Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: CB1rnTsu7FKqEcNCLQIU0kGeyDJyT8+OcOdX27OH2+Y=
Subject key identifier: 62:AA:56:39:3D:96:E9:68:1C:52:A7:AC:C5:98:86:17:1A:7F:2E:73
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 01989749B6D39FF5058EAC94483CCD229D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 09F2
Signing time: Mon 11 Aug 2025 04:00:47 +0000
Manifest this update: Mon 11 Aug 2025 04:00:47 +0000
Manifest next update: Tue 12 Aug 2025 04:00:47 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: Io1o2z7YNyoe6AOpE8K9y8l1+J/hrL9PK5nnENFhBLA=)
2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:b6:d3:9f:f5:05:8e:ac:94:48:3c:cd:22:9d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Aug 11 04:00:47 2025 GMT
Not After : Aug 12 04:00:47 2025 GMT
Subject: CN=62aa56393d96e9681c52a7acc59886171a7f2e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:d7:9c:ce:7b:b2:e8:18:5e:ed:32:c6:dc:
65:e4:24:80:87:ae:f9:7a:1b:60:5b:ee:cb:69:71:
31:64:74:c0:55:18:03:25:79:de:e4:57:cb:74:a6:
19:a4:43:11:23:c7:12:58:9b:6e:0e:85:ae:d4:ee:
70:94:67:84:5d:3d:51:0f:69:37:ba:95:d4:1d:de:
4f:6a:d9:15:7e:cf:c5:22:df:f8:7d:e4:b6:68:81:
2a:4f:26:2a:39:2f:de:0b:3a:82:7e:e9:14:b8:9e:
2a:74:d4:59:6d:00:a4:c8:1e:71:a5:e5:24:7c:c3:
d9:32:e2:13:ba:a3:c5:81:d5:07:45:6b:ca:56:d4:
86:11:83:9e:b3:87:c0:69:5b:f2:d1:6e:f1:d2:7f:
ad:c6:4c:e3:ec:9e:43:33:07:25:7f:05:26:4c:81:
6e:e2:3d:c7:16:52:c8:c1:dc:bf:a7:b9:38:4a:12:
c3:47:8e:8f:c9:cc:97:4e:7a:d0:7c:e0:be:6b:44:
cb:7f:0a:c6:1d:95:82:47:ee:68:60:ec:c1:d9:e4:
96:2a:fc:49:14:78:25:32:ad:ef:ea:3e:bb:e6:32:
9c:18:f3:b5:7f:05:ae:fa:44:58:e2:51:65:67:4b:
6d:36:a2:0e:a3:df:69:1d:cc:e9:bd:bb:56:c1:7a:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:56:39:3D:96:E9:68:1C:52:A7:AC:C5:98:86:17:1A:7F:2E:73
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3d:72:b3:f5:d1:24:04:46:6f:53:42:23:d9:91:11:1f:14:
97:75:aa:1b:76:82:ff:b5:e1:b9:c6:dd:84:bc:41:c3:c9:9e:
85:a2:6a:8d:10:60:5d:ba:f5:51:81:e1:dd:6c:87:1b:a9:a2:
a8:72:87:5d:78:e9:45:e2:5a:57:b2:5e:6d:98:f8:e5:ee:a1:
ee:be:a5:63:a6:ec:cf:26:4e:9d:83:01:d1:e0:20:e6:91:22:
1c:d8:1c:17:92:dc:ae:40:ae:2e:31:4e:32:f5:eb:1a:0d:bc:
38:bb:b9:79:6f:0c:02:f4:e9:72:69:84:3d:95:af:7b:fe:80:
4a:d9:0c:14:61:66:20:a1:d7:85:fc:51:ea:e5:89:17:50:1e:
b0:97:2e:7c:58:bb:9e:b3:5a:31:23:de:75:c2:ae:84:c9:88:
3a:a5:8d:50:d0:aa:11:f0:df:a0:11:e3:97:3c:be:c6:4c:65:
b2:ac:8c:7a:0a:cd:84:ad:55:e8:0b:52:e1:84:60:8b:ca:30:
d4:29:11:98:55:f0:1c:55:3d:80:42:5a:b9:8c:75:1b:87:4b:
2d:75:af:43:2f:02:86:8c:2d:06:c3:6a:3f:bd:a9:16:ae:73:
d3:eb:7b:2a:d8:b3:1c:59:5e:b1:48:53:62:10:aa:14:c8:2b:
9b:31:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:17 2025 by rpki-client