Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
File: 2KVuLWOsXam-012gHL-tIl8EvrA.mft (raw, json)
Hash identifier: qJdn1cQ1CrVli6bKYaYhGXg3aIRf8gSlga6aPHJukdM=
Subject key identifier: A1:53:1F:79:0E:EB:EF:1F:6C:DD:5E:6B:2B:B2:1C:37:3A:23:FE:CD
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 01988DA19289B310D4678B3A18242E2D51E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 07:00:32 +0000
Manifest this update: Sat 09 Aug 2025 07:00:32 +0000
Manifest next update: Sun 10 Aug 2025 07:00:32 +0000
Files and hashes: 1: 2KVuLWOsXam-012gHL-tIl8EvrA.crl (hash: GZBktuMqFc7mud83NEIw23WMvKtBdG77kCAELrx37RM=)
2: RCebozhiTcCblvotMpWCdCJ1ob8.roa (hash: ZFZoBEoVJHz2x12TIIxXed5WibUd/7/bBstI8X2ocJo=)
3: nQS504JwOxjiWHwncxw2UXqZAyw.roa (hash: 3N4RSXWIhF3ipth4gfwK0f71CjoGPMdi4/hqfhot2X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:92:89:b3:10:d4:67:8b:3a:18:24:2e:2d:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Aug 9 07:00:32 2025 GMT
Not After : Aug 10 07:00:32 2025 GMT
Subject: CN=a1531f790eebef1f6cdd5e6b2bb21c373a23fecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:e8:12:39:f3:b4:d3:34:2c:52:fd:7c:b3:
b5:02:44:88:fc:2e:13:c1:b5:10:18:df:6f:55:6a:
29:27:f2:2c:b9:3d:cc:73:2c:99:92:5e:78:0c:13:
a7:76:14:38:05:fc:2d:95:15:1d:cf:7c:52:97:9e:
cf:08:dc:51:8c:45:9a:03:bb:0f:81:bc:54:80:b2:
97:91:71:f0:dc:1e:10:c0:31:d9:a4:10:a5:3f:a1:
13:bd:eb:d2:20:fd:34:63:76:da:50:dc:e4:6e:63:
ce:03:ba:e9:bc:01:37:ef:50:d3:0a:ac:87:45:8e:
23:ff:9d:27:0d:e9:1b:9e:96:ee:fe:d6:12:5b:25:
02:b3:5b:d5:1e:ae:35:5e:a1:b2:40:2e:d3:5e:58:
98:78:54:34:13:ec:ce:43:15:e6:f8:b3:ad:e9:a0:
b2:d5:93:68:e1:ad:f9:8a:f7:5a:2f:67:9e:e9:5f:
be:7e:fa:b2:e4:92:bd:39:82:77:bd:6f:42:f3:23:
f7:09:8f:07:2e:fc:a3:32:53:4a:41:d0:be:6c:78:
58:d1:3e:d8:36:08:e8:99:25:e2:f6:ef:b8:ec:cd:
90:e6:ab:81:4d:94:87:02:d8:b4:84:9e:f9:76:c0:
b0:a0:3d:f4:e5:f0:23:ba:71:b8:4a:4c:08:d7:07:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:1F:79:0E:EB:EF:1F:6C:DD:5E:6B:2B:B2:1C:37:3A:23:FE:CD
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4a:06:1b:65:7f:ce:5f:99:03:ca:2e:2b:a0:b8:63:9c:b9:
ca:f5:b3:a9:c5:d9:4a:22:6a:02:6a:39:ad:6b:58:79:4d:4f:
1b:69:62:bd:96:eb:cf:5d:a0:9c:61:58:96:03:4c:78:15:f4:
1b:8b:ec:2f:3c:a0:1c:aa:ab:56:e7:cd:6c:a2:79:22:78:83:
f0:c7:81:61:ba:3c:f6:f4:5b:8d:62:af:03:18:e8:7d:cc:07:
11:ba:b5:da:fd:36:17:04:08:49:92:6e:a0:df:b6:ac:72:ca:
da:0b:a3:72:25:b4:f2:80:6c:dd:1a:81:c9:cb:f8:72:05:2c:
96:69:a0:a5:70:e4:99:1a:c7:5f:3c:d5:87:63:04:38:86:9f:
69:32:ae:c8:c6:5c:aa:b5:e7:10:d0:db:ee:69:34:35:24:ec:
1a:e5:fb:32:29:6b:ee:db:49:8b:a9:de:7a:c0:4d:92:5b:8a:
f7:63:b8:31:38:1c:2e:63:67:24:35:ce:60:a8:ed:0e:1a:ea:
4c:30:ef:2f:c3:a5:0a:fb:ce:2f:cf:ec:43:71:18:f4:c5:9d:
15:96:81:a0:81:a9:34:6f:07:ea:50:7e:f9:dd:01:37:d1:b5:
71:a1:5a:9f:59:2d:47:fd:8a:27:5e:13:66:f3:f7:5c:3b:42:
65:33:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:39 2025 by rpki-client