Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: VNdVyYejswYDzhMW4JRCvb9crU9FSf8kYmfO5WW2w50=
Subject key identifier: 70:6A:88:E9:23:3D:8B:EB:AB:73:59:A1:00:54:56:D3:A3:F6:B8:58
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019894ED8437DA19740B29873C958E7B94CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 17:00:50 +0000
Manifest this update: Sun 10 Aug 2025 17:00:50 +0000
Manifest next update: Mon 11 Aug 2025 17:00:50 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: FpBUUq5U+UrW2bu3Ei3ShejxglzSHqEqNEoM+/WabAU=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:84:37:da:19:74:0b:29:87:3c:95:8e:7b:94:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Aug 10 17:00:50 2025 GMT
Not After : Aug 11 17:00:50 2025 GMT
Subject: CN=706a88e9233d8bebab7359a1005456d3a3f6b858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:ea:de:35:d7:ce:ca:eb:59:6c:f6:78:23:
28:05:03:6b:0c:05:ae:fd:29:55:ea:ae:5e:7d:59:
04:10:f2:24:d7:af:88:ad:92:30:44:30:4f:f4:e5:
a8:cf:db:21:a5:04:4b:79:48:0c:34:25:1a:f4:ab:
d6:cf:41:54:9e:37:cf:17:49:f2:84:10:05:c1:19:
02:f2:98:7a:52:07:87:4d:73:b4:6b:7f:5a:a7:f1:
0a:6b:f5:3a:3a:0b:b9:cc:43:6a:6b:a7:68:74:40:
a1:ae:7f:4d:e3:8e:0c:b3:38:c5:ba:5a:74:67:ca:
52:42:09:5d:71:d4:d9:4b:3d:25:1d:51:d3:01:04:
80:12:13:66:ab:cf:ce:48:4c:65:89:72:c6:25:ac:
45:95:d2:de:cf:7d:ee:73:10:0b:de:63:97:92:53:
68:5a:0f:b2:4f:fb:df:83:66:7e:90:1c:29:5c:25:
59:7a:8c:01:fe:64:02:77:92:e6:b8:4c:d1:1b:54:
a1:e0:a1:e6:a9:04:de:5f:4e:93:10:dc:56:ca:cd:
fb:13:1e:6c:10:6a:e3:86:a2:6a:13:f0:d2:2f:e4:
fc:2b:24:80:de:14:a8:ca:88:8b:d8:e1:61:d3:2e:
a2:cf:ee:21:2c:89:55:fb:73:f2:a2:6f:9e:ba:fd:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:88:E9:23:3D:8B:EB:AB:73:59:A1:00:54:56:D3:A3:F6:B8:58
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b5:97:1b:2a:43:51:4c:07:f8:9d:7e:5a:11:2b:a6:30:44:
ae:93:6c:be:74:ef:98:f6:dd:c4:cb:36:dd:d0:23:2b:ba:34:
09:4a:fb:31:84:c9:c3:6b:41:1a:df:cc:7a:d1:0a:6a:43:2d:
cd:d9:fc:0a:93:5c:4d:de:39:b7:24:a8:af:c7:90:88:11:28:
54:4c:42:f7:01:d9:4d:82:22:23:e4:4e:ef:f8:91:88:8f:ec:
6d:a3:a4:35:ae:ed:63:0c:af:a4:18:83:43:21:76:bf:27:9e:
44:61:1d:a4:0a:fb:1b:f8:7c:e4:96:89:e2:7c:3e:31:ad:c6:
ee:d4:70:24:5e:72:6e:ad:09:2b:39:ed:ec:30:16:13:34:a7:
81:a3:bd:da:6d:14:ed:44:ff:ef:2b:1b:e1:0d:ed:5c:3e:67:
56:e4:6c:f8:f6:81:11:02:92:ea:4f:f1:cc:d7:60:09:63:d3:
61:15:59:85:0e:db:41:d2:97:08:95:d0:f0:ab:f3:4d:68:4e:
51:a1:3a:9e:b7:16:85:c5:37:6e:93:3e:d4:a7:c6:66:10:e1:
a8:4f:04:44:63:90:8b:21:6c:1b:7e:67:f4:8d:bc:9a:a7:3a:
3c:75:5b:ea:06:0d:68:56:b6:d0:2f:87:dd:95:a4:2e:16:74:
74:17:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:19:43 2025 by rpki-client