Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: HsMQLccyfntktJJn2nvDQqtjAkuzH2tzQtdto82qqBY=
Subject key identifier: BD:B0:06:FD:42:5D:50:26:54:01:8B:46:65:8A:83:B9:52:1B:09:0A
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 01987C77241D7E0A71142920708A07A1B217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 14E4
Signing time: Tue 05 Aug 2025 23:00:39 +0000
Manifest this update: Tue 05 Aug 2025 23:00:39 +0000
Manifest next update: Wed 06 Aug 2025 23:00:39 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: M0L1ze5mglXsLNGozSvg8DU0ro4C+P+tGK/x0pWyLcc=)
2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:24:1d:7e:0a:71:14:29:20:70:8a:07:a1:b2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Aug 5 23:00:39 2025 GMT
Not After : Aug 6 23:00:39 2025 GMT
Subject: CN=bdb006fd425d502654018b46658a83b9521b090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:6f:07:c5:19:b6:5d:4f:19:55:bb:aa:a8:
89:9a:5e:c2:ea:65:17:6a:28:68:a0:7a:84:b4:67:
28:4d:2b:24:b1:03:78:c7:a0:1b:66:ac:1b:a9:7d:
11:73:01:cb:c5:2b:09:f3:2b:f7:f4:d1:62:64:13:
7b:b9:12:21:bb:61:41:02:7f:b9:79:5b:be:d0:72:
ba:6d:d2:a6:50:41:ff:d0:96:26:77:dc:cd:a9:e5:
02:d3:1b:cf:e7:19:18:5a:9d:0a:ff:71:63:8a:fa:
98:b6:40:a6:59:2a:64:e8:b8:40:e0:a4:74:55:39:
2f:6c:90:8d:a9:d5:19:44:9f:9b:2f:c3:37:f7:5e:
06:38:6e:88:5d:af:d6:db:04:49:13:c1:f4:29:9e:
59:75:2d:4c:7a:2a:cf:77:b3:6e:38:8a:33:f7:b0:
d1:77:57:63:62:e8:23:e1:46:27:11:db:1d:cb:72:
46:2c:d6:42:ef:b7:f8:46:b4:5c:3c:0e:af:e1:8f:
b9:5c:97:6a:ad:d7:ad:be:e8:0e:fa:a6:a9:69:3f:
96:2b:0e:0e:fe:a6:7b:1c:fc:cb:8c:9e:73:ae:9d:
35:9f:a0:b1:f7:d3:5a:a0:dc:2a:4a:01:bd:24:6b:
ac:13:02:29:9c:11:0b:e0:89:96:21:b7:6e:6d:80:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:06:FD:42:5D:50:26:54:01:8B:46:65:8A:83:B9:52:1B:09:0A
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:78:38:b9:36:39:3b:f5:2f:53:b5:17:0a:45:09:22:de:39:
6e:36:61:6c:47:7e:a7:53:25:b9:a2:60:94:ac:eb:93:fd:f4:
26:78:fd:c2:e5:cd:d3:a5:de:0d:e0:7c:bc:6f:88:fc:60:42:
41:d1:e2:77:54:55:ea:9c:cf:c4:22:cc:2a:cc:52:f1:71:de:
52:fb:06:39:6e:67:b5:79:58:b4:99:e4:6f:48:00:34:b6:e6:
00:38:b6:21:31:42:d0:9a:b8:83:5d:1c:ed:2b:6d:68:5d:0e:
90:07:d4:62:b0:80:40:5c:0f:93:20:16:09:d7:81:8a:98:62:
59:62:99:b7:ef:bb:72:b8:7d:ee:f7:3c:7b:8b:e4:54:42:67:
f5:05:ba:dc:f1:d6:6e:26:da:98:28:d6:c2:be:a1:e9:47:16:
a0:71:26:bc:2b:5e:65:78:cc:ca:e6:20:4b:49:6b:4a:b2:dd:
d2:29:7f:2e:3b:70:03:3c:63:fb:6e:d8:7b:66:d9:65:0c:26:
b2:7b:05:ad:c2:67:a8:97:ee:3a:4d:49:fe:02:76:20:67:df:
e0:5f:ef:70:7a:7e:f7:cc:47:71:36:f1:a5:78:99:30:e8:90:
f4:42:ed:e2:fd:c0:bb:1b:6e:11:56:8d:f2:c9:1f:ff:2c:32:
81:b9:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:49 2025 by rpki-client