Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: BGx8rOVOuzUbfGj+d3DtJbThwmuSgDwVNxYgEn78M1Q=
Subject key identifier: 13:07:BA:AD:A4:74:EB:C3:18:67:DA:56:67:54:21:BE:26:28:71:CA
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 01988D345BCEC3E746CEA2812761DFFAE692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 05:01:15 +0000
Manifest this update: Sat 09 Aug 2025 05:01:15 +0000
Manifest next update: Sun 10 Aug 2025 05:01:15 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: W/qdlwhzjd/qGG0OlyS6yXcDWVWdJxj1pQtyrOaJSi0=)
2: I11yOf8621A4bMVjivGCunNhodU.roa (hash: zD+DtTuh65HplID/p8Q/zTlZEI94dke+hM79PxEcBgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:5b:ce:c3:e7:46:ce:a2:81:27:61:df:fa:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Aug 9 05:01:15 2025 GMT
Not After : Aug 10 05:01:15 2025 GMT
Subject: CN=1307baada474ebc31867da56675421be262871ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:96:ed:61:e2:f9:83:64:9e:16:c6:6e:8d:
cb:24:a4:4b:2d:22:92:9f:a2:ee:3f:46:03:e7:09:
56:cb:7c:e7:2e:10:35:72:8f:ca:2d:9e:a1:ea:c1:
e5:2d:46:54:e9:8b:18:8d:57:2c:29:b3:68:a3:e5:
9e:f2:34:2b:30:07:56:a7:3c:4b:fd:78:50:66:33:
21:41:b5:93:d2:f7:f6:13:12:37:d0:15:6b:5d:96:
23:c2:fa:dd:ec:21:1a:9f:d4:8b:97:ab:c7:a3:ce:
e4:3d:48:d7:b5:41:3b:d5:b7:8b:f0:db:ae:94:6f:
9c:63:dd:6b:61:0d:c3:70:99:54:33:c2:25:f3:6c:
05:22:dc:9a:e8:2c:d3:8f:fc:43:89:85:51:b2:7a:
21:ee:ca:0f:41:c4:1c:fc:7d:99:f0:0f:55:78:7d:
69:37:bb:e0:67:ba:83:93:8b:0d:84:91:26:2f:39:
cb:7d:ca:98:11:e5:1e:6f:08:91:68:68:6e:d4:f8:
dd:7b:bb:60:c8:cd:cf:60:6b:f6:c7:a7:e9:70:4d:
98:fe:66:d7:1f:70:34:b3:29:21:34:f9:0e:75:32:
01:86:7c:76:79:43:4e:67:40:1d:f0:e4:66:5c:93:
e9:d0:a5:59:71:e9:9c:ac:60:44:ab:86:f6:9f:48:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:BA:AD:A4:74:EB:C3:18:67:DA:56:67:54:21:BE:26:28:71:CA
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:61:64:ba:ec:ed:57:78:ca:56:42:62:f3:60:3d:a9:8d:
a0:e3:4a:00:9a:20:08:62:a7:ac:90:ab:4d:f6:40:3e:c1:fa:
b7:89:23:c1:bc:c9:c4:4e:b1:09:78:74:b5:72:30:ee:9c:58:
9a:66:90:46:99:09:ed:7a:d7:aa:95:4b:08:f8:b8:ef:25:e4:
34:3a:ba:ac:05:0d:8f:b1:b9:c0:3b:a5:79:1a:89:d8:56:75:
f8:e5:19:31:0b:c2:50:a9:5e:af:6c:95:85:3b:2a:55:31:da:
a9:6f:0e:68:5e:17:e1:b5:6d:a6:54:c8:8d:a3:b7:92:b3:18:
d7:68:d3:cf:97:13:98:e6:57:d8:f6:57:7d:ca:85:5c:28:7a:
77:e8:37:43:e4:02:24:16:4c:e6:e9:9b:c2:df:06:f8:71:ba:
02:0f:d1:ab:cf:d3:7b:eb:11:0f:04:4d:de:d8:f0:60:43:1c:
b7:28:65:e8:a6:76:e4:ea:ba:dd:bc:7e:48:46:b0:96:3c:16:
9f:06:db:4b:44:23:99:6f:e5:1f:84:25:69:f7:12:c1:c0:f6:
84:f0:59:2a:23:91:45:f3:27:73:bc:fc:69:32:0a:07:5e:a9:
c2:00:c6:08:52:19:57:52:8e:06:ce:de:21:d3:33:ee:41:7b:
d1:18:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:30 2025 by rpki-client