Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: Uzb6pIs+Sht8Py+wKDo57hu5wxyMMbRwrU7/dD9yHPM=
Subject key identifier: DA:41:8F:DF:79:F6:AA:6E:07:56:AC:3B:C6:13:84:40:38:EA:F2:03
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 01987306E151236054AD8622DC9732C1F641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 03:01:27 +0000
Manifest this update: Mon 04 Aug 2025 03:01:27 +0000
Manifest next update: Tue 05 Aug 2025 03:01:27 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: vI4DQVW0e897glJEyJQ+qpejgnK31Yr6z62NmOw8Gt8=)
2: tb7zy4gQAH_RQZ4Nz-3NFx59Mbo.roa (hash: oJpg/mpoL0grHs9Xu1Kgy7pPSav+AYmr/wpKbCpQ/O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:e1:51:23:60:54:ad:86:22:dc:97:32:c1:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Aug 4 03:01:27 2025 GMT
Not After : Aug 5 03:01:27 2025 GMT
Subject: CN=da418fdf79f6aa6e0756ac3bc613844038eaf203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:ea:9d:22:5b:b3:28:b3:2d:4a:a1:b1:61:
e2:ed:f7:09:24:30:e5:10:ef:d2:ad:f8:ab:ea:5d:
d7:0b:31:3d:2c:2c:c4:1f:15:13:93:55:ef:cd:bb:
8e:56:0e:97:1e:56:c6:4a:af:c2:cd:b6:37:db:86:
2e:7c:d7:31:ca:8d:e9:a1:6b:ac:31:f1:96:1a:85:
f1:5b:66:5e:13:a5:ad:97:5d:72:51:c0:74:0b:8f:
2d:fb:48:63:50:cc:e0:72:7d:fd:e1:dc:c2:99:90:
5c:e5:ff:57:92:56:56:c1:42:69:0a:5f:4c:4a:25:
d5:40:4f:5a:f3:f9:df:f7:13:50:bf:35:b6:71:79:
d8:7d:94:9b:b0:c6:ee:03:e3:69:59:b7:97:33:81:
52:55:8c:7e:17:b6:3e:40:2a:0c:80:32:10:df:54:
d5:68:3e:97:57:30:2a:a4:d6:d6:90:5c:c1:91:ed:
34:34:12:36:a2:9a:4f:89:1b:6c:08:5b:a1:9b:c6:
9d:63:a8:8a:96:fb:fb:71:f7:9e:a2:47:cd:5d:90:
b3:a7:30:2b:c7:14:46:dd:47:25:43:cd:53:5e:5f:
fe:38:25:70:83:1b:ec:3f:d8:c5:be:56:87:35:7e:
b5:f7:93:07:8b:2d:b1:5d:e8:5b:de:1f:ef:d1:73:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:8F:DF:79:F6:AA:6E:07:56:AC:3B:C6:13:84:40:38:EA:F2:03
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:f7:b6:06:59:87:d4:fe:42:44:f8:d7:e3:ce:7e:e0:0c:
72:45:da:ac:d8:a2:24:7c:7c:41:f9:2d:a5:e8:58:33:39:49:
c3:b2:07:e0:40:14:a4:ed:c6:cc:cf:67:ad:32:50:39:4b:07:
d1:c2:f7:f5:93:9b:ce:fd:af:d4:05:3e:5b:30:e3:85:04:bc:
b9:9c:f2:82:63:8e:43:7a:b2:19:9d:2b:11:e9:a6:40:55:af:
ba:e9:94:d0:bf:98:14:29:fb:8d:7c:2b:13:15:b3:c8:5c:59:
66:e7:be:e8:49:ba:58:99:eb:63:e1:2b:d8:39:24:7c:59:25:
74:6b:a3:1f:d3:1c:ed:64:c2:19:b6:5c:8d:77:58:e0:d8:07:
9a:43:8e:a4:07:8c:50:6c:af:0d:7d:b0:73:03:c8:ac:30:67:
19:91:00:26:37:c0:67:3c:d4:97:cf:fc:ea:46:18:fb:2a:6e:
04:d1:d3:9b:a8:6b:18:4f:01:04:3f:e7:16:ff:30:e3:32:48:
8b:9e:1a:07:0a:2a:47:af:63:ea:8a:22:01:67:cb:ed:a2:1e:
21:e9:03:fb:82:c2:99:37:a4:b7:49:d6:8c:9d:68:d8:50:92:
3a:6d:bb:a1:17:05:49:27:e0:ca:17:dc:dd:95:b9:94:b5:b0:
24:55:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:01 2025 by rpki-client