Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: qFqSWKAygQ7JOfr3O3goxvcsJ6zDXXWUe5m4XWx3dFg=
Subject key identifier: 45:78:18:F5:DA:29:30:CB:DB:31:7D:7A:A6:BF:38:8C:7A:7D:B0:1B
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 01989713724EE793EABF633307CFE7D7FC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 03:01:30 +0000
Manifest this update: Mon 11 Aug 2025 03:01:30 +0000
Manifest next update: Tue 12 Aug 2025 03:01:30 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: IOd58YVVaQzYt5zHmdHxTBhEr+kaxnupm/usy4d+cKg=)
2: hbj2DwbTO4-tmysNHMyxl2vxyPM.roa (hash: W6g4GPDJbcaX24i4+eflWzczpsq5sBQlzCM+vJ6ScIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:72:4e:e7:93:ea:bf:63:33:07:cf:e7:d7:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Aug 11 03:01:30 2025 GMT
Not After : Aug 12 03:01:30 2025 GMT
Subject: CN=457818f5da2930cbdb317d7aa6bf388c7a7db01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:f5:39:e7:e8:27:20:b4:a9:a7:6f:ce:96:
6c:d5:7a:05:94:62:71:68:4d:62:38:a1:9a:32:b8:
6d:75:bc:18:41:1a:03:0a:95:fc:5b:3b:89:e2:28:
7a:76:ba:be:2f:cc:00:e6:13:c5:50:5d:5a:20:ed:
8c:af:1c:4d:24:39:06:e5:c3:9f:00:db:25:a3:f8:
bc:46:78:be:19:76:99:98:50:f7:83:81:26:61:33:
40:da:fa:c7:f9:d0:7b:ef:d3:db:3f:35:ca:29:b8:
ba:bd:8e:50:8d:e1:bd:1b:88:1e:25:6e:16:a3:4a:
f5:c2:5f:9c:bd:8d:48:d5:e1:01:26:82:ec:4f:df:
21:de:b7:63:18:11:4f:1e:98:07:49:47:42:bc:59:
e5:77:c8:37:0e:40:84:a2:69:0e:8c:57:e0:a6:e7:
9b:14:95:78:d5:11:63:44:96:a0:b3:1c:15:f0:af:
21:17:ee:f0:51:d5:8c:24:ef:9e:56:e5:09:b2:55:
1a:3c:2e:99:12:de:72:29:82:da:a0:86:ff:69:d5:
81:e7:e1:f9:9b:b6:fb:67:11:0f:ab:18:c6:08:99:
44:22:96:07:a0:2d:f3:33:37:40:df:11:7b:34:76:
e0:da:fb:61:30:15:fb:95:25:bf:a7:71:52:74:bf:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:78:18:F5:DA:29:30:CB:DB:31:7D:7A:A6:BF:38:8C:7A:7D:B0:1B
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0a:d7:b5:5c:dd:c9:5b:20:18:76:63:dd:f4:39:cd:25:1d:
90:f5:4b:e0:4e:9c:6d:b3:91:27:10:23:64:ad:f5:a9:d6:77:
e9:4b:53:3d:09:ae:26:2a:83:56:a1:4e:e0:b1:8a:9b:77:62:
9c:32:2f:f3:7b:6a:01:4d:35:aa:9d:18:bc:d1:0e:01:ad:34:
44:a0:ce:fb:f2:d2:51:2c:9a:bb:2c:83:0b:65:ff:ab:af:9c:
85:2c:7b:1b:dd:49:37:44:c3:1b:de:fa:e8:b0:29:0d:fb:e3:
18:eb:3b:a4:65:ee:55:fa:d7:80:2a:46:84:29:73:38:b3:3d:
a3:0a:5c:91:91:06:d0:e8:1d:59:7b:08:4b:73:50:c6:94:7a:
53:f1:87:cd:a9:12:5d:d8:62:e1:76:4d:e9:a6:ce:0b:1a:59:
f4:cb:b3:93:c0:da:92:ae:5a:4d:84:d6:1a:cd:ad:38:da:47:
95:da:96:4b:f4:b5:ce:8c:54:43:5c:71:8e:8b:38:d0:0f:54:
8d:01:8f:f4:21:49:62:f3:30:9d:89:ca:85:52:68:3a:f0:ad:
0b:bf:92:23:40:e0:cf:d2:d0:19:e5:09:6a:a9:af:92:f2:0e:
ee:f9:72:e9:5c:9b:47:8c:9d:77:f9:c3:38:6a:32:d4:f6:a9:
9a:72:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:10 2025 by rpki-client