Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: hBYFYpWidv6x4LTGqL9An872TJ5WoWje/EocgT+PwEo=
Subject key identifier: 17:6F:A9:D8:C2:4D:98:E3:2A:02:5B:35:C7:3B:EE:13:8F:1B:D5:D2
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019897EEE7B0E9213647EFD6725875266A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 10A0
Signing time: Mon 11 Aug 2025 07:01:13 +0000
Manifest this update: Mon 11 Aug 2025 07:01:13 +0000
Manifest next update: Tue 12 Aug 2025 07:01:13 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: YMsfhD/rxa2IaHtNj0Ac017lN9bejhLWo/hmd4i61Cg=)
2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:e7:b0:e9:21:36:47:ef:d6:72:58:75:26:6a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Aug 11 07:01:13 2025 GMT
Not After : Aug 12 07:01:13 2025 GMT
Subject: CN=176fa9d8c24d98e32a025b35c73bee138f1bd5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:89:5b:36:55:cc:5b:0e:e3:e4:d6:bd:63:
f9:9c:42:53:65:6b:c2:24:f6:66:11:93:7d:28:59:
80:68:86:3d:9b:89:00:5a:b8:f3:2c:4e:c1:37:e6:
0f:ca:06:e1:9e:e9:91:5e:8f:cc:58:97:27:fd:dc:
9f:eb:93:d8:5d:f7:bd:4f:93:b6:9f:9f:42:d0:23:
5f:28:30:7e:0d:d8:78:6b:54:a0:a0:8e:80:89:f8:
c1:0e:54:58:09:94:9e:e8:82:94:c4:32:98:c3:46:
0c:17:1b:eb:b9:d0:99:4b:cd:db:f1:37:da:22:4c:
cb:4b:59:30:92:14:df:95:00:c4:99:55:9c:3d:53:
96:92:3e:4a:b7:cb:04:40:39:e0:b2:d6:00:21:58:
c6:11:ff:a9:51:88:3a:0d:cf:8e:f7:2a:b2:ab:08:
b2:b4:03:cb:72:92:2d:a1:95:d1:72:eb:ee:d0:25:
02:57:95:d7:92:64:2e:08:b2:0f:97:22:62:a5:5c:
bc:85:fb:d1:9b:e6:7f:6f:66:37:bb:a5:ed:70:5a:
e0:22:67:10:91:27:df:68:fe:ab:c6:de:e9:06:49:
38:e8:d6:41:f3:0e:52:c5:cc:20:ee:ff:c9:56:d4:
87:9d:66:27:9f:e6:e3:79:d7:d5:22:ea:cc:f8:7e:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:A9:D8:C2:4D:98:E3:2A:02:5B:35:C7:3B:EE:13:8F:1B:D5:D2
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8e:ca:12:a5:5d:45:09:e3:12:90:b4:7e:45:56:15:c4:ef:
b2:aa:f2:e1:86:ed:4d:fc:e2:41:e6:c7:62:2f:d1:e1:a6:4f:
cc:40:b1:66:3b:b6:a9:36:ce:73:b6:58:17:2c:01:ed:8d:40:
07:5c:ab:ef:ad:b4:7d:e9:14:57:60:d9:8b:d8:5e:f5:aa:93:
e4:ad:3a:b1:69:4c:0f:bb:5f:62:77:68:83:8c:b0:4b:78:b2:
aa:0e:1f:0f:65:51:59:e9:21:c0:be:07:a8:50:2e:9e:9a:0c:
9b:81:7d:81:86:a2:6c:bc:e7:0d:8b:4c:6e:f7:c8:23:ec:70:
3d:24:1a:af:db:c0:ef:6f:c7:88:6f:ce:5d:bd:d9:59:86:b9:
da:e6:f5:bb:4e:d3:d9:2d:4d:86:95:8f:b3:64:bc:ec:fc:54:
c5:1f:92:5a:fe:89:e9:7b:5d:30:ff:c2:ef:fe:30:5d:5b:7a:
f7:04:52:2a:ef:57:e6:94:16:6e:fa:82:67:eb:a8:ea:19:e9:
04:a9:35:bb:44:9b:d2:5b:9f:57:2a:8d:d4:af:b6:bc:7a:76:
c3:27:89:2c:cc:4d:7e:76:94:5c:6c:2a:64:cf:b1:72:8e:42:
80:19:a3:13:b8:dc:cb:b1:6d:bc:58:e3:d0:42:11:c6:d7:05:
6b:70:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:52 2025 by rpki-client