Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: UOrSPDuPfPRwYGgS3lZT+aoStZlznqk8RG/igfToe20=
Subject key identifier: 6B:F3:A1:F8:63:CE:66:C1:A7:16:13:38:97:B0:48:72:8F:6F:7D:93
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 01987B9C89136F667F18391038E26F93B7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 0F76
Signing time: Tue 05 Aug 2025 19:01:52 +0000
Manifest this update: Tue 05 Aug 2025 19:01:52 +0000
Manifest next update: Wed 06 Aug 2025 19:01:52 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: E0Q5ma+3zkSlonV6sV1eFUSYaNe6zjHZJVdwkUKWp2k=)
2: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:89:13:6f:66:7f:18:39:10:38:e2:6f:93:b7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Aug 5 19:01:52 2025 GMT
Not After : Aug 6 19:01:52 2025 GMT
Subject: CN=6bf3a1f863ce66c1a716133897b048728f6f7d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:40:fd:e9:50:8b:53:a9:c5:15:a3:7b:59:
fb:a2:87:62:19:7c:9e:3f:fc:e2:11:31:e6:a6:ab:
ec:2f:0f:42:23:34:13:85:f7:34:5b:43:2b:e5:3f:
e0:90:91:47:8a:d2:d6:15:0b:8b:09:0e:69:27:a0:
b6:d0:3b:f1:fb:dd:0f:9b:16:8e:6e:d2:5e:02:fe:
17:ae:92:49:18:86:a9:74:2a:6d:6b:1c:cf:74:3d:
80:e0:d7:6a:7d:4d:05:6c:cf:80:1a:d2:95:79:42:
68:f3:72:61:1d:63:df:f0:30:5a:13:53:6d:84:01:
42:80:42:8a:e7:4e:db:65:f7:0c:61:ed:44:6a:7d:
e2:0a:82:b0:03:33:d9:36:76:58:ee:40:3d:5e:44:
b0:81:c7:26:67:3b:a5:2f:10:40:72:15:85:2a:0e:
96:18:60:c9:c3:a3:2f:ed:49:1b:8f:b9:52:81:00:
45:49:2b:71:b7:42:0e:93:ae:bc:4e:4a:20:b0:9c:
bc:3c:11:6e:e9:8a:3d:f4:83:a2:ed:6b:48:d8:3d:
b6:2f:8b:b4:5e:1d:43:7c:ba:f3:22:99:81:0e:15:
1e:e9:36:c8:ec:12:bd:f2:95:9f:8d:42:b7:2b:77:
6f:6b:24:22:3d:99:c6:f3:c9:08:52:89:dc:74:81:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F3:A1:F8:63:CE:66:C1:A7:16:13:38:97:B0:48:72:8F:6F:7D:93
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:b6:2f:0e:2c:9a:12:b2:7e:af:52:ac:73:d9:02:af:bf:
9f:bf:25:ce:d7:ef:b4:46:00:9e:f9:96:6d:b2:e1:4f:d1:e6:
2c:7e:0b:38:79:a8:14:35:fc:43:a4:cd:24:58:31:6a:de:61:
e5:47:da:0a:e1:3c:c5:c1:84:75:c5:6a:5e:5c:55:63:ab:9c:
b5:17:12:df:22:a8:06:69:c5:d5:97:35:3c:d0:84:be:ed:ac:
80:73:ca:8c:e0:85:2f:ad:09:b2:07:b5:e3:32:5d:99:06:49:
0e:7c:02:a9:a5:32:b5:23:6a:00:5e:77:84:fd:87:12:a3:da:
bb:9d:cb:27:90:58:c0:c9:8c:de:d2:ad:be:31:bc:bb:39:e8:
21:b7:38:da:29:39:3a:eb:81:f8:3f:60:d9:5d:d2:e2:05:74:
1b:30:84:33:6e:30:97:d8:12:74:5a:e3:f9:39:7c:da:30:38:
2b:db:a7:96:01:ae:50:ba:ab:30:4f:c3:b3:74:65:9c:54:bf:
e5:03:7c:da:de:77:ec:17:2b:c0:2b:c4:79:0c:0d:d8:7a:05:
92:f0:f5:0f:1f:7e:c8:16:ca:59:09:f4:1b:a1:f8:ab:1d:12:
1a:c7:a9:bf:ec:7f:30:dc:75:3d:cd:8c:50:a7:8e:e6:81:d9:
83:51:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:04 2025 by rpki-client