Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: UfcAqg2MdUg2W19sa8CmVEm5EChtlPW/NGmIZnZbfkc=
Subject key identifier: 0F:4F:DF:F9:74:3A:24:F0:C7:0A:2D:D8:42:F5:4E:49:8D:0B:02:A7
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019873744F5F9F67971CF2DC61CFE95C7FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0D5D
Signing time: Mon 04 Aug 2025 05:00:58 +0000
Manifest this update: Mon 04 Aug 2025 05:00:58 +0000
Manifest next update: Tue 05 Aug 2025 05:00:58 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: qtTgOo4MjcLpjar886wboJPkJvTbkm+DRytX4xR6BcA=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:4f:5f:9f:67:97:1c:f2:dc:61:cf:e9:5c:7f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Aug 4 05:00:58 2025 GMT
Not After : Aug 5 05:00:58 2025 GMT
Subject: CN=0f4fdff9743a24f0c70a2dd842f54e498d0b02a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:37:1c:27:87:79:f0:5e:ee:2b:7f:4e:17:
bc:3a:24:6f:85:81:53:83:8a:75:ad:0f:f9:27:e2:
8d:35:3a:fb:1c:05:b3:f2:86:3f:c0:d7:57:c7:73:
3b:1d:67:97:5a:f1:b3:6a:33:33:5c:6d:42:78:79:
d4:75:86:ab:43:98:3a:a3:ec:e3:c0:a1:12:94:f6:
77:15:80:f1:ce:7f:0a:07:7e:f3:1a:21:0b:78:39:
de:0e:29:f2:0b:a4:ac:e1:41:5b:90:4f:62:9c:3d:
bd:1a:67:cc:7e:e4:12:d8:d8:b6:c4:98:9f:9f:48:
d0:b6:c9:10:29:11:a0:36:97:ed:fa:eb:f9:a4:94:
ad:30:d2:d9:e1:60:19:d2:ac:1f:60:5f:53:bd:74:
12:5c:20:1e:28:35:80:c7:33:b2:1e:b2:a0:08:b6:
92:ca:53:c7:61:12:6c:e6:7d:8d:2c:01:7d:b2:66:
bc:e2:0e:67:59:f1:8b:51:ec:c6:db:12:61:4b:1d:
e6:6c:32:c7:34:bd:16:26:cb:e9:48:14:94:e1:f3:
e7:34:46:83:33:81:79:09:1c:32:53:19:14:b4:d1:
0c:29:80:dd:87:f5:da:77:94:5c:4a:a6:dc:ae:db:
58:9c:93:fb:c7:e9:68:f0:02:d5:44:78:1e:2b:76:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4F:DF:F9:74:3A:24:F0:C7:0A:2D:D8:42:F5:4E:49:8D:0B:02:A7
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:75:85:d1:c3:01:55:97:06:3e:76:cc:d5:39:a9:e4:1b:f5:
24:cb:70:96:0e:9e:21:d1:92:66:3e:94:f9:7c:03:93:9f:5a:
e2:d3:a7:d4:fb:bd:59:91:77:c6:2e:7d:bf:c1:d6:b8:5c:c6:
a6:65:d9:5c:7e:d0:10:c9:c9:e1:77:0e:fa:32:c9:4b:0d:de:
32:bb:fc:f1:21:e9:58:70:2d:9a:0d:5b:86:14:bb:25:f1:6f:
1a:81:6d:6d:2c:3e:03:09:ea:09:55:f6:ce:6f:d3:57:ee:36:
d6:bb:c8:3e:cf:96:32:2c:7c:c1:fc:3b:63:c8:40:fc:0d:ae:
ff:96:10:b5:19:90:e2:58:91:21:42:c7:55:c7:fb:6b:c9:02:
12:38:25:11:6e:dc:1b:a8:29:d0:93:4d:de:10:8d:67:0b:54:
6c:40:03:74:18:8a:89:78:34:68:df:25:f2:55:31:79:65:0b:
67:fd:6e:3e:76:3d:80:f0:2b:1b:23:42:8d:c2:31:c3:c9:fb:
58:07:39:41:9a:4f:52:3d:44:7f:2c:2e:7a:57:e2:c3:45:f7:
50:8c:76:f9:5d:99:96:ea:60:eb:26:06:87:50:e9:8d:1a:2a:
a3:ea:64:76:ea:ee:a3:2c:fe:f9:cc:b2:49:e5:0e:ac:5d:0b:
05:87:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:24 2025 by rpki-client