
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: E2xnjc77srW6JRXmhRTMLSRd3CyeDMDbhuGdZ0S2rjE=
Subject key identifier: A4:25:2D:24:EC:7F:31:24:5F:B9:C9:D2:5F:04:DC:CE:8F:99:1C:FB
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 01987DC0E146787A7DA849BA0AFD44C8BAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 05CB
Signing time: Wed 06 Aug 2025 05:00:49 +0000
Manifest this update: Wed 06 Aug 2025 05:00:49 +0000
Manifest next update: Thu 07 Aug 2025 05:00:49 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: +ph4ASInmjiFqoG+7O3SrRIy6j0iORdClIgszIpNFX8=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:e1:46:78:7a:7d:a8:49:ba:0a:fd:44:c8:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Aug 6 05:00:49 2025 GMT
Not After : Aug 7 05:00:49 2025 GMT
Subject: CN=a4252d24ec7f31245fb9c9d25f04dcce8f991cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:5c:9b:fd:ac:1d:e2:fb:26:7a:76:e1:49:
11:ec:02:5d:4c:bd:b9:11:eb:57:66:bb:f8:5d:07:
f3:cd:02:58:de:70:01:e6:34:38:a1:ac:59:27:4c:
1e:df:8b:f0:5e:56:1f:26:c1:29:0f:be:8d:fe:29:
4d:cc:ff:37:46:6d:ed:5f:29:1e:19:ee:28:bc:c7:
e8:be:d2:6c:d9:2e:53:80:22:5c:42:75:4d:62:9f:
c5:8b:26:42:cb:56:a8:18:ab:f6:d6:b0:f5:13:f7:
17:16:6b:4b:9e:94:5d:cd:57:da:f1:7d:23:30:de:
21:6c:ec:95:59:ed:8f:27:24:6d:93:dc:aa:b3:15:
6b:c7:87:0d:ae:28:23:83:82:b2:89:43:71:86:f8:
2e:d5:25:0c:c9:53:ed:2e:24:ef:43:15:10:10:bd:
50:af:e2:fe:3b:6c:b3:ac:4f:57:51:e0:83:c5:87:
16:9a:1d:24:60:29:84:e2:47:66:06:64:a8:f8:fc:
7b:ab:4f:14:08:bf:50:c0:77:bb:31:da:e0:fc:23:
67:bb:a5:69:d9:40:85:3f:09:ed:04:9e:4b:f1:ae:
68:b3:9d:91:3a:6e:c8:85:4d:02:b2:ed:79:e1:64:
44:2c:a1:81:8c:43:c8:7e:e5:32:2c:b5:86:c0:ae:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:2D:24:EC:7F:31:24:5F:B9:C9:D2:5F:04:DC:CE:8F:99:1C:FB
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:57:e9:54:98:27:c6:c9:6d:1b:d9:9a:ca:38:e8:16:07:
a3:e6:3f:96:63:57:a8:21:84:e0:47:27:94:3c:79:7e:64:71:
63:d6:3c:60:09:d4:db:57:cf:a6:69:dd:94:51:54:55:3b:f4:
dc:ae:38:88:67:f4:db:91:74:63:d6:59:d4:0c:ab:8f:7c:24:
82:70:6f:74:e4:48:d5:a1:fc:58:f5:44:7e:0f:90:c6:6a:b9:
0f:bc:3f:81:73:38:66:97:91:2c:80:35:5a:6b:46:11:50:ff:
23:3e:f4:c5:84:35:37:dd:34:d2:4e:c5:14:ff:ab:f4:23:45:
c7:92:4e:ff:21:44:2f:88:3a:59:90:5b:dd:05:76:20:c3:e4:
ad:d9:3c:96:c0:7a:6e:86:ec:d0:3a:45:75:22:bd:93:0d:62:
e5:ec:f5:96:11:1c:36:96:3a:57:fc:e2:23:bf:68:26:05:34:
fa:1d:c7:49:51:9b:66:46:1f:7b:51:92:fe:c2:85:d7:e1:cf:
ab:35:c4:32:97:77:1b:a0:89:0c:94:7c:5f:8b:49:bb:44:7e:
9e:8e:24:a0:63:2d:1c:7c:96:cf:8c:7c:ca:7c:77:4a:61:56:
29:ad:2a:41:1e:ed:06:43:1a:7b:ed:07:4c:d3:5b:cc:32:aa:
7e:77:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:28 2025 by rpki-client