Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: VEvAuubIR9g6qX34GDCzdcknNmFJ3jz/6ABbsWtYgAc=
Subject key identifier: 90:53:9B:BE:FC:3F:B5:DC:B5:38:28:68:7E:2B:C6:8B:08:31:E0:FC
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019892C82CA1E85D4F186771458C907B3BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 07:00:48 +0000
Manifest this update: Sun 10 Aug 2025 07:00:48 +0000
Manifest next update: Mon 11 Aug 2025 07:00:48 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: k0nvkibIsRwj4Pueo2qbdBv7wP8JeEptEwM44iR8/eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:2c:a1:e8:5d:4f:18:67:71:45:8c:90:7b:3b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Aug 10 07:00:48 2025 GMT
Not After : Aug 11 07:00:48 2025 GMT
Subject: CN=90539bbefc3fb5dcb53828687e2bc68b0831e0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:ab:cb:31:bb:8a:49:d8:0b:5e:a7:ca:f7:
74:2b:ec:54:ec:2b:26:8b:74:43:69:cf:25:24:84:
95:5a:2c:3e:57:37:d9:85:8a:91:ee:aa:75:e6:c2:
a0:c3:87:ee:91:b0:97:a9:99:a9:70:a6:c7:41:8c:
94:92:fa:72:88:a4:28:ce:f2:5d:2f:15:48:42:eb:
80:d3:77:15:4f:65:02:bd:5a:88:0c:9e:18:6d:5d:
84:be:25:7f:86:4c:56:49:e0:ed:fe:8d:0b:c3:55:
29:d2:77:da:8c:32:60:dd:26:28:f2:a7:58:a4:12:
c9:4d:43:c0:c1:b5:7c:c5:39:40:74:60:7f:96:50:
51:3d:be:78:0a:3e:dc:d4:20:44:80:5f:08:8e:3c:
ba:2e:5a:c3:38:41:34:a2:a5:28:f1:5c:92:ec:ba:
5d:4b:f8:3d:12:69:60:50:cf:9e:43:d6:c8:1b:c9:
ad:37:b2:5f:b0:74:2b:bd:2d:8d:a7:35:08:4c:5c:
b1:5d:8e:48:3f:4e:15:4d:95:86:ae:c8:c5:d0:ef:
09:5f:9b:6c:42:ae:4e:0a:44:42:da:d9:dc:9e:a3:
e3:45:a3:8b:98:13:c0:40:3c:fe:b3:b7:4f:0a:7a:
b4:53:c4:8b:67:a5:7c:a4:9a:2d:f1:d8:55:c3:ee:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:53:9B:BE:FC:3F:B5:DC:B5:38:28:68:7E:2B:C6:8B:08:31:E0:FC
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:52:e7:2e:d2:53:da:6b:2a:6e:46:c6:53:04:b8:e8:9a:e4:
c4:c3:51:10:36:2e:1e:27:28:21:de:d4:20:20:89:d7:6b:c1:
1f:07:30:9f:7d:e1:c7:df:11:36:dd:50:db:fb:ba:a7:b6:e4:
a1:ee:4c:a4:9e:cd:a5:e8:ea:21:8b:c0:08:85:aa:75:6d:5b:
07:fc:a8:02:f4:41:3c:30:f6:78:f0:3b:64:c9:eb:61:92:d9:
a3:b5:78:12:74:1e:2e:d9:8f:85:06:79:20:21:85:fd:e8:d7:
5c:1f:e2:f1:bc:28:2e:b7:09:11:14:35:a1:d3:ea:74:68:3d:
59:0f:84:71:7e:11:37:e2:d0:2d:5d:07:43:b6:dd:1b:e0:c1:
f7:68:72:18:0d:cb:50:78:0c:83:04:b2:21:49:75:0a:d7:b1:
d3:e7:ac:48:cd:88:27:73:1b:d7:bc:24:08:9d:f3:d1:4a:88:
f7:27:df:45:f4:ca:4e:89:57:88:22:5b:40:fa:68:3c:54:54:
f6:33:88:be:0a:d8:f3:ed:4f:cf:cf:cb:be:c0:47:49:18:ae:
b6:47:f8:7b:3d:c8:c9:b0:fb:75:16:24:d3:77:b7:53:a2:86:
bc:42:c8:70:22:7c:dc:3a:41:62:eb:09:f0:f8:28:e6:4f:fc:
dd:71:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:26 2025 by rpki-client