Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: PITOOylTmYsJjKZS87whKAaqjjR3yExN+A2ZXyC9g5w=
Subject key identifier: BF:2F:E2:E1:3C:1C:B7:39:9B:B9:5F:B4:9B:54:96:24:97:06:93:F5
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 019883567790EDB820F8C7326A162F8B8852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 085B
Signing time: Thu 07 Aug 2025 07:02:18 +0000
Manifest this update: Thu 07 Aug 2025 07:02:18 +0000
Manifest next update: Fri 08 Aug 2025 07:02:18 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: LGRXK97fewSw8QhBet3yOqyiLOuxGFbPdwPAD5XLUr4=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:77:90:ed:b8:20:f8:c7:32:6a:16:2f:8b:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Aug 7 07:02:18 2025 GMT
Not After : Aug 8 07:02:18 2025 GMT
Subject: CN=bf2fe2e13c1cb7399bb95fb49b549624970693f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:0b:53:da:b9:24:c3:ac:03:96:69:a1:22:
e5:a1:a7:c3:03:18:ad:19:f2:dd:86:1e:fc:20:93:
a7:2b:74:3c:3c:41:a0:57:82:ce:64:32:a8:06:8d:
23:80:ec:67:94:5c:2c:0b:74:a0:c0:55:b4:d7:fa:
8c:b8:a9:7d:ce:7f:79:ee:93:aa:2c:e9:55:75:9f:
e1:19:45:10:41:2e:51:1e:7d:2f:38:f9:c5:ae:77:
5a:1a:14:5a:a1:fb:fa:0f:c2:99:09:b3:69:94:89:
76:92:1d:b3:31:32:9f:8e:f6:a8:c4:e1:bb:af:7d:
c4:98:96:14:6c:ab:b0:63:cf:75:a4:3e:4e:77:76:
c1:cc:4a:0b:13:13:05:6c:b9:c4:7f:c8:7b:c8:c3:
e9:fa:df:2d:a0:29:bb:5a:74:d9:66:be:a2:1f:14:
47:1f:f2:a5:ab:27:c7:19:eb:95:96:ca:98:46:63:
24:00:e0:1b:ab:75:6c:6a:ee:52:d2:20:7a:94:26:
9e:33:e2:03:52:7e:75:6b:16:ea:1b:ae:24:ea:fa:
d4:6e:cf:c3:68:df:93:42:c3:b5:03:26:82:44:b5:
e7:ad:cd:d2:de:70:4d:27:10:3f:f7:c1:be:c9:d4:
90:04:1d:2c:d2:37:53:88:42:c8:bf:f4:14:f5:02:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:E2:E1:3C:1C:B7:39:9B:B9:5F:B4:9B:54:96:24:97:06:93:F5
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5f:f4:9a:cd:16:d0:b7:cc:73:f8:a5:cc:a8:b3:a9:44:0e:
96:94:a6:7b:e9:05:11:c4:2f:0c:a5:f8:36:a8:78:67:ed:28:
1a:47:7a:9e:2f:63:a7:26:24:be:ee:20:31:cb:2a:05:2b:f3:
89:42:5c:7f:84:63:bd:70:cb:35:23:2b:fe:f3:6b:1f:23:be:
02:3a:bc:c4:f2:74:48:17:24:88:b3:b5:14:71:a8:89:3c:96:
0d:b3:46:ca:4c:41:58:5c:20:19:bc:ec:9c:c6:85:45:c1:9e:
52:26:fd:0b:3a:2f:40:c0:ee:f4:08:36:38:4f:a5:e9:03:db:
90:3e:df:e4:6e:9c:73:45:07:ea:d2:87:0a:03:7e:a4:14:50:
24:0f:c0:65:a3:1b:21:55:c2:17:32:2d:6e:69:19:c4:71:99:
aa:2c:e3:c6:6e:89:4d:b8:e0:de:32:58:2f:a8:0c:5b:c9:bc:
6d:ea:a0:22:1c:88:7a:5b:68:96:29:ee:96:3b:4d:b4:2f:96:
7b:7c:fc:1d:9f:bb:ff:e9:a6:ca:75:53:b1:4a:2e:11:c4:a9:
85:c0:8d:99:cd:3a:a3:ce:87:94:10:bf:22:8c:d7:de:53:74:
93:ac:93:68:3e:e2:b1:f9:4b:15:8d:58:15:67:b1:fa:b2:79:
17:b6:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:20 2025 by rpki-client