Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: SotX1590HoxQYfC9ROZ85kP4edkz1eVDNkIlk+k9jAo=
Subject key identifier: 27:F2:80:F4:FE:C3:DB:8E:47:88:6B:44:CD:BE:55:C0:68:A0:58:27
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 01987306A02437500E7985DFA945D10957CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 0196
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: htaGnsuszmxnOq/SP2LyCrWKnRXFED372+8WvUVHioM=)
2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a0:24:37:50:0e:79:85:df:a9:45:d1:09:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=27f280f4fec3db8e47886b44cdbe55c068a05827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:0e:ee:e5:65:29:15:17:4b:59:e5:fe:4d:
e1:4a:ed:02:6a:58:cc:5d:1d:ce:16:44:19:dd:25:
60:1e:d2:12:59:19:fb:08:df:da:4f:61:4f:33:e7:
b8:de:34:6f:ad:f7:ba:d6:ca:97:8c:db:2a:47:97:
0d:12:e7:31:93:5a:f2:4f:3d:5b:c1:58:75:72:96:
55:6f:9a:25:7e:99:4f:0a:40:bc:99:05:2a:fd:f4:
61:ca:02:6d:f2:aa:c1:74:e2:9c:f1:4c:22:4f:d7:
05:29:25:d5:d8:cc:ea:c6:e2:82:d5:bd:62:f8:ae:
02:2d:03:f4:55:65:26:ca:e2:c6:83:cb:aa:0e:df:
d8:13:14:f1:bd:57:29:f8:76:29:d6:96:0b:31:41:
d6:7e:70:c7:cc:45:aa:27:79:14:ec:fc:2b:e3:44:
2d:a6:fd:6a:36:26:be:0b:3f:ed:f0:e6:37:b0:0f:
33:72:47:09:03:bc:51:28:50:a2:6b:51:9c:80:75:
f0:7b:80:6f:28:f6:f0:78:3d:10:f7:93:1b:83:0f:
2e:75:b1:e2:39:eb:22:4c:cb:de:76:ef:0a:bc:43:
13:e6:57:09:53:60:95:17:44:2d:76:f7:97:44:be:
50:95:b7:9d:c0:9e:38:ba:11:2e:e3:bb:8e:50:74:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:80:F4:FE:C3:DB:8E:47:88:6B:44:CD:BE:55:C0:68:A0:58:27
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:07:0b:98:68:3f:b9:d2:a0:1b:4d:6f:d1:3b:2f:1f:23:a0:
87:fc:db:e9:8d:fe:18:94:46:dd:86:c6:41:bd:f3:d2:65:cf:
f1:a0:8a:82:b3:7d:61:3e:3f:27:fd:9d:a4:75:aa:f0:c4:aa:
e2:33:ec:e2:06:ca:2e:8c:5d:35:c7:78:18:cd:e0:80:8c:29:
58:9f:68:f0:c6:a2:db:58:07:63:1e:51:60:26:40:34:e2:f0:
b4:eb:ed:e2:db:2c:63:fb:08:24:8f:21:af:35:90:ef:58:96:
fd:83:e5:d1:d4:42:8f:09:93:ce:0d:11:27:ef:e5:0f:b4:9b:
f3:13:e3:a0:7f:42:8b:38:51:7e:08:94:a0:60:64:8b:4e:ae:
3e:ce:8a:c4:b5:6c:ae:a5:c8:92:79:1f:e7:2c:45:5f:82:0f:
49:dc:b8:24:b6:b8:f4:4e:16:6b:92:6f:a0:67:78:f8:d1:5e:
1e:d4:6e:44:31:e1:e9:8a:bb:06:6f:f7:c3:3f:90:90:0e:8d:
da:b0:64:5c:6a:30:f9:b2:ae:dc:37:8a:ae:c3:70:88:32:ea:
e4:08:81:fe:47:46:51:21:f5:ee:fd:6f:95:10:9d:fe:b4:70:
6f:34:bb:8c:94:10:4d:6e:da:27:09:73:f5:37:65:e4:e9:96:
76:fa:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:43 2025 by rpki-client