Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: 9g7litwHZipo/2ynet1bkaLLsxa9xz51CnQypMikifU=
Subject key identifier: 1A:5C:D1:68:4C:12:B1:24:D4:18:48:17:2F:5E:66:00:0B:0A:11:C7
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019890DA7E1E9EE25EC1849D21CE59523DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0FCA
Signing time: Sat 09 Aug 2025 22:01:34 +0000
Manifest this update: Sat 09 Aug 2025 22:01:34 +0000
Manifest next update: Sun 10 Aug 2025 22:01:34 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: ZPJewL+hFBpGu5dUHD5BLVVo/4KMV9VO9hIBWpPJ9ek=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:7e:1e:9e:e2:5e:c1:84:9d:21:ce:59:52:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Aug 9 22:01:34 2025 GMT
Not After : Aug 10 22:01:34 2025 GMT
Subject: CN=1a5cd1684c12b124d41848172f5e66000b0a11c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:65:1f:fc:d3:e0:80:63:35:56:ab:37:4f:
db:f5:80:25:ee:ad:37:a7:70:5f:8d:a5:16:9c:e0:
83:28:58:63:d7:36:5f:e2:1c:b2:dc:f7:d9:47:54:
60:24:4b:40:9e:e8:82:42:08:63:0d:20:00:77:b3:
e5:a2:67:5d:fc:56:34:a0:38:4f:ab:0e:b9:24:83:
9e:81:22:5c:d8:e8:43:55:fe:fe:20:4d:a0:96:e4:
db:a2:53:64:a1:ec:6a:f7:17:7e:e9:65:91:4c:6a:
51:bd:af:33:95:dc:9b:0f:b7:eb:95:5c:d7:63:c2:
6a:d5:8d:59:0a:e2:62:2c:d5:0a:da:52:46:85:5a:
c5:26:80:0f:c8:11:ad:3f:a6:37:da:bd:06:39:24:
83:d4:31:f3:5e:e2:df:5c:e3:24:14:0b:15:59:2b:
b9:e1:40:3c:7e:74:b8:88:6b:36:0b:cc:c9:a6:d0:
23:af:41:6c:ed:5d:b1:8e:6a:93:db:b5:0d:23:44:
9b:24:fe:73:96:a6:c1:d0:64:5c:0d:bc:61:b2:c9:
de:bf:93:06:7e:3d:a7:bc:60:b1:4d:70:76:56:81:
70:cd:34:9f:08:ab:f3:aa:a4:c7:f4:c5:0c:c5:67:
34:6e:93:6c:ee:47:27:f4:d7:3b:ef:2d:08:20:c8:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:D1:68:4C:12:B1:24:D4:18:48:17:2F:5E:66:00:0B:0A:11:C7
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:91:65:65:6f:5c:87:d4:4f:85:20:de:f5:c0:98:f1:97:
6a:49:20:50:f4:c0:00:27:45:51:c4:4e:63:af:25:65:e1:01:
28:2e:f2:e7:b7:53:0d:c4:2e:50:66:20:41:55:56:a9:7b:6c:
cc:ee:d8:2b:da:96:4e:d0:b8:65:82:e2:ee:6f:bc:05:f7:41:
de:6a:f6:4e:cb:de:fe:44:10:ac:d7:7f:eb:7d:43:0e:c5:94:
e9:bd:5f:81:ac:cb:c1:ac:67:40:1d:dd:99:ec:bf:c2:54:81:
fc:6d:6b:1c:dc:87:69:f7:57:84:4e:42:bd:48:90:69:2e:24:
5d:97:b6:f0:f3:09:6d:65:ce:52:fa:0c:5d:21:1a:a5:1b:a2:
11:b9:e4:47:e0:bd:10:97:7b:c4:ad:f2:4d:09:86:79:7f:4c:
e5:6c:8e:32:6e:5a:49:94:82:ca:5b:aa:ca:54:3e:0b:40:a3:
63:24:86:e7:bd:69:29:ad:a9:1f:ed:b7:e9:53:7b:1b:77:84:
df:81:f0:d9:f5:90:80:b5:42:03:c3:1e:a2:ec:e4:e9:a4:56:
fd:21:4e:03:3c:10:8f:b3:35:41:02:55:fe:fb:44:16:c5:a8:
8f:94:fc:3a:bd:b5:87:b7:09:a9:2c:24:54:86:f1:07:2d:2f:
13:ba:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:47 2025 by rpki-client