Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: jvpNTMRQsslom8zL8bUWH7+Qg4PKpyXsFpY/HVzwAqk=
Subject key identifier: FB:23:8F:50:FF:C5:93:C3:17:1F:0C:68:54:0C:C3:68:18:8A:CB:68
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 0198752BD835669F4013BB6D5F339CECEB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 13:01:04 +0000
Manifest this update: Mon 04 Aug 2025 13:01:04 +0000
Manifest next update: Tue 05 Aug 2025 13:01:04 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: /NIdYciHsX70CC/x8wHb4mBhqei0C1giGtFcDq8QvFQ=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:d8:35:66:9f:40:13:bb:6d:5f:33:9c:ec:eb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Aug 4 13:01:04 2025 GMT
Not After : Aug 5 13:01:04 2025 GMT
Subject: CN=fb238f50ffc593c3171f0c68540cc368188acb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:6a:9a:fc:c3:fc:01:36:4a:48:b2:bb:96:
61:a0:44:8b:86:db:78:bb:c1:12:40:42:82:cf:63:
7c:c8:58:c4:e5:21:5f:7e:e2:a1:0a:8c:79:1e:da:
5e:97:86:6a:8c:40:af:6d:fd:4a:83:df:59:3e:c9:
0c:d8:84:29:1e:90:a0:43:db:69:c0:87:10:7b:6f:
2b:a6:17:51:bc:29:ce:88:95:ee:c1:17:88:7f:af:
c9:1d:90:58:c6:18:d7:a3:d1:0d:ef:ae:b1:cf:2e:
be:4e:09:bb:b8:6c:2b:04:11:cb:d2:bd:ed:45:0f:
f9:a0:51:05:45:80:76:43:4f:2b:6a:9e:22:c4:16:
e5:b9:1f:9f:ee:71:43:91:8f:98:0c:1c:ef:98:4d:
58:82:85:3e:ac:6e:3b:aa:42:25:db:ef:26:a9:db:
ae:6f:61:a7:36:01:43:9c:c2:7b:de:0f:5a:bb:d0:
39:c0:65:ba:1f:31:b2:ab:13:cc:c7:5b:9e:d8:b0:
2d:c1:f5:d7:75:e2:83:3a:30:b4:ff:3e:f9:d8:21:
80:fc:19:fd:df:b5:cc:87:49:92:b5:98:a5:94:48:
96:43:b4:fe:31:ef:80:c4:7e:75:c3:cc:74:d0:cd:
ce:9d:30:37:9d:ae:29:8a:a6:56:43:ea:5c:9c:b6:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:23:8F:50:FF:C5:93:C3:17:1F:0C:68:54:0C:C3:68:18:8A:CB:68
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:97:cc:70:25:44:09:85:b0:45:ad:fc:52:18:40:20:f7:
1d:89:f4:7d:23:60:b1:9a:61:44:9d:66:ed:b1:74:6c:03:8d:
5a:17:04:62:f9:7d:72:f6:5f:2c:7f:10:43:a6:18:70:82:49:
21:e5:bb:3c:d3:fd:6d:6b:5d:a2:20:91:4b:6b:90:b4:1a:9e:
ef:02:1d:17:e1:70:56:63:cf:b5:7a:66:58:e7:eb:48:d5:65:
e0:b5:30:01:92:b5:79:39:25:55:d2:11:2b:2f:4a:a3:1e:1b:
3b:d9:e2:b7:81:66:3b:b2:8d:34:ea:5c:94:aa:5a:66:f5:f9:
31:ee:02:f9:0c:9c:a7:b9:03:b6:23:c5:bb:2b:23:a5:38:c7:
12:7b:d6:93:9c:fe:78:fd:3a:36:86:f1:66:32:e8:8c:b7:67:
0a:e7:18:20:6e:6f:2e:72:74:c6:6a:55:ba:97:f2:64:7d:75:
d9:58:e4:c4:65:80:d4:ea:b0:07:8b:7e:fc:be:83:3f:cf:4d:
b4:41:df:b2:99:d7:66:a6:2e:b4:62:91:06:9c:05:c8:80:3c:
e5:8b:a8:3c:a1:e3:ae:1d:e9:f5:56:76:71:44:fb:d1:9c:18:
55:f2:30:0b:18:91:37:a3:80:25:93:30:f8:98:75:ea:56:12:
d0:20:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:01:30 2025 by rpki-client