Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: h/6Nd8y5uzZzFSJhudiyUoANEWolaz+OgzJpFBXqA90=
Subject key identifier: E9:30:09:26:25:56:C1:B4:90:00:2C:60:79:63:F4:54:C4:F6:44:AD
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019887D678204E11320D10659406FB5BEF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 10FD
Signing time: Fri 08 Aug 2025 04:00:36 +0000
Manifest this update: Fri 08 Aug 2025 04:00:36 +0000
Manifest next update: Sat 09 Aug 2025 04:00:36 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: 6G14PssQSDxKFRE7DUg/ut41g8RJA/FjgmmiIjiRVv0=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:78:20:4e:11:32:0d:10:65:94:06:fb:5b:ef:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Aug 8 04:00:36 2025 GMT
Not After : Aug 9 04:00:36 2025 GMT
Subject: CN=e93009262556c1b490002c607963f454c4f644ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:4f:9b:1a:ec:84:fb:67:e7:1f:eb:f2:c4:
67:a9:93:a9:63:30:8a:84:6f:a1:0d:2e:fc:d7:7b:
9f:36:4a:b0:98:ac:af:cc:34:9e:4c:6e:85:ad:8c:
c3:7e:08:a7:e5:7d:2f:82:98:a3:31:05:ca:50:b1:
35:ef:14:74:10:f3:2a:b0:f5:9c:87:56:8d:d0:4b:
47:2f:80:5b:cb:a5:9d:4c:6d:a4:08:dd:82:0a:f4:
44:0f:78:2f:cc:9f:2c:8e:d2:ae:57:03:23:8b:7c:
2e:dc:20:41:a5:51:19:1a:c1:cc:92:aa:fa:a7:96:
f4:39:e8:26:5f:8e:57:35:61:dc:e8:2e:bd:bb:8e:
5e:02:53:3a:da:0e:30:7f:66:01:fe:0e:70:ac:64:
44:99:12:b6:b6:d0:7a:8b:49:5d:6c:07:f4:51:97:
56:06:d2:93:d8:5b:0e:1c:58:8f:b0:ef:03:2b:33:
ac:40:18:b5:51:60:2c:19:8a:ba:0a:f8:cd:33:a4:
27:41:f8:93:31:4d:cf:ca:76:72:15:c6:45:de:1b:
4a:c8:57:9a:2e:e7:3a:03:65:60:d7:a9:28:10:ab:
a2:f9:d0:19:e0:c5:0c:ac:f2:76:d9:4c:ea:b5:a6:
b7:1c:8a:84:ef:17:a3:df:19:f9:f3:aa:e4:b9:be:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:09:26:25:56:C1:B4:90:00:2C:60:79:63:F4:54:C4:F6:44:AD
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:94:13:a4:df:0e:f6:05:9d:b7:82:90:60:0c:56:d8:62:df:
f5:32:27:06:55:5a:a9:d2:61:c0:58:15:bc:72:d1:82:f3:68:
db:a9:fd:ee:f5:1e:ac:8f:4b:49:15:d3:4a:c1:c1:1e:e4:64:
5c:6f:0f:29:fc:6a:5b:28:75:8c:c4:cb:0b:ce:d8:a2:29:52:
48:43:c7:e9:24:a1:e2:5f:b2:f1:c4:15:a6:85:01:35:28:98:
a0:b1:34:be:12:92:a5:32:0a:a6:a3:2d:7e:41:6a:96:d1:23:
58:3e:f9:fc:2b:6a:47:a4:dc:cf:4c:0a:34:29:80:23:bf:2f:
8e:49:78:40:84:d4:a1:cf:cc:49:4f:80:9a:1e:e3:81:1f:b3:
8b:5b:11:95:e8:76:b3:1d:9b:07:68:c4:73:d5:4f:ed:c0:43:
09:f3:68:f1:e3:6e:74:16:4b:24:cd:72:d9:0c:ef:1e:ed:73:
c4:05:2d:7c:4a:11:55:94:23:21:72:45:cf:b9:db:ea:44:1c:
ed:98:3d:a1:c3:d2:f0:f7:99:1b:76:f5:51:f5:e2:88:67:6e:
89:ec:98:52:a8:3c:87:0a:0e:91:1e:d0:05:c8:9c:74:d9:e2:
de:30:6c:63:21:08:07:ad:62:c6:c1:e4:a9:fb:e4:9b:f5:e2:
ce:20:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:54 2025 by rpki-client