Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: X0tnzu5F0E6uRti7PDfsoTeP6Q/6K3nzHfjpnk59mPw=
Subject key identifier: 2F:98:C8:70:7E:73:C2:23:10:22:1C:8B:7F:10:93:30:E0:06:D4:BA
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 01987C40BDCE246AC8084BB60AC91549EF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0F04
Signing time: Tue 05 Aug 2025 22:01:14 +0000
Manifest this update: Tue 05 Aug 2025 22:01:14 +0000
Manifest next update: Wed 06 Aug 2025 22:01:14 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: C81zDCWHG77Zmi5/Oel7c8bTPv4fzbVLKbfyhyUIONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:bd:ce:24:6a:c8:08:4b:b6:0a:c9:15:49:ef:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Aug 5 22:01:14 2025 GMT
Not After : Aug 6 22:01:14 2025 GMT
Subject: CN=2f98c8707e73c22310221c8b7f109330e006d4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:d4:bb:5c:b6:41:4b:1f:36:26:e2:16:74:
67:e8:3b:f5:63:0d:5d:29:55:39:e3:9b:6f:59:f9:
6a:25:bb:f4:f5:45:cf:18:2a:9c:59:7b:da:d1:1d:
83:b0:72:04:17:8a:a7:e7:d1:2b:f3:be:34:df:da:
e1:29:8f:bb:3f:b2:f6:c7:28:58:d6:d7:f0:2b:7d:
b7:d2:c5:85:0e:68:76:f3:29:ad:35:58:df:bc:fd:
20:7d:86:c4:69:be:67:98:cc:e6:4f:71:6a:82:36:
ff:69:c9:10:e6:10:7d:3b:a0:3e:1d:41:d8:14:61:
ec:ba:62:d8:b6:e4:c5:50:74:10:18:2e:3f:77:08:
24:01:a7:81:32:ba:5c:12:ff:9e:2d:fb:07:0e:12:
2a:03:14:60:1f:20:97:50:a8:06:19:86:13:bd:ca:
70:9d:7a:ea:2b:99:67:c2:4a:c4:d0:93:ed:4e:25:
25:6e:7f:21:51:44:73:78:b6:b6:6c:be:ae:ae:5f:
cf:ac:46:3e:d8:88:ff:5b:d3:f6:e8:4e:6d:dc:ad:
a1:b7:89:b9:fa:56:57:df:cd:44:67:92:a8:b7:d8:
e6:b3:e6:99:07:ba:fd:38:3a:b8:fb:51:2d:6e:b4:
62:c6:00:34:2d:f5:da:80:2e:8c:61:fe:58:77:98:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:98:C8:70:7E:73:C2:23:10:22:1C:8B:7F:10:93:30:E0:06:D4:BA
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bc:e6:33:da:e9:32:09:e6:a4:a6:49:0a:cf:6a:c1:f5:3d:
87:3c:3a:7d:10:bc:4e:00:36:3d:07:e5:70:5b:34:22:7b:2c:
0c:ac:81:ee:8b:5f:cf:48:52:8a:eb:6d:fc:4f:5e:0c:a6:0c:
31:39:eb:da:33:4d:d8:db:a3:12:49:b2:5b:25:9e:e9:32:68:
b6:f9:04:c4:e9:73:e6:b7:a0:2c:8a:7e:51:cf:b4:73:d0:f2:
e1:06:f9:cf:13:55:f7:cd:e4:de:eb:15:fc:14:95:86:4e:1c:
e0:6e:46:81:ec:d6:2b:18:e6:80:df:28:1b:d0:f5:dc:47:8c:
be:8e:40:6f:a7:0d:c1:6e:3b:14:76:ce:ae:e0:09:87:3c:94:
cf:48:da:3f:78:b1:08:ac:aa:cf:7b:cd:bd:95:f0:00:f6:bb:
75:fa:f9:3e:86:18:3e:15:59:2d:1d:05:c9:f2:45:85:88:47:
7c:f7:bd:a4:e0:9b:a7:1a:38:a2:9b:35:e4:a6:f7:73:60:88:
6d:e3:0c:c3:b5:73:b2:6d:46:bd:2b:97:e3:aa:0a:85:49:07:
f0:68:cd:7f:52:7c:4d:25:ef:5e:9f:87:3f:a3:36:81:68:9f:
35:33:61:fe:dc:47:b7:41:91:ce:ae:f1:15:7f:af:20:14:ff:
10:a5:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:56 2025 by rpki-client