Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: AHuvq3CnDqOWBIPVUjVA4i86fftwwZYT3Mw7+hKwE0k=
Subject key identifier: C7:64:C2:84:66:93:66:52:41:4B:7E:B0:A9:22:74:BB:54:BF:68:6B
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 0198835702DD4642077E7FB4C835D7190F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 0AAC
Signing time: Thu 07 Aug 2025 07:02:54 +0000
Manifest this update: Thu 07 Aug 2025 07:02:54 +0000
Manifest next update: Fri 08 Aug 2025 07:02:54 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: eeKRDMchTEr27LpJVLleJ1vDqeDtlmtguVHxFnkEIpU=)
2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:02:dd:46:42:07:7e:7f:b4:c8:35:d7:19:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Aug 7 07:02:54 2025 GMT
Not After : Aug 8 07:02:54 2025 GMT
Subject: CN=c764c28466936652414b7eb0a92274bb54bf686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:c0:cc:b3:0a:5d:90:16:dd:70:5c:32:48:
34:a1:71:30:e7:4f:6e:df:17:c1:c9:54:e5:2f:21:
f9:d3:8e:12:ca:02:75:35:16:67:74:60:24:2b:89:
b1:1b:f4:cd:0f:2a:7c:64:0c:9d:fb:26:7c:10:3f:
a5:16:90:7e:22:e9:20:ba:65:50:ba:86:2f:ba:fd:
a9:1b:9b:6f:df:bc:31:dc:06:29:ba:66:9b:3d:d9:
73:96:02:2f:61:bd:a3:f4:2f:0d:2c:56:9f:16:a3:
e1:c1:04:93:05:64:32:83:9b:ae:73:f1:08:88:98:
b4:51:ba:3d:ac:26:b9:11:ca:a4:b6:9a:18:97:04:
95:a4:c6:59:17:ef:97:ec:03:bc:60:d3:aa:b8:a6:
be:55:c6:6f:63:12:85:37:83:30:82:81:34:42:09:
1e:26:a1:56:fa:0e:81:b6:35:fd:76:8d:ce:2f:80:
93:1e:f4:d2:b2:c6:81:fc:63:48:80:12:2e:cb:56:
d3:3e:18:e2:b1:4c:e0:af:4c:19:4b:e0:1e:85:0b:
b5:16:48:6e:8c:a3:4f:b0:68:9e:51:0a:ad:4d:22:
3a:45:a8:94:13:f3:1e:28:54:9d:69:a1:5f:72:a6:
2f:a8:b9:03:4f:0a:d2:6c:0b:11:93:0f:66:46:71:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:C2:84:66:93:66:52:41:4B:7E:B0:A9:22:74:BB:54:BF:68:6B
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fb:1d:3d:a9:03:73:99:c4:95:bc:ae:07:fd:2d:ba:33:b9:
ac:b0:e7:52:28:cf:00:28:1e:a5:48:48:42:56:a9:4b:b7:1d:
31:93:11:61:ba:e0:58:5d:d3:86:9c:2b:d3:0c:3d:ff:69:78:
38:8c:43:8d:ca:de:e4:89:3a:79:e2:84:54:38:a4:b4:ea:e0:
d1:fa:4c:a0:0f:4f:b5:5a:23:a8:52:23:ee:be:b3:6e:fb:4d:
f8:18:ac:0e:71:81:30:c4:9d:71:e2:72:5e:18:54:a5:ad:1e:
e1:46:79:5f:ce:6a:f5:ce:19:87:45:da:d7:fa:47:60:e3:d3:
bb:f7:f7:45:ad:92:49:04:36:3a:c3:22:0b:22:3c:2e:c6:03:
1f:21:91:ba:18:c3:c7:03:a8:f6:cc:68:d3:1c:f0:30:c3:2a:
cd:27:04:56:ed:e0:8e:ee:6d:25:f9:e0:d7:da:26:6d:04:08:
03:90:95:88:34:08:e8:42:d4:ca:db:54:63:ac:3b:5c:24:d6:
1d:3c:52:0c:e7:33:f6:ff:11:44:2f:33:ac:9d:44:41:54:ad:
89:47:11:71:07:c6:13:1f:04:01:a9:76:d5:be:e4:35:c3:c1:
f7:ec:e5:45:6d:0b:84:0c:fe:28:8e:2c:c7:28:36:ce:24:c6:
55:19:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:50 2025 by rpki-client