Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: 8yukLXEoJvfAux5ABMC+tuc+2iEVJfkKdk+tBtXlDds=
Subject key identifier: C5:88:29:36:27:69:5C:46:AF:5D:18:AA:80:62:D6:10:B9:EF:2B:51
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01987418B207619F8037C0EA469CAC88577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0377
Signing time: Mon 04 Aug 2025 08:00:32 +0000
Manifest this update: Mon 04 Aug 2025 08:00:32 +0000
Manifest next update: Tue 05 Aug 2025 08:00:32 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: q59NmsX9vtRP5AURRxF/m1javrgE5dVmDtZySY+mATs=)
2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b2:07:61:9f:80:37:c0:ea:46:9c:ac:88:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Aug 4 08:00:32 2025 GMT
Not After : Aug 5 08:00:32 2025 GMT
Subject: CN=c588293627695c46af5d18aa8062d610b9ef2b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:bc:a1:29:38:20:ed:24:6d:d7:54:89:78:
af:8d:f0:5d:cb:cd:9f:0a:61:fa:c9:0a:94:cd:ee:
fc:0b:75:49:af:5e:13:42:c4:57:66:37:14:a6:5c:
8a:50:c9:1b:4a:39:23:f2:b1:54:b3:71:b1:0c:bb:
09:45:ca:fa:cf:a8:18:3b:d5:a9:5d:a4:86:40:07:
94:c4:12:f4:57:a1:c8:a4:78:de:3e:aa:91:c4:06:
53:f3:89:eb:ec:04:df:13:df:cf:30:31:dc:57:1f:
bd:77:02:2a:ac:fa:5f:d9:08:cf:24:53:e5:7c:87:
8b:74:94:8a:52:63:10:3e:7c:0d:00:8e:a3:f4:95:
0e:1f:78:02:a2:26:21:ef:05:bf:79:12:ec:08:bc:
63:b3:b0:fc:97:d6:df:2e:ff:12:3b:56:e9:57:89:
2d:ca:18:14:7e:ba:4e:55:69:94:c3:73:f8:1f:3e:
c8:e7:62:36:24:9c:d0:c2:70:20:8f:59:4f:ca:cd:
c9:cc:8c:a9:d5:fe:fe:37:e0:e6:59:ef:74:3c:97:
46:07:39:76:b9:59:5c:c2:66:ca:c3:b9:45:d3:f7:
50:8d:eb:1e:5a:7d:44:15:30:6f:b8:37:e3:4c:3d:
a0:7d:94:5b:84:ae:e8:4f:34:ab:0c:74:aa:51:d3:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:88:29:36:27:69:5C:46:AF:5D:18:AA:80:62:D6:10:B9:EF:2B:51
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dc:86:27:a2:5e:a4:6b:35:2e:ed:c9:62:08:b7:a1:97:40:
37:c0:49:41:5e:af:95:68:56:ec:81:77:fd:11:a9:63:b0:72:
7f:c3:59:2e:cd:d6:2b:f8:81:03:9a:cd:41:ce:ac:27:c2:83:
79:4a:64:8b:42:1c:c0:60:d7:89:0e:16:b2:f0:8f:c0:76:f0:
77:ca:76:6f:17:66:44:da:56:96:51:2a:dd:02:8b:48:4d:9f:
75:da:8b:5c:b2:ea:b4:bf:45:af:7a:7f:63:b7:20:44:da:05:
4a:47:4d:18:cf:de:d3:8a:65:6a:3e:e1:e8:24:c5:b3:5e:d9:
5e:f0:60:84:c8:e3:22:81:10:4e:12:77:5b:db:41:ba:60:b3:
d0:11:47:68:df:46:42:6c:6c:af:c4:12:d9:7d:86:45:5f:d6:
4b:be:d9:03:f6:ab:36:1a:a7:e1:ce:90:85:89:6b:1d:5e:a1:
20:af:c3:4d:8c:31:dc:c8:c1:04:9b:dd:a1:e1:68:b5:0b:a5:
fd:51:f7:aa:a4:a8:67:9b:14:f4:08:29:8e:63:a0:9d:a8:04:
c7:3b:76:e8:f6:71:51:55:dc:be:5f:ae:84:d1:05:85:55:2c:
92:4a:8a:f7:1e:2a:84:5e:94:ff:c1:6c:df:eb:73:f8:51:5d:
e9:4a:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:14 2025 by rpki-client