Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: CwGWR61roG6XawpZhsaUOi1GpqKJn7S2pd4Hm9NJAtk=
Subject key identifier: CD:AB:1E:3A:5E:A4:33:C9:87:CB:7D:D0:46:8B:A7:EB:C5:A2:6B:D6
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019879AD9D2EC76486EC03D9684B9CB5B34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 0289
Signing time: Tue 05 Aug 2025 10:01:17 +0000
Manifest this update: Tue 05 Aug 2025 10:01:17 +0000
Manifest next update: Wed 06 Aug 2025 10:01:17 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: thoQ6Xac9lg3jgjs/Y65CN4zcncFQPij1+enqWSVSM0=)
2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:9d:2e:c7:64:86:ec:03:d9:68:4b:9c:b5:b3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Aug 5 10:01:17 2025 GMT
Not After : Aug 6 10:01:17 2025 GMT
Subject: CN=cdab1e3a5ea433c987cb7dd0468ba7ebc5a26bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:6f:a6:ba:83:f4:0b:f1:14:71:ed:68:38:
53:a0:40:c0:4c:33:0d:44:cd:a6:d6:f3:af:cc:7c:
f9:8c:69:f2:1e:a1:3d:c2:14:53:4b:59:84:92:f0:
43:66:02:6f:ba:29:8f:d6:01:37:25:71:05:fd:d9:
6f:88:fb:43:c2:e1:a0:fd:46:28:32:6e:60:93:f4:
eb:d0:9f:25:df:c9:23:47:2b:0d:8e:0a:2d:74:42:
b0:32:0e:2a:d4:bb:cb:4d:49:75:e7:8a:11:33:3b:
6d:26:a2:94:c6:fb:cc:4e:4b:ab:49:c7:16:75:5d:
0d:7b:04:82:09:70:41:1a:c5:38:89:cb:61:9c:d0:
3b:4e:9d:0c:0c:c1:5d:ad:b9:74:c7:8f:c9:e4:9f:
6c:40:ce:51:dd:11:0e:8c:21:bd:b3:f3:6a:4a:36:
e6:da:d0:bc:77:26:00:66:df:14:99:3c:81:09:7b:
d6:6e:bd:98:44:da:a2:bd:c7:f1:02:a6:e2:85:30:
1f:d0:8a:2b:63:aa:02:4d:7d:25:e0:0d:37:1c:49:
8e:c2:94:02:56:d6:4d:6b:21:9a:c1:7b:ee:08:c4:
18:87:81:72:ac:30:7f:99:74:94:8c:45:95:a0:9e:
d7:30:9c:65:74:3b:4d:36:47:14:da:03:9b:84:4f:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:1E:3A:5E:A4:33:C9:87:CB:7D:D0:46:8B:A7:EB:C5:A2:6B:D6
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:b8:59:bc:8b:d4:a1:f3:e5:7e:27:81:a8:16:3d:31:f9:
df:67:82:91:7b:a2:6c:b5:37:27:bb:71:94:2d:92:78:7f:b1:
96:d4:d9:35:55:59:f3:d6:18:27:69:dd:92:75:d4:de:95:bf:
58:fc:d8:d2:b3:ff:9b:6c:17:33:29:a5:62:6b:94:d4:eb:85:
2e:54:3b:91:de:ff:88:93:ee:97:51:8d:a7:e9:eb:32:35:d8:
66:4a:cc:28:0e:9c:41:f6:2e:4d:cb:32:33:7f:f0:ab:74:c6:
a7:6e:27:d6:20:e1:bd:af:62:52:13:af:0d:97:c9:d8:5f:30:
15:92:40:d8:a6:45:e3:e7:2d:99:20:4a:e5:f6:b9:b4:11:97:
82:26:d8:46:19:bc:14:38:26:36:95:6f:71:2c:11:93:7f:e1:
b8:78:8a:ea:d2:d9:37:6b:e2:9a:7d:49:27:18:98:d1:73:e3:
aa:9f:cb:6f:04:a9:f1:28:19:eb:41:46:42:3f:df:4d:07:51:
1e:9f:69:99:7e:d1:c1:e7:bb:19:7c:26:97:ff:25:0d:59:ef:
79:5a:62:a9:92:78:50:00:2b:bc:db:e2:3a:b7:da:bc:d5:7b:
ce:ce:09:d3:f2:44:cb:ad:e6:19:89:73:9f:48:51:65:93:4e:
24:8f:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:44 2025 by rpki-client