Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: wK6Q3K0gPjIJNedyesFHPab5hHAEIyDanoMqv4ZGYVM=
Subject key identifier: BD:A5:BC:1A:F0:F5:CE:85:A1:68:A7:C0:3B:39:20:AE:DE:71:0E:0A
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 0198752B99D811B1BB2D0ABF4AA046963EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 13:00:48 +0000
Manifest this update: Mon 04 Aug 2025 13:00:48 +0000
Manifest next update: Tue 05 Aug 2025 13:00:48 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: uHVC1QzCMs7gFuCeCPcds9pTWSSvj0ehxCuuixJry/8=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:99:d8:11:b1:bb:2d:0a:bf:4a:a0:46:96:3e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Aug 4 13:00:48 2025 GMT
Not After : Aug 5 13:00:48 2025 GMT
Subject: CN=bda5bc1af0f5ce85a168a7c03b3920aede710e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:52:7e:b0:d3:fc:a7:c2:66:e8:66:7e:ad:
16:41:42:28:96:b4:d8:68:6a:68:db:22:c9:0e:67:
fc:df:23:0a:97:75:b9:46:67:a7:11:89:4b:07:eb:
23:29:37:88:dd:0c:74:51:83:60:12:98:70:2b:63:
c1:8a:f5:2f:e7:da:0e:16:76:14:4a:c7:bc:0a:26:
34:6b:ef:13:5f:35:00:66:7b:b0:8e:35:78:72:67:
2f:b3:0f:ac:35:49:6d:63:0f:91:1b:b2:1a:01:22:
6c:64:ff:f6:99:57:fc:b7:2c:0c:32:ee:38:25:ef:
f1:1c:a2:90:c8:51:b7:85:2c:68:ba:d5:59:e2:ed:
65:ac:b2:d2:da:14:2f:b5:df:53:aa:93:8c:b4:df:
58:9d:d8:61:2e:37:c6:a3:75:e4:6e:f1:5d:cd:dc:
c0:d7:f3:65:20:ea:a0:26:81:34:33:b4:05:cc:6c:
4a:41:b2:4b:03:86:c0:7d:6c:fb:1f:6a:ac:01:d1:
19:32:22:06:a2:d8:64:15:8e:27:69:d8:8b:50:ec:
b8:e3:cd:3e:f3:b5:d7:c4:24:9d:0c:aa:c3:fe:3b:
16:34:c3:b4:4f:55:84:81:92:10:9f:05:5a:d5:2d:
ac:b9:08:94:06:39:27:ac:15:69:92:4c:f9:aa:86:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A5:BC:1A:F0:F5:CE:85:A1:68:A7:C0:3B:39:20:AE:DE:71:0E:0A
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:f3:de:2f:49:04:bd:7a:b2:c2:1b:58:e1:e7:f4:2c:6b:
37:fc:f2:41:fc:37:1f:77:b1:ef:69:1f:e2:3e:11:f9:b1:9d:
7c:30:1e:fc:9b:81:7f:8c:ba:5f:7d:56:82:90:4e:53:cf:61:
d2:cf:6d:23:8b:ce:ac:9e:88:e4:9a:e5:e8:af:6b:da:ee:fd:
97:d4:d5:c2:f2:88:45:c9:07:cf:b3:86:85:de:ab:90:d7:3d:
86:02:de:11:ad:95:70:10:f1:a6:63:07:ab:9b:8a:c2:b7:88:
b9:35:e0:73:4c:61:59:c2:8b:ae:8a:59:d2:54:28:d3:8a:61:
21:3d:12:de:59:3c:b7:7b:2d:84:0d:20:0f:17:1b:de:c0:39:
ec:49:d6:57:2a:f8:04:e7:ae:a8:08:fe:14:97:55:71:cd:ee:
07:9a:61:b4:7e:f5:8b:6e:81:07:4f:a9:db:a7:51:37:46:77:
6c:93:ca:67:0e:23:1b:94:df:5a:4a:d2:81:01:78:26:2c:a8:
b6:8e:05:02:c0:13:81:cb:3f:ea:42:d5:34:6d:ce:a8:e8:5e:
4b:49:6d:78:1d:7b:78:87:eb:a3:5d:b6:2d:c7:4c:8f:4e:af:
ef:e1:b4:fd:17:1d:32:04:a1:14:e6:b8:6b:57:de:02:09:06:
fa:33:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:30 2025 by rpki-client