Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json)
Hash identifier: x5ysWCgfBdg2p7+A/TVvJc/+LguD1w4dDYw3n4/e7D4=
Subject key identifier: E6:A6:C1:37:1E:6C:62:D7:E4:D2:C5:20:BF:0F:F0:13:16:B8:98:73
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 0198733D0DDA239417A90EE3AD3F57FA9242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
Manifest number: 81
Signing time: Mon 04 Aug 2025 04:00:37 +0000
Manifest this update: Mon 04 Aug 2025 04:00:37 +0000
Manifest next update: Tue 05 Aug 2025 04:00:37 +0000
Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: 0Gwf17Bn8bn7rmWESdtexoQ1UuWI1t2nZnXIcJRxgJ8=)
2: KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa (hash: h7WOd3FoOyE3z3s6Su64D7SfxJalvzda0YokBEiVb1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:0d:da:23:94:17:a9:0e:e3:ad:3f:57:fa:92:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Aug 4 04:00:37 2025 GMT
Not After : Aug 5 04:00:37 2025 GMT
Subject: CN=e6a6c1371e6c62d7e4d2c520bf0ff01316b89873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:ba:2b:69:38:61:00:cd:86:07:f3:68:5a:
a3:6b:53:f3:d8:32:0e:d0:21:a4:1e:84:87:32:06:
6f:7c:c2:8d:bb:fd:fb:9a:ea:ca:3b:c1:fe:27:31:
58:41:a5:b8:9e:b5:87:ff:31:cd:fd:c7:e8:fb:ec:
7e:c2:a0:53:28:71:9c:e3:a6:dd:12:9b:53:af:f9:
f4:cd:35:e1:aa:c1:bd:90:0b:a8:4b:82:d8:5b:23:
0e:74:6c:70:4d:84:be:c7:78:a2:74:d6:f4:52:d6:
e5:b2:23:0a:eb:79:df:cc:cc:a6:ec:17:5d:9a:49:
bf:13:cf:4b:04:ca:89:3d:26:07:ec:79:dc:23:97:
13:4d:1e:58:f7:f3:ac:ba:c9:20:5f:33:b1:40:aa:
1a:5c:b0:7a:dd:c4:2c:ff:41:d7:dc:56:96:f1:f3:
ef:e0:ef:ff:55:05:3f:c4:1b:f9:99:c4:6c:93:37:
6e:e4:41:ee:4b:14:f5:e4:6d:8e:33:71:24:40:f8:
64:ac:ae:89:9c:d8:4c:2b:46:e2:0b:1f:73:c3:4c:
26:30:12:5f:d4:2f:89:f4:63:ca:0f:a5:e5:4a:7d:
23:43:11:24:66:4f:af:8a:33:9b:87:d0:cc:8c:64:
9e:29:90:0e:ed:da:f3:64:c1:6e:a2:48:eb:fa:d6:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:C1:37:1E:6C:62:D7:E4:D2:C5:20:BF:0F:F0:13:16:B8:98:73
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:ad:a0:35:1e:57:01:21:b8:60:6e:59:2c:d3:c7:4f:ae:
fb:75:c8:fb:67:a8:a2:a9:be:1f:3a:04:be:9f:07:3e:ad:e6:
61:8f:2d:82:a0:bc:70:63:a1:95:4f:05:9b:85:ad:ae:4c:c7:
c6:21:75:46:76:d4:7a:9a:b4:32:fe:90:d7:ab:25:2f:9b:28:
bc:e2:53:75:9c:55:82:5e:81:a7:03:c0:c4:04:b1:5e:22:cd:
ce:50:1c:93:12:64:c9:12:5b:d5:ee:30:34:1f:e0:00:6c:6a:
9d:fd:7d:a8:fd:75:b9:e9:65:4c:b4:65:f4:42:fd:34:5f:39:
e6:42:29:c1:4b:a8:84:7f:e5:1f:4b:37:59:54:65:a1:d7:67:
b9:94:3e:66:fd:1f:c3:89:e2:2d:56:24:0c:03:2a:2b:8d:38:
f1:9c:ea:ac:72:4c:3f:b4:4a:7d:83:d9:89:4c:c8:2d:8d:c1:
1b:92:ca:cc:98:4a:a9:d5:ed:51:73:f8:d3:36:5a:06:e4:37:
b5:a8:05:8f:10:dd:27:4d:61:7c:a5:57:9c:d2:d6:c3:82:58:
da:1c:a9:9b:c2:eb:59:8d:4f:fe:fa:03:be:2d:7a:27:5f:55:
db:39:a0:0d:09:bb:d1:dd:09:4f:f9:fd:a7:fd:19:dd:7c:8b:
aa:0c:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:59 2025 by rpki-client