Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: dP7LyDt87MaHwAcqtxqxB6zWU5EEm3ytID1bv67gTsA=
Subject key identifier: DB:AA:03:97:AF:62:D8:DC:1B:29:31:88:0E:94:8C:55:E8:AD:8E:F1
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 01988B458F57030F88FF09FD0A165E5B5A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 109B
Signing time: Fri 08 Aug 2025 20:00:48 +0000
Manifest this update: Fri 08 Aug 2025 20:00:48 +0000
Manifest next update: Sat 09 Aug 2025 20:00:48 +0000
Files and hashes: 1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=)
2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: w3Omx5YIvbsnoxKzI5HcVFyRj313+NW3Wp8QNpWd54Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:8f:57:03:0f:88:ff:09:fd:0a:16:5e:5b:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Aug 8 20:00:48 2025 GMT
Not After : Aug 9 20:00:48 2025 GMT
Subject: CN=dbaa0397af62d8dc1b2931880e948c55e8ad8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:0b:2b:67:d6:4a:8e:7d:42:4a:08:b5:7c:
ee:9a:23:0c:bd:79:e1:24:80:8d:c0:cd:dd:47:b0:
12:64:61:46:d2:c5:b9:6e:53:68:81:10:e0:58:5a:
bf:52:f3:6f:8e:50:c7:31:29:99:6d:84:db:fc:ed:
96:0d:55:58:f8:4c:45:8c:20:37:23:6c:5c:f9:2e:
2e:a0:1e:59:fd:23:f7:85:3d:d1:77:94:d3:a3:58:
74:7f:1e:d6:ae:bc:1e:c3:ba:a0:cb:13:c5:69:39:
13:ba:44:f0:15:8b:2b:e0:72:5e:99:40:38:38:a6:
1b:41:2a:9f:ef:42:12:21:c1:43:2b:22:c6:f2:35:
d2:ee:52:fd:36:3a:e2:fc:79:92:fc:5b:cd:1a:35:
eb:2f:4a:6c:b3:1c:66:4a:d9:49:84:9c:d9:a5:d7:
b1:1e:97:0b:eb:4b:95:8b:0e:e7:9e:ee:71:bd:9c:
3e:4f:6e:f4:6a:df:e6:fd:04:6f:38:08:e1:2e:e1:
bc:fa:1e:a6:f7:f2:19:5e:c7:7b:8b:b9:d0:99:58:
93:61:a3:e4:0e:aa:eb:ce:b6:5d:a9:c3:c1:2e:4f:
35:8d:ac:04:0c:38:8d:aa:3e:9a:25:48:4d:ed:50:
1d:71:71:91:98:c4:2c:9b:57:4d:bc:62:17:9d:98:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:03:97:AF:62:D8:DC:1B:29:31:88:0E:94:8C:55:E8:AD:8E:F1
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:47:fb:39:49:f2:9b:3d:94:48:39:9d:b9:f2:60:df:f9:7a:
8f:10:27:93:36:f8:fb:0d:32:1a:2d:f3:ee:59:08:e0:09:9b:
77:21:c3:15:5d:60:79:4a:f0:ba:60:60:16:62:12:98:f8:b9:
46:5c:53:13:f8:e7:d4:ae:21:9a:09:cf:6a:90:5a:21:17:52:
24:51:ad:83:fd:c1:8a:e4:50:b4:fd:0c:eb:6e:2d:2a:0b:ed:
57:eb:8e:13:ef:10:aa:08:c4:a9:ee:23:dc:44:01:bc:5f:c4:
d5:1b:b3:37:31:5f:1e:d0:26:d7:82:f5:cc:c9:50:71:39:3f:
20:0e:0c:78:2b:77:00:dd:8a:f5:83:29:20:2c:e8:20:54:3c:
2f:dc:79:3d:c5:7e:ee:5c:30:f9:bc:8f:81:0c:86:42:ae:81:
53:83:8f:28:11:88:88:50:a4:10:3b:7a:f0:60:59:09:dd:48:
b2:32:8e:b4:4b:52:6e:d7:d3:1b:b7:fd:01:d0:e1:2f:86:35:
d9:69:9a:33:3e:2f:44:b3:bd:4b:eb:3b:00:d8:ce:65:92:bd:
4b:8b:0c:1d:e1:68:b8:95:eb:f5:c8:20:62:f1:bb:57:7c:23:
35:b4:38:74:80:25:6d:46:7c:69:77:cc:2e:42:b1:e1:49:f1:
68:30:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:09 2025 by rpki-client