Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: hsJVotUyLIn+S2UhKgsUV5ZlA91moq940y07XPj1Dxc=
Subject key identifier: 11:87:E0:F0:4F:4C:3B:37:8F:74:28:AD:50:21:7C:BC:1A:7C:59:34
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 019874F4EB0411749CC8DBCAC95A615AC01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 12:01:04 +0000
Manifest this update: Mon 04 Aug 2025 12:01:04 +0000
Manifest next update: Tue 05 Aug 2025 12:01:04 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: /VFAR+LVWoAZjWmeTEwIDau5KnIvlSGbDSsZ7DUQvEQ=)
2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:eb:04:11:74:9c:c8:db:ca:c9:5a:61:5a:c0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Aug 4 12:01:04 2025 GMT
Not After : Aug 5 12:01:04 2025 GMT
Subject: CN=1187e0f04f4c3b378f7428ad50217cbc1a7c5934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:14:bb:b2:57:d0:68:c9:08:d1:bc:f0:94:
fe:c9:ca:99:de:ec:71:ae:6b:46:60:77:02:1f:4f:
a9:55:fe:e0:64:ed:29:61:fe:48:81:d5:fb:f8:7b:
0b:bc:fb:47:75:b4:70:f8:20:4b:84:35:a2:a6:17:
73:a6:df:b6:30:7a:40:a5:f1:3d:a8:12:d2:19:b5:
69:e9:a5:de:d7:94:fa:a6:69:d6:c7:aa:fd:cd:0b:
12:68:1d:24:5b:0d:10:0e:42:3d:66:8f:b2:49:bb:
4a:89:51:d6:d7:91:61:65:31:f8:12:eb:a7:b7:a1:
fc:d3:56:ad:2f:32:49:f2:11:22:d2:d6:40:1d:c8:
46:58:df:91:fc:01:c9:de:3e:5d:67:04:59:27:6b:
a7:69:fa:0a:27:b0:8c:f0:81:e8:f7:6e:78:7e:6a:
be:ea:b1:4d:40:a0:85:48:95:21:50:ad:0c:32:8c:
78:22:10:98:e1:ed:26:ca:1a:9c:df:18:78:13:a0:
b1:d2:94:97:72:f2:2f:54:86:03:7a:57:7e:41:69:
84:5c:b8:30:0e:c3:ee:06:bd:ff:37:49:d1:5b:9a:
d9:e7:44:39:6d:5f:f4:75:e6:51:d2:ba:50:28:67:
e5:ae:7c:aa:48:b7:5d:fb:05:b8:60:ea:2e:ab:2f:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:E0:F0:4F:4C:3B:37:8F:74:28:AD:50:21:7C:BC:1A:7C:59:34
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:c5:61:9f:c1:2d:9d:67:bc:b8:fd:5f:5f:e1:7c:62:44:
94:e9:71:5a:b7:18:17:8f:4b:5e:38:d1:fd:66:15:28:71:64:
08:ec:4b:e6:dd:02:5d:83:04:40:73:2d:a1:9a:ef:1d:89:34:
83:1e:fa:92:74:86:f7:56:cb:13:b7:b7:f9:79:67:c4:e1:a0:
ff:d4:4a:31:5d:83:58:ed:be:18:8a:91:dc:07:75:18:5c:92:
04:fb:c3:ca:1c:4b:3a:e5:5f:77:7b:a7:2e:ae:af:03:0b:48:
db:8f:30:69:6e:72:b2:49:20:be:b0:08:d3:a1:59:01:df:58:
aa:11:27:ed:6e:d4:73:a9:1e:3b:5f:98:36:30:7c:c2:e3:9e:
7e:8e:37:a5:90:86:0e:7a:b2:92:ea:47:f9:31:6d:f1:13:3b:
c0:32:2e:7b:5e:c0:57:d4:eb:49:5e:15:1c:dd:8a:5d:29:ca:
9e:2f:58:10:0d:54:66:05:14:79:d1:f7:b2:91:ae:eb:28:07:
b5:b2:59:5a:25:a6:0e:87:e3:ba:8c:e9:a0:0f:9f:1a:8b:f7:
cf:a3:68:2c:2d:91:c9:7b:96:75:e4:c8:8a:99:df:e2:7c:ec:
0d:e5:42:7b:49:e4:52:f1:6c:0d:cd:f4:67:14:df:9d:c9:22:
77:6b:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:50 2025 by rpki-client