Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: ntQQnxAE/qAWuwgrn4iwG36Wg7swxn0qSJkzb3gRtbQ=
Subject key identifier: 3A:56:C9:8A:58:21:91:62:91:37:B3:A9:A1:62:D0:CF:71:A0:D6:73
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 01987D8AD5C641B64E58D965142231A55BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0CC7
Signing time: Wed 06 Aug 2025 04:01:47 +0000
Manifest this update: Wed 06 Aug 2025 04:01:47 +0000
Manifest next update: Thu 07 Aug 2025 04:01:47 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: u+b16qSY0dIIjoNTKPIQYUhK+GjK+Pj5hBpW7raa/g0=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:d5:c6:41:b6:4e:58:d9:65:14:22:31:a5:5b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Aug 6 04:01:47 2025 GMT
Not After : Aug 7 04:01:47 2025 GMT
Subject: CN=3a56c98a582191629137b3a9a162d0cf71a0d673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:d8:0d:2a:7e:6a:3f:60:97:00:fa:e5:5c:
5a:45:38:57:6c:5e:ae:c8:38:6e:12:81:93:68:1f:
f6:28:3e:8f:5d:9a:11:42:ac:54:62:db:54:76:6b:
68:84:53:dd:35:cc:7a:ca:59:e8:f4:80:cf:12:56:
af:f4:a6:b0:2d:c1:2e:05:a6:31:81:72:97:ba:f0:
ac:d4:76:33:b8:70:91:f2:82:c2:00:c8:f0:cd:52:
82:0a:7a:8c:e3:d4:28:39:e7:2a:5a:17:13:69:77:
0c:2a:02:b7:19:9b:30:29:c5:aa:71:79:9f:10:d5:
0d:1d:ac:5f:9e:9f:39:13:74:89:e6:88:93:f9:25:
32:91:26:85:6d:a7:76:7b:d3:dc:4c:e5:d2:15:d7:
16:db:fc:45:f0:cf:fe:3b:cc:5d:3c:64:ca:fc:df:
cc:77:61:36:2b:e2:4c:47:94:58:7f:97:a4:55:d2:
5d:9f:10:bb:22:01:0b:e7:1a:ab:85:cd:63:61:ca:
a4:27:04:8b:e9:56:1d:bc:2d:89:4b:d3:d5:d6:10:
25:c7:72:e5:07:4b:1e:04:43:30:0a:b6:cf:e7:69:
0e:81:ef:ff:a9:75:55:e1:e5:d8:e6:66:88:de:a4:
3e:93:52:02:e9:55:97:0a:48:63:6a:65:a0:39:b8:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:56:C9:8A:58:21:91:62:91:37:B3:A9:A1:62:D0:CF:71:A0:D6:73
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4a:c7:13:79:c3:20:1e:7b:ef:9c:d5:da:c0:75:04:61:eb:
3c:c4:9d:36:f7:b7:0c:26:b1:b1:95:9c:e6:28:fd:b4:ec:d4:
42:a8:5b:1a:64:80:6e:8f:c2:0b:5d:80:b6:c1:1d:bd:8a:2d:
01:4e:47:a1:e4:6f:4e:b2:45:66:43:e4:9f:09:06:b6:36:79:
4f:6c:06:68:41:6c:36:fa:b2:46:17:da:4f:01:31:5f:9b:60:
2e:35:33:24:10:49:f6:3e:7c:fc:a3:dc:3a:a2:61:6e:39:d3:
36:d2:7d:71:d2:89:44:72:84:ff:72:4e:81:48:bd:70:90:fb:
78:77:0d:16:9a:b0:cc:9f:10:1b:80:6a:7c:b9:13:db:49:4d:
fe:c8:33:06:ed:1b:f5:6a:08:d5:df:53:b5:e6:03:42:b5:4d:
64:15:2e:87:c5:f4:40:b5:22:f5:9b:03:52:b9:06:13:ff:85:
b2:53:54:79:cf:55:f0:b8:23:cc:d1:b0:35:94:f2:22:95:aa:
94:9c:ce:87:7c:00:e3:91:62:8b:59:fe:e9:e3:45:19:5a:e4:
24:bf:3e:82:4b:ac:fb:39:97:a8:02:4d:72:95:a8:57:07:cb:
75:e2:a4:69:1c:ba:57:42:44:8e:e7:ac:fb:b5:c5:c9:bd:ac:
83:8b:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:50 2025 by rpki-client