Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: BQXNe0CWn+mnHz7lXQhTSmnaI024NDEgxWphNhKo7c4=
Subject key identifier: 17:DF:93:9C:5F:38:9A:4E:B4:9B:65:2E:52:09:1D:72:11:62:FF:2E
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 01987A88AFA0F9DBBE5EB66A475D7A4638CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 110B
Signing time: Tue 05 Aug 2025 14:00:34 +0000
Manifest this update: Tue 05 Aug 2025 14:00:34 +0000
Manifest next update: Wed 06 Aug 2025 14:00:34 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: tOJLHqtcsqsIByVrkbVp4VA0iAkmnn4aq0dqGl/QVwQ=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:af:a0:f9:db:be:5e:b6:6a:47:5d:7a:46:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Aug 5 14:00:34 2025 GMT
Not After : Aug 6 14:00:34 2025 GMT
Subject: CN=17df939c5f389a4eb49b652e52091d721162ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:15:2d:48:3a:d1:bc:97:eb:fe:5f:c3:da:
cd:46:ec:dd:1a:a5:3b:d7:52:e5:80:e1:ce:59:64:
49:11:d2:cd:d7:f1:37:44:3a:ab:32:e3:a2:41:e2:
ea:d2:50:9a:83:ec:f8:34:d8:5a:c5:fb:7b:00:ce:
cb:ce:16:9d:7b:5c:b1:e2:bc:e6:84:92:f1:95:9d:
80:af:86:d5:71:3e:d1:ee:11:2e:d2:41:f3:bc:93:
06:bd:44:ba:cc:64:56:1f:ae:96:73:b7:f0:5c:fb:
65:44:b4:a6:5d:0a:bc:45:db:a0:1d:44:ef:eb:de:
f3:2c:90:69:25:36:96:dc:8a:df:aa:76:4b:41:d0:
5d:be:06:18:ee:83:01:37:1d:65:80:1a:7c:dc:da:
34:63:77:3f:15:d9:a2:5a:6a:42:a5:b4:8a:50:dd:
3f:37:dd:a3:a8:b5:99:70:d6:ab:4c:da:4d:fa:a2:
c6:8c:c8:2b:02:30:18:90:e7:ab:c8:56:93:20:17:
79:8c:1c:b2:dd:04:ef:fa:11:14:28:3b:3d:53:4a:
16:f6:82:b8:43:47:11:ac:4d:2a:2c:ef:50:ae:54:
e4:7d:df:f2:72:fe:3b:ca:a2:a0:f1:ea:25:f5:08:
0a:48:72:3a:5c:2d:f8:80:e5:43:d0:81:cb:e4:3b:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:93:9C:5F:38:9A:4E:B4:9B:65:2E:52:09:1D:72:11:62:FF:2E
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:28:c3:51:29:ba:8c:1a:c0:9e:75:0a:71:33:c4:46:40:
cf:79:e1:a4:58:d2:d7:31:78:95:6b:41:fa:c6:af:45:94:3c:
83:9c:06:b8:7f:9a:25:88:cb:d0:9d:ec:22:d4:01:46:d4:4f:
75:9d:65:b8:09:e5:d9:6b:32:3b:d5:75:b7:c3:32:c9:0d:66:
28:22:59:51:d1:0d:2f:1d:44:25:b9:15:06:23:d2:fc:9d:67:
54:ff:95:c4:5d:9d:87:12:6d:69:33:51:fe:ba:bd:c4:f4:32:
80:a4:ca:77:dd:e2:de:9d:73:48:9c:43:a4:56:7b:61:cb:25:
d6:df:a3:60:19:1c:a5:df:1a:c7:f3:3b:e7:1e:1b:04:f1:e0:
7e:a0:c5:54:c0:4a:7f:fa:d1:7b:58:f2:8d:25:5e:60:4f:36:
cb:17:8a:bd:1a:4b:ab:57:55:c1:cd:4e:50:cb:c6:9b:87:09:
35:d6:be:35:92:ba:da:74:62:c7:c6:c4:df:29:06:ef:20:33:
82:19:46:fa:0f:49:1f:47:d4:1d:6c:ea:c2:de:c8:91:ae:98:
fe:c3:fa:49:a6:67:02:a2:aa:37:e2:c7:5d:1a:d2:2a:25:56:
cd:a0:3d:b4:b6:cc:f0:17:d9:c8:fd:e8:97:9d:5b:7e:7c:42:
fe:92:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:30 2025 by rpki-client