Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: Njjag9OBmsX989G40ksDDE3LSHpzABnIKngqLhfIexM=
Subject key identifier: 3A:62:82:50:80:6B:12:46:D0:E8:E3:90:53:EC:18:5C:41:DC:38:C7
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 0198737456A5C1038B307A31DE15307E334F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:01:00 +0000
Manifest this update: Mon 04 Aug 2025 05:01:00 +0000
Manifest next update: Tue 05 Aug 2025 05:01:00 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: mjs88QOQEuC3CBsQ0ltH0nPlcou0J/+8pvPB7WkYRsg=)
2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:56:a5:c1:03:8b:30:7a:31:de:15:30:7e:33:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Aug 4 05:01:00 2025 GMT
Not After : Aug 5 05:01:00 2025 GMT
Subject: CN=3a628250806b1246d0e8e39053ec185c41dc38c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:c9:dd:ac:72:7e:97:e2:1c:91:32:bb:d6:
73:9a:88:08:25:d5:c8:39:40:6d:12:14:a4:60:5e:
c0:18:91:b1:2a:0d:ea:c5:cd:20:7a:d0:b5:59:9b:
5e:f6:cf:89:e9:86:62:b6:f5:f8:fd:3b:5b:4b:4a:
c0:09:1b:7a:81:4b:40:c7:91:19:d5:2d:04:5d:f2:
e8:c0:38:82:ae:0d:0a:f1:15:9e:b7:2e:8b:d1:1a:
6c:dc:af:47:bb:00:3a:ba:bf:ef:3f:19:a6:02:5a:
1b:08:24:73:9f:32:a4:d9:2f:72:c5:ae:69:5c:9f:
fd:2f:8b:19:09:d4:4b:c2:ec:7e:56:8b:7f:f4:6a:
75:4b:ad:17:bd:6a:f6:ad:1b:b1:4e:31:f1:54:91:
c8:a4:40:69:86:ce:4c:0c:23:a3:8f:fe:d8:11:01:
89:d6:6a:61:b0:ef:3c:be:ec:02:f3:58:44:8a:46:
c6:d7:24:a3:13:57:c2:8e:3b:fc:41:a7:24:2d:cf:
5d:8a:dc:40:b7:fa:64:02:5d:0e:dc:bb:c9:9a:8b:
e2:9c:e4:62:f1:0c:2f:19:7e:1a:10:a5:b9:26:2e:
ca:d2:65:83:2b:dc:13:14:2f:12:12:35:b8:a8:61:
96:32:5f:52:f3:2d:1e:12:d7:37:95:43:46:39:05:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:82:50:80:6B:12:46:D0:E8:E3:90:53:EC:18:5C:41:DC:38:C7
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:fe:ed:67:f8:c4:96:f8:55:79:f8:5c:a8:6c:a3:37:a3:
09:0f:67:60:3a:1d:86:89:b6:f2:20:5c:46:56:c5:67:ae:cd:
1d:ad:3d:0e:64:08:08:e4:80:35:c7:b5:55:a3:4d:88:62:0a:
70:27:0a:00:bf:6c:1e:6b:24:99:19:50:a2:79:3a:22:6d:bc:
4d:72:69:22:52:86:8b:cc:bc:bc:f5:c9:09:36:67:e8:d7:2f:
51:6e:02:ac:82:14:92:e6:40:55:a6:ba:fc:ee:51:6f:7a:c9:
6c:15:30:cf:22:e2:81:45:cc:17:10:85:d2:f8:15:8f:7b:c6:
57:b9:17:be:8b:be:75:72:e2:f9:f1:17:55:b6:3d:f7:c9:30:
a8:c1:b5:04:3d:07:de:52:2d:76:d4:f7:b5:d6:c3:6f:df:7f:
3e:40:f8:9d:2a:b7:0a:57:e0:4b:18:30:7c:ce:52:9e:39:87:
e1:51:6e:5c:4a:d4:6e:6e:b8:36:58:3f:b4:99:09:bf:69:23:
e7:f1:92:a4:a6:19:8f:ee:55:1a:d2:b5:3a:47:5d:ce:c7:83:
a1:2a:b9:2a:a0:c6:de:d0:0f:15:65:df:d8:d5:af:b0:37:d4:
33:7d:de:40:01:46:d7:9e:f4:26:cc:b5:c5:a7:b0:5f:44:f1:
dc:8b:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:21 2025 by rpki-client