Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: 811O2kJiiGXGUgqqtRq0do0EAGYM74reGNEIC9Xmn1Y=
Subject key identifier: 4D:3F:72:67:7B:B0:DA:0B:A1:BC:4B:AA:E2:A3:3F:2E:DA:5C:93:69
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 01987306EC4954837E31CB5D592D40FE633B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 1074
Signing time: Mon 04 Aug 2025 03:01:30 +0000
Manifest this update: Mon 04 Aug 2025 03:01:30 +0000
Manifest next update: Tue 05 Aug 2025 03:01:30 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: KimZwsioRfaEcsvxUu2Z5SxIuS8uQBwoPJIWtqkHWvQ=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ec:49:54:83:7e:31:cb:5d:59:2d:40:fe:63:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Aug 4 03:01:30 2025 GMT
Not After : Aug 5 03:01:30 2025 GMT
Subject: CN=4d3f72677bb0da0ba1bc4baae2a33f2eda5c9369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:77:97:c8:1e:e2:c4:9b:34:35:8d:87:74:
64:61:e4:d3:1a:1e:eb:6d:22:18:c3:ec:33:5f:d4:
7c:a3:0a:85:d5:60:f5:7b:a3:0b:18:f0:20:a3:f7:
c5:0b:64:ed:07:84:f5:aa:c2:8e:ea:d8:30:07:f3:
40:77:fc:37:e2:6a:49:9f:39:0b:60:90:9e:4e:fa:
f9:61:14:7a:e0:83:9f:71:55:a9:da:aa:5c:bc:14:
db:e1:d5:8f:f9:ef:e9:8c:53:0b:a6:9f:31:b8:e7:
8a:89:fd:1d:0b:46:b5:49:fe:48:56:87:cd:bc:2d:
e1:db:8f:aa:9a:f9:d7:27:07:84:e4:4b:11:08:56:
42:28:6e:fd:8a:dc:0d:a5:a7:31:26:97:36:54:fd:
c7:03:11:b8:1b:be:cd:f7:37:63:91:a4:6e:8e:2b:
92:99:e4:23:3d:fa:60:6c:32:ec:6b:06:ac:c7:fc:
4e:b7:0e:0e:ca:20:8e:3f:c1:7f:3f:5d:f2:73:f7:
94:7c:67:62:48:10:fb:73:a1:3d:6b:f3:f8:fd:dc:
de:44:a8:98:2b:a4:37:33:a4:61:7d:2a:59:3b:9b:
56:a2:d9:3c:57:4b:18:eb:e8:29:46:aa:e1:06:c3:
38:ba:32:8e:42:03:20:19:f7:21:39:3f:0c:a7:56:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:72:67:7B:B0:DA:0B:A1:BC:4B:AA:E2:A3:3F:2E:DA:5C:93:69
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:60:9e:5c:ff:6b:41:65:d6:66:12:e4:c2:7e:8d:35:ed:0c:
d0:cd:07:9e:87:1f:1c:dc:26:39:37:55:a4:54:3b:d5:8a:b3:
40:2b:7a:6c:5d:59:b1:de:16:e0:90:c9:12:cf:51:25:56:18:
22:6e:35:37:cb:d9:d0:60:5a:65:0d:47:bb:64:48:d8:c1:54:
a4:16:19:89:16:76:e4:68:79:d8:3a:0a:d9:bd:59:92:8b:94:
a9:26:47:79:9a:94:f8:4f:bc:c2:22:43:b7:03:77:24:f8:2c:
b6:3e:f0:a8:30:b0:9e:c3:4a:2a:0a:d9:58:a9:b8:6c:17:77:
c3:f0:91:1f:73:13:5f:10:00:50:68:82:98:76:a8:3d:16:e2:
44:81:bf:fb:5b:1a:3e:07:d2:35:13:e6:59:06:57:c7:29:1c:
b4:85:75:e6:d7:17:2f:5a:75:69:00:ba:11:89:77:ce:4e:0b:
f2:55:11:46:33:f4:97:df:23:dd:fb:78:23:6c:cc:a8:ed:30:
1c:f0:19:1e:21:6a:f5:2f:a3:84:93:60:11:98:7e:f3:b2:b9:
91:fc:2e:40:7d:78:8c:c7:50:50:89:c4:74:5c:7d:d6:8a:01:
cb:cc:b2:77:23:f0:51:64:90:43:57:bc:0a:85:24:08:29:7f:
12:87:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:29 2025 by rpki-client