Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: lg11npGw8msqplssipX9oqP4EQX887K5rwfU3u00Ckw=
Subject key identifier: 4D:E0:D1:6B:CF:F4:A1:9A:D6:EC:80:72:79:5F:E5:0B:C4:18:F7:14
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019882798BE30E11740E1030A5A41FEB65CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0EF1
Signing time: Thu 07 Aug 2025 03:01:00 +0000
Manifest this update: Thu 07 Aug 2025 03:01:00 +0000
Manifest next update: Fri 08 Aug 2025 03:01:00 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: BuH8/aBSeoB10f4k/zGIxeADgHC8g/MvK2LFUdmSBtk=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:8b:e3:0e:11:74:0e:10:30:a5:a4:1f:eb:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Aug 7 03:01:00 2025 GMT
Not After : Aug 8 03:01:00 2025 GMT
Subject: CN=4de0d16bcff4a19ad6ec8072795fe50bc418f714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:ec:7c:8e:95:3a:a5:da:87:5e:6c:fd:5f:
29:4d:90:9e:03:16:cd:64:49:f7:03:b1:4c:5e:25:
72:e8:9a:d3:36:2f:3a:c9:69:63:e9:ee:a7:9a:36:
2a:72:36:b6:12:4c:a4:11:67:de:49:fc:02:9a:37:
c8:b5:0b:9b:05:66:72:25:f2:9d:b6:bf:09:98:ff:
81:7f:e2:82:4c:64:8d:02:7c:6f:e9:61:22:c1:31:
87:9b:8f:67:a5:f7:08:77:40:c9:49:b4:a7:98:fe:
23:90:03:77:f1:e0:48:64:78:45:be:3c:dc:4f:b9:
cd:8d:9d:20:15:1e:54:2f:6e:f7:1e:cb:a3:1b:f9:
57:47:2a:2a:3c:25:c6:6c:b6:4d:ec:c6:22:98:12:
95:ce:88:d5:3c:61:6b:dd:a7:a9:2c:d9:1d:76:59:
c6:79:cf:5c:a1:49:77:ae:32:62:08:31:2f:ab:83:
03:00:7f:5c:01:6a:34:50:70:c9:56:cf:9b:db:39:
44:50:0e:c2:1a:05:c7:93:24:dc:84:93:fc:de:a9:
b1:87:aa:0b:c6:81:e1:e2:4c:0d:dc:6e:01:c2:47:
b2:64:7d:cd:0e:59:36:3d:79:9e:36:d9:8e:5f:dc:
ae:aa:35:9a:68:6e:22:6a:58:7a:05:e4:e4:20:7f:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:D1:6B:CF:F4:A1:9A:D6:EC:80:72:79:5F:E5:0B:C4:18:F7:14
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:cd:dd:dd:5e:22:dd:aa:83:bf:c3:0c:5b:94:75:df:e1:
d8:a8:51:2a:4c:c3:56:34:7b:3f:2c:ea:de:42:66:b8:8d:bd:
2f:28:45:85:bc:86:ac:12:de:3d:dc:d1:0d:99:35:20:6d:30:
43:9a:39:68:ca:0e:f6:43:60:82:2e:f6:ce:e5:66:8d:9a:1c:
35:36:be:db:5f:c8:39:8f:d9:c0:ce:16:4f:3b:37:89:44:39:
a0:cc:01:7b:5a:ef:42:76:43:72:a1:0f:4d:04:ab:db:4d:d6:
c1:fd:91:62:e8:f3:66:e5:46:0b:79:45:a6:36:31:75:1b:b5:
01:62:b8:59:fd:34:40:b0:57:6e:25:d8:12:95:8d:36:20:e0:
7f:58:d0:b7:e3:00:c0:31:dc:c6:66:ec:73:ed:87:27:a0:5c:
62:1d:74:95:9e:24:28:73:7c:37:24:76:b0:42:40:2c:87:bc:
51:8c:fa:0c:27:d9:4d:3a:93:24:a6:08:70:0c:b0:51:51:ea:
d0:d1:38:f3:62:bf:a2:cb:9a:ca:19:47:2e:e6:3e:1e:30:06:
24:1f:44:df:71:20:4f:8e:58:1c:82:0b:6b:b3:72:5c:b3:5b:
49:3e:16:7b:3f:74:dc:f1:1d:05:d3:3b:b2:bd:78:51:3b:44:
02:e0:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:28:40 2025 by rpki-client