:92:7e:56:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Aug 10 07:01:04 2025 GMT
Not After : Aug 11 07:01:04 2025 GMT
Subject: CN=b9ae1752b4acefad12e09167b51f7f7e6c493810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:70:2d:39:3f:94:e2:dc:e2:a5:34:f5:7e:
7a:88:1d:cc:7a:e3:77:62:d2:83:ba:eb:f2:c8:66:
44:4a:b6:e4:08:25:d6:ae:ca:76:52:20:df:d6:6e:
4a:70:2e:29:90:0c:91:6d:5b:50:89:c2:b0:dc:9d:
ae:9c:4f:c0:c6:be:74:c1:0f:85:f7:35:57:69:9c:
7f:a2:ba:9e:d1:ad:f8:9f:c1:19:1f:eb:0a:a0:72:
df:e3:56:32:9d:26:e5:2c:36:da:05:3a:a3:a8:57:
99:c2:44:da:7a:3e:40:54:90:d6:4c:66:46:bd:aa:
df:d0:33:05:25:00:ff:5a:75:d7:37:35:df:9d:06:
33:aa:34:2b:0c:f9:c4:1d:e7:3d:23:13:2c:c0:39:
c6:66:50:0d:ee:c8:23:3f:45:20:19:ae:a4:16:cd:
9c:e1:f4:6d:8a:74:8e:fb:46:10:13:e6:e9:f2:2f:
62:09:9c:aa:82:13:41:6b:e7:8c:23:95:1b:0c:4b:
e2:97:9f:cb:2c:a7:30:24:4f:44:9d:6f:e6:ef:cd:
3b:cf:b0:fe:35:05:c5:1e:81:f0:bc:c6:02:e2:02:
59:bf:01:fd:9a:fb:c4:07:a8:cb:16:44:87:55:85:
c0:d2:50:52:ed:d5:bf:92:78:b8:de:74:b6:c3:f0:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:17:52:B4:AC:EF:AD:12:E0:91:67:B5:1F:7F:7E:6C:49:38:10
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e7:3e:e0:7d:5d:83:86:5f:41:c7:43:e8:83:2b:29:e0:30:
6c:15:c5:09:7e:95:24:b6:93:8f:c4:06:b7:8d:4a:e7:3b:02:
bb:69:67:ef:06:a1:e9:9c:35:ae:f7:d0:32:7b:73:7a:2d:18:
28:03:39:31:ad:82:82:59:11:f1:91:eb:35:3e:7e:98:47:48:
42:7b:ad:3c:03:da:e0:1e:61:0e:cb:5c:7b:62:2a:e4:6f:06:
1a:fa:07:cc:00:5e:3e:8a:da:52:8c:45:1b:e3:af:18:33:93:
c0:4c:d3:1a:13:cf:59:f5:cd:8f:74:d8:1f:51:8a:5f:92:05:
65:c8:2d:01:d5:04:26:75:22:99:07:06:90:7a:bc:47:c5:77:
ec:1a:ca:f4:5a:1b:3c:c6:b0:0d:fb:d4:1b:83:97:9b:20:a9:
92:d1:6f:a0:fa:81:eb:62:ff:c0:15:65:76:6d:42:4a:34:2b:
cc:dd:94:da:f2:2a:d1:57:dd:18:9c:47:a8:fa:96:50:45:20:
41:76:c5:e3:73:08:21:67:9b:d8:24:8e:9a:4b:ec:bf:c0:66:
eb:af:b3:d5:dd:24:a7:90:fb:94:1a:33:7d:d2:67:80:a0:8c:
c3:f6:ef:f8:2a:8d:64:7d:9e:cd:56:5c:eb:12:ab:19:8a:f5:
89:a6:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:49 2025 by rpki-client