Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: havrLg61bLGg1dfUjmcmIWT4h/iiCNE0K5PjvnX4oZk=
Subject key identifier: 2F:18:9B:17:B7:E5:1F:AC:29:2C:8F:BF:A6:80:0B:C6:66:28:FF:C2
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019896DC09878793BBFA4001969FD28E1BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 02:00:59 +0000
Manifest this update: Mon 11 Aug 2025 02:00:59 +0000
Manifest next update: Tue 12 Aug 2025 02:00:59 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: QIGfCZlESllF/+MqyQvgwpjmvnkw0XlWhiBGUouc2TI=)
2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:09:87:87:93:bb:fa:40:01:96:9f:d2:8e:1b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Aug 11 02:00:59 2025 GMT
Not After : Aug 12 02:00:59 2025 GMT
Subject: CN=2f189b17b7e51fac292c8fbfa6800bc66628ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:df:e7:be:2c:e3:be:3f:d7:f5:0c:0c:7e:
9e:73:18:a3:eb:f8:78:71:30:8e:5f:5a:2e:06:c7:
de:6c:53:28:dd:ce:74:57:b2:7e:f3:e7:54:3a:0e:
b4:61:4c:06:78:d0:4b:2e:b0:03:9a:62:a8:bc:67:
85:53:6c:1f:c1:31:dc:8a:dd:b8:d6:cf:15:8b:5d:
9b:b3:66:c0:65:9d:81:30:b2:bc:74:12:4f:05:45:
99:0b:4c:c2:f0:a0:3e:4c:28:1a:0e:34:0e:16:4f:
bf:53:b8:cd:87:1b:2d:60:3e:f3:d8:4b:87:33:31:
cb:73:59:16:5a:77:39:4b:2f:6b:81:4a:10:99:f1:
01:17:b3:62:a1:3f:39:d1:02:3a:06:6b:9a:3d:19:
f6:2f:8c:ec:8f:35:1c:ec:df:25:45:d0:91:8c:96:
c7:cb:e3:e0:1c:ed:55:6e:a7:1c:a7:46:05:17:c4:
f1:7f:20:fe:b0:d5:26:7e:53:a2:65:24:f5:16:9c:
82:be:33:5f:df:d2:c2:87:97:f1:bb:2d:1d:48:82:
94:09:2a:42:6a:fe:48:39:d9:1d:6b:65:eb:9a:dc:
b0:92:54:2a:7d:74:cd:ee:9f:32:84:32:a8:8d:33:
28:b4:c3:1a:79:98:4c:98:70:b4:b9:7b:cb:c4:e2:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:9B:17:B7:E5:1F:AC:29:2C:8F:BF:A6:80:0B:C6:66:28:FF:C2
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c1:21:94:fb:99:61:6e:3c:45:2b:e1:b9:25:9f:0c:e5:d6:
43:51:af:d7:ea:6b:eb:c6:41:b0:53:6e:1e:73:ea:b4:27:25:
80:e1:86:18:dd:66:82:f1:18:04:b5:a8:d8:41:f1:10:83:f7:
2e:b6:60:79:58:69:e5:6c:c0:e4:98:31:63:d0:c1:c5:8c:c3:
a9:0e:46:ab:35:37:fc:d6:35:c0:a8:80:f0:79:ec:87:6b:a9:
f7:ba:d4:e6:bf:b6:a6:4a:b8:dd:0b:91:53:85:06:59:60:ee:
3b:c0:8d:a1:30:71:81:1e:e0:d0:dd:bc:a4:c3:51:80:11:3b:
a5:8d:8b:95:6e:1d:d2:9c:83:1e:aa:83:db:4f:cc:6c:d2:e1:
0f:56:bd:ba:8b:8c:a6:7a:08:fc:cd:3f:52:64:27:c0:54:2f:
74:ac:5c:28:cc:59:01:57:65:e0:41:8f:06:72:87:8f:78:71:
0e:cf:35:9e:f3:81:1f:16:6e:a2:44:b6:4a:cc:08:1f:1f:6d:
ce:f4:93:8b:d0:52:21:f8:84:2b:9a:4f:c1:31:0e:e8:42:0d:
4f:69:c8:f5:68:09:d5:2e:2b:92:0d:2d:f0:14:d6:6a:e8:66:
9c:4e:99:da:58:85:b0:7c:d9:8e:e8:14:27:27:56:23:d5:6f:
9f:f6:ca:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:24 2025 by rpki-client