Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: Cc/4zdiz+DR+Cfuz0UKzTxuoLRokZUyS4VCfQlR35/0=
Subject key identifier: AC:C1:D6:02:2C:32:C9:33:FE:21:37:63:A8:A7:BF:5D:77:FE:D5:F1
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 01987F78C505CA1E66C1DDE63BAC9D51DF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 0FBA
Signing time: Wed 06 Aug 2025 13:01:17 +0000
Manifest this update: Wed 06 Aug 2025 13:01:17 +0000
Manifest next update: Thu 07 Aug 2025 13:01:17 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: ScHmBx9Rco0PGJZEYONj+/hXDw0Uxr5ctBjL1WEye0I=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:c5:05:ca:1e:66:c1:dd:e6:3b:ac:9d:51:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Aug 6 13:01:17 2025 GMT
Not After : Aug 7 13:01:17 2025 GMT
Subject: CN=acc1d6022c32c933fe213763a8a7bf5d77fed5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:4a:53:f5:3b:7e:d5:3b:ac:2d:53:a9:e7:
65:05:b2:2d:05:7a:71:70:ac:6a:a0:b6:e3:cb:29:
d9:41:29:6a:29:6d:2f:cf:19:20:2c:e0:c5:f9:ce:
95:d8:cb:2f:04:f2:0c:7a:af:ab:5d:62:85:c2:e2:
b8:ec:da:5b:d3:ae:fb:4a:dd:2e:b4:5f:32:b7:5d:
61:b6:57:96:1e:8c:35:e6:87:e4:0d:4a:22:b9:0b:
3a:d0:28:f3:30:82:89:53:9c:13:3c:42:dd:93:50:
f4:1e:e3:9b:29:1c:21:f5:e8:8b:c8:96:f1:46:db:
e7:08:74:9f:07:af:23:75:4d:f1:35:53:ca:26:0d:
c6:62:78:46:cf:97:bf:b4:c6:f3:18:20:1b:4a:fa:
2c:eb:00:64:7e:70:ce:20:3b:a8:98:4b:49:4d:ed:
07:f0:3c:3b:a0:68:c4:9e:73:36:e8:f8:48:f6:8c:
ed:ed:02:cb:d2:7b:29:78:d9:21:f2:1f:9e:7d:e9:
e5:9a:a7:e5:0b:b7:39:08:f5:0a:2e:49:d8:cf:a1:
83:0b:7c:c7:7a:95:66:e8:3c:c4:64:98:51:c1:36:
19:42:66:17:ff:97:8e:34:62:c8:67:cb:64:c8:3f:
c1:b5:0f:e2:18:71:f5:e8:b2:9c:c5:52:52:d6:d0:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:D6:02:2C:32:C9:33:FE:21:37:63:A8:A7:BF:5D:77:FE:D5:F1
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1e:f2:a3:a8:5d:73:2b:68:68:6f:e9:65:6f:65:af:89:1a:
da:00:b2:5d:83:11:07:fa:9e:a6:9e:5f:ae:73:a1:ce:5f:c5:
f0:41:69:3b:42:98:74:22:a1:3d:06:99:55:1a:1d:24:31:ab:
34:62:03:57:9e:ad:be:bf:3d:eb:6c:43:57:ed:ec:f2:62:db:
db:95:20:e7:e5:c5:41:7a:47:a4:48:c2:dc:0a:c2:91:32:47:
bc:db:b2:4a:0b:93:58:5b:ea:7d:83:4b:a4:97:16:f1:1e:0f:
41:b6:0a:68:a1:3f:0d:8b:1f:93:d0:9b:ca:43:bd:4f:9c:fb:
f4:23:42:24:1e:ac:2e:f4:26:6d:1e:84:d9:a3:cf:bc:30:ca:
88:b4:86:f1:c0:ac:18:c9:e3:73:c9:7a:58:30:25:c0:36:44:
ae:09:f3:a9:6a:fb:d3:ff:fe:82:de:5a:4f:95:b6:c3:13:93:
9d:13:a0:0d:b8:ea:c3:95:22:32:a8:cb:49:3b:c0:54:86:1d:
78:81:e7:b6:84:74:d8:2b:e8:6c:6e:45:31:36:bc:20:f1:a7:
66:c9:86:59:0b:3e:2f:33:ee:2c:a5:61:7d:a5:ce:3c:3d:22:
5b:30:4e:79:93:f1:4d:b0:2c:d4:70:e2:3c:f8:47:1f:a7:cc:
bb:39:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:03:32 2025 by rpki-client