Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: FMMqmnAC/qW3PrmNmdyZXVr6oAyvk6r0y6KiKNu4l6A=
Subject key identifier: AB:9C:87:D2:39:74:96:91:04:D3:A5:47:57:AB:CA:8C:70:7D:5D:F1
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 0198812FA91B0E432B06155B5C2D24FB6044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 21:00:40 +0000
Manifest this update: Wed 06 Aug 2025 21:00:40 +0000
Manifest next update: Thu 07 Aug 2025 21:00:40 +0000
Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: izHpu8X6spHwv0X+xr05M72zbKMrM4nkV3Zbs5YsRoo=)
3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
6: S-JnIhmXL5e2DsjQFgno_k2Vz8E.roa (hash: /YQsaxBTg9/GiAQu4cI2KHBUoCqKcZjkOS7l2+NOeWg=)
7: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
8: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:2f:a9:1b:0e:43:2b:06:15:5b:5c:2d:24:fb:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Aug 6 21:00:40 2025 GMT
Not After : Aug 7 21:00:40 2025 GMT
Subject: CN=ab9c87d23974969104d3a54757abca8c707d5df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:db:e4:1b:4a:8e:bc:e4:a6:cc:09:36:d7:
0a:cf:c3:fb:7b:cc:32:4c:ce:b7:db:ef:69:20:c9:
b8:a1:b3:e9:a0:f9:5c:b5:a1:69:b1:07:cf:81:54:
51:07:3c:88:2a:23:49:d1:96:cc:a6:97:95:84:86:
4d:23:c2:0b:8c:63:7c:fc:c9:e9:01:c3:a7:8e:de:
2d:8c:50:52:93:ff:78:ad:99:a7:cd:f2:ac:01:ea:
03:27:da:a6:67:3a:27:8b:6d:6f:ca:a0:85:bc:a9:
dc:75:70:fa:82:70:2f:58:ec:51:c9:b5:54:5b:bd:
d2:39:70:c4:e7:90:2f:6c:85:a2:bc:6e:01:94:2c:
72:2f:ec:db:d1:5e:4e:0c:e0:a2:4c:89:d6:80:99:
cb:b4:00:cf:2e:cf:f3:23:f5:ce:a3:9c:62:9f:f3:
64:86:d6:65:7c:57:31:c8:1d:a9:ca:d4:f2:34:db:
ad:e1:87:59:f7:f2:c2:92:53:ba:85:c8:2d:d9:a2:
ad:15:6d:28:5a:53:5e:8b:34:cd:81:e8:4c:75:e7:
2e:64:fc:c8:21:ad:95:d9:c7:e9:a4:70:3b:a4:5b:
cd:cb:be:8b:a2:2d:5a:1c:42:4f:f8:33:24:f2:3b:
2d:d8:1a:fa:71:3d:1c:ab:67:9c:59:5a:68:9e:48:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:87:D2:39:74:96:91:04:D3:A5:47:57:AB:CA:8C:70:7D:5D:F1
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:7a:e5:82:47:fa:46:e1:fa:e3:27:a6:7f:f6:a1:21:7c:
0a:d3:a5:09:55:74:ce:8b:e4:06:48:1d:08:ec:74:20:95:f8:
93:1e:10:35:db:bf:92:ac:89:a9:5e:a8:54:f2:ac:01:a3:76:
99:74:3e:c5:de:8d:4f:7f:b5:03:5a:3d:9e:d0:17:89:4d:9a:
8b:53:41:16:21:48:dc:67:f3:97:81:57:99:01:87:e5:ba:7c:
e5:f3:9d:97:c4:a0:84:e6:c1:59:62:d8:e4:44:d3:f2:50:6d:
bb:75:d7:56:d1:b4:fb:74:4b:c1:c0:94:c9:56:9e:be:8d:96:
0c:44:a7:e8:68:7c:07:74:92:35:86:9e:26:e4:d3:56:36:d0:
d9:02:d0:76:53:ab:0d:ce:58:4e:32:2c:45:1f:da:95:c2:78:
01:95:d8:a7:c8:30:df:d3:bc:20:7e:88:27:b1:84:d2:bc:51:
38:1d:c1:96:86:e9:b4:05:19:ab:62:a5:31:46:b7:ce:35:39:
25:c9:ac:da:e0:e0:33:e9:c1:8d:d0:b8:33:11:f7:a4:03:2c:
75:bd:35:6f:58:4d:37:39:aa:60:49:c7:01:bd:a7:5c:ea:8a:
62:bf:38:c4:c4:11:2a:76:8a:74:ee:46:ec:ac:3c:99:41:99:
16:ec:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:39 2025 by rpki-client