Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: XKLJqXU/vgwJ1jgAwS9VfOW4r5qCpBaAGOws37BlyAY=
Subject key identifier: 03:E2:DE:0A:14:6D:5E:99:72:2A:B9:E7:3A:D7:4E:13:58:A6:58:22
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 01987486840C3AE23DB2C715416DE4B43A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 10:00:29 +0000
Manifest this update: Mon 04 Aug 2025 10:00:29 +0000
Manifest next update: Tue 05 Aug 2025 10:00:29 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: MZn759IyI+N4YpmhhMKL9dtO+PTnmG0VLKD1yI9wGJ8=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:84:0c:3a:e2:3d:b2:c7:15:41:6d:e4:b4:3a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Aug 4 10:00:29 2025 GMT
Not After : Aug 5 10:00:29 2025 GMT
Subject: CN=03e2de0a146d5e99722ab9e73ad74e1358a65822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:70:be:24:93:6d:b4:4c:7f:80:e8:14:b8:
a8:fc:3a:2c:ac:b3:e7:dc:bb:e5:37:a5:96:eb:5b:
c4:a8:dc:3c:18:7f:3b:04:78:28:3e:ca:1c:34:3c:
03:1d:a7:6d:a1:1d:d4:b4:8d:80:30:2d:5d:2a:7d:
26:cd:27:07:9a:8a:4d:6a:6e:34:c6:6e:84:5f:48:
50:d0:b3:11:03:15:48:b5:dd:d1:59:76:7d:bf:4e:
0c:08:fe:be:76:92:43:8f:d9:a5:c9:a3:5a:b7:8d:
76:e1:d6:29:43:b7:ed:8c:15:e2:16:e6:f7:e0:f3:
0e:45:74:2f:82:30:da:a3:8c:66:a3:d6:1f:4d:9a:
c8:93:58:b3:36:bf:ac:e9:63:b7:ad:a5:e3:9b:5c:
9e:41:fc:f9:f6:2e:47:ed:22:da:de:2c:f6:d0:cb:
32:47:1f:6e:e0:46:51:db:21:d4:16:28:7d:da:07:
4b:7f:1a:22:09:28:c3:87:57:06:fe:87:06:f7:d8:
1a:66:50:54:cc:9c:69:23:ed:f8:25:b8:e6:8d:6f:
5f:b2:eb:1c:22:f0:7a:f1:6a:0f:be:ab:96:bd:bd:
87:a7:53:9c:ad:6a:ff:d1:17:f5:59:d4:b9:45:93:
c2:63:7d:1f:41:80:3d:b7:ea:8c:cf:d3:2d:29:3d:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:DE:0A:14:6D:5E:99:72:2A:B9:E7:3A:D7:4E:13:58:A6:58:22
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:35:3b:ce:cd:83:67:ad:a3:b7:a6:67:e1:97:ee:a1:77:98:
36:27:b7:84:2d:c9:34:f2:fb:7e:e3:e1:1d:fa:89:7c:97:1e:
ae:aa:95:c5:88:49:95:34:f6:77:3a:67:af:80:1c:9a:d1:19:
f0:e8:75:d4:09:be:a6:09:6c:31:b2:b2:f9:82:10:3e:46:b0:
41:d6:1c:ee:33:4d:86:eb:ac:fb:58:90:b7:61:75:65:81:33:
82:eb:1f:ba:8b:70:1d:eb:50:90:da:3d:0a:af:24:f7:cb:ad:
b1:2e:78:c2:18:c7:3c:55:a2:53:f9:4d:2d:8b:41:44:39:58:
09:7f:f3:bd:9f:06:d2:2d:2e:35:31:de:f4:24:d7:66:b8:7f:
b5:5c:3a:4c:c2:a0:8b:d1:82:be:37:03:93:26:f1:e4:6c:b4:
47:cb:1a:6f:8e:5f:4a:c5:ce:02:e5:20:b5:58:a9:3a:c3:80:
49:5d:2c:e8:36:4a:d7:fb:89:8a:68:1c:af:23:ef:af:27:cf:
ab:02:db:4a:d0:8c:34:28:6d:05:d9:39:46:d2:99:ff:af:cd:
bd:c8:22:bf:98:1d:c0:00:41:91:27:87:87:1a:cf:82:17:0f:
48:16:cb:70:57:e9:4e:7f:d5:a0:bd:53:53:7d:dd:a6:87:6a:
c7:3e:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:39 2025 by rpki-client