Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: 5JqKFHfKJrkWUr6yAYjquVboBOfF2+Fhj6B/R4M1qxs=
Subject key identifier: 8B:9F:5C:92:19:A7:A1:0C:28:48:8C:89:BF:0B:BB:B5:C6:0A:19:D4
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 01987DC0BD2410D1AAA710AADEC79354F6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 05:00:39 +0000
Manifest this update: Wed 06 Aug 2025 05:00:39 +0000
Manifest next update: Thu 07 Aug 2025 05:00:39 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: PzPoTr8D9WOMsv7dpA0bd1mcavVL76PUCPg3Brkyo0k=)
2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:bd:24:10:d1:aa:a7:10:aa:de:c7:93:54:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Aug 6 05:00:39 2025 GMT
Not After : Aug 7 05:00:39 2025 GMT
Subject: CN=8b9f5c9219a7a10c28488c89bf0bbbb5c60a19d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:42:70:b3:71:7e:5c:c5:6f:7e:2f:e0:60:
1f:ce:22:49:1b:40:db:aa:93:4c:8e:be:59:11:ec:
fe:67:3b:2d:70:8b:71:59:b1:46:07:2f:65:26:40:
61:4f:0b:b4:c3:e2:76:6c:86:3a:b5:85:55:22:45:
00:64:27:b8:01:24:75:07:21:2e:97:41:c4:9c:71:
70:60:05:66:43:fe:ed:a3:28:52:6d:d5:05:d0:70:
da:7a:d1:fe:19:b2:cc:bd:d2:c8:0d:e7:96:d7:d8:
b7:c2:39:fb:04:14:83:fa:c9:0c:6e:20:a4:18:d8:
31:13:8a:9d:70:d7:5c:cb:44:70:88:83:02:2a:75:
86:b9:85:e4:da:4a:9a:c5:5c:a0:27:e2:ee:bf:4a:
f3:1f:d1:0b:91:c8:24:2e:ca:d6:91:e3:b3:0d:3d:
42:c8:51:e6:27:04:df:d0:f3:59:a1:25:8b:90:53:
5b:b4:fc:bc:db:57:df:78:4f:51:17:52:ca:ec:04:
7a:c7:ea:ed:76:c0:1a:51:17:e9:35:00:4d:c1:d4:
80:85:46:a5:c9:e4:cf:9e:b0:14:42:28:a8:b9:ab:
d6:2e:81:e4:2f:d4:a2:92:05:f5:95:c9:cf:f1:2c:
54:4b:65:ae:92:68:36:9b:c8:06:f1:69:51:f8:80:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:5C:92:19:A7:A1:0C:28:48:8C:89:BF:0B:BB:B5:C6:0A:19:D4
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d7:a9:9e:5a:fe:f8:f6:2f:24:bf:f2:4b:31:5e:72:73:18:
4b:73:dc:50:09:f2:aa:03:07:48:e1:45:de:25:f8:d1:a6:e8:
9d:17:4d:51:d8:d6:f7:a6:0a:81:7a:d2:cf:44:4e:45:03:40:
ce:c9:90:65:2a:f4:42:30:52:00:ad:54:25:97:6c:c0:f9:59:
14:43:06:0f:11:cb:ab:be:8d:8a:48:e6:23:1d:fe:16:09:18:
7b:f6:63:1c:f7:c9:2c:fc:ae:20:9b:26:f2:bb:3d:8a:9b:4b:
43:0a:b3:43:89:03:f4:63:57:dd:f9:cd:e6:b6:19:0b:54:9c:
93:a1:d0:09:80:25:c7:b5:d8:4f:c4:81:7f:9a:bb:8c:c7:0d:
69:76:5a:02:d2:3b:03:d4:f2:46:e7:84:bb:80:57:48:8a:85:
cd:a2:02:29:e2:cd:f0:a7:4f:2e:88:47:41:4f:29:0c:bd:ce:
ca:6e:5b:d2:e0:eb:c3:a9:bf:b2:53:9e:a3:fb:c3:47:c9:d6:
3d:df:52:5f:b3:09:46:11:65:22:7c:f4:4a:03:3b:de:54:ac:
8b:d3:e0:d3:02:e9:27:75:c7:4b:fa:eb:f7:ce:7b:b1:92:8a:
76:d4:2a:29:ae:dd:ce:b4:01:99:f8:19:d1:25:a1:c0:2d:0e:
a2:9d:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:17 2025 by rpki-client