Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: m/PCUngeR+X/KaoACfH0WVvsBVAlcXhN5PpPGSN2n4c=
Subject key identifier: 0D:BC:19:94:83:BB:C5:9F:D7:8A:9C:14:88:71:CE:0C:99:63:8A:28
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 019894119E27BAD79EB4A72D609E83BD9F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 12D5
Signing time: Sun 10 Aug 2025 13:00:39 +0000
Manifest this update: Sun 10 Aug 2025 13:00:39 +0000
Manifest next update: Mon 11 Aug 2025 13:00:39 +0000
Files and hashes: 1: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: j+lpPyFnlPDuDrdf5+7fzuj3e21a8/eC4isHzkU45ec=)
2: kIzUAPC0DdQ_FT2bfHdyL_f4yoU.roa (hash: rSGry/QGGACqFb/sa5t28CBZOiur+so7pmuHdYgh5Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:9e:27:ba:d7:9e:b4:a7:2d:60:9e:83:bd:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Aug 10 13:00:39 2025 GMT
Not After : Aug 11 13:00:39 2025 GMT
Subject: CN=0dbc199483bbc59fd78a9c148871ce0c99638a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:55:f0:ed:7f:b6:a5:06:e2:ba:7b:c2:85:
0c:91:7a:ff:d3:6a:d7:43:77:dd:4d:53:78:df:ca:
c8:2e:6b:72:49:6c:02:89:c5:f2:8c:27:da:16:60:
05:79:a5:07:c8:cb:5d:41:a8:d7:90:d7:08:e5:0e:
9a:37:11:6a:d3:9b:21:0d:1f:a0:69:5c:aa:aa:3c:
05:57:1b:5a:d0:4b:03:cb:d3:f1:01:87:96:8e:e0:
e2:63:cf:42:e4:0e:53:a0:8e:0b:06:78:70:93:42:
15:34:c0:a9:28:ed:d1:98:e4:c5:2a:f8:08:d4:56:
35:47:63:ea:29:16:84:78:92:1a:88:f5:82:c4:8b:
85:00:45:64:76:77:08:0c:6e:3e:dd:2c:84:5f:8e:
20:8c:ea:9d:8e:e0:cd:29:75:eb:88:67:22:07:9a:
97:94:e9:3c:b5:d4:d2:6a:d8:21:29:c0:53:23:88:
81:60:d2:b2:21:07:6f:3d:0b:a7:88:68:e8:19:0c:
71:61:69:af:34:d4:0a:43:71:71:ef:fa:76:68:b8:
69:95:c2:95:da:e9:3a:40:3b:34:30:b7:83:9e:c2:
9e:5c:cd:e0:7e:7f:31:ce:e2:27:2f:95:75:cb:3d:
ea:c3:87:8e:cd:31:a1:b2:26:44:c3:a0:d8:50:c5:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:19:94:83:BB:C5:9F:D7:8A:9C:14:88:71:CE:0C:99:63:8A:28
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d1:11:91:90:be:af:a2:30:e2:1a:23:69:72:9b:27:50:ad:
16:25:bf:3b:d9:96:0a:34:2d:08:fb:43:48:79:7f:10:6d:db:
f3:19:dc:5b:3d:65:35:79:bd:2c:ac:aa:20:ce:d3:4f:06:e3:
62:bd:92:46:f5:55:5e:55:9e:59:91:40:18:46:f2:19:5f:73:
87:54:e4:31:c4:04:b9:9e:2d:ec:c2:fd:bc:53:b9:f4:6b:b0:
95:23:35:16:10:ac:55:38:6e:9e:0f:86:c4:fc:12:ad:cf:40:
ac:e6:db:35:c1:79:33:a6:14:e7:ba:fa:a7:f4:98:2c:34:45:
93:e7:69:04:4b:bd:d9:12:fe:26:14:74:aa:25:d4:5b:4c:97:
6d:9d:4d:81:34:b2:fa:5c:02:31:26:4c:f2:a6:21:73:c7:aa:
85:45:91:92:92:98:0c:20:a7:22:43:ab:b0:fd:ed:6a:4e:2f:
d5:95:cb:a5:a1:83:6c:a1:8b:d9:38:30:7e:c7:90:b6:43:92:
e9:be:d9:c9:cc:c0:3f:cd:45:f5:b6:10:09:da:2a:a7:ef:18:
eb:00:20:48:25:b7:41:d7:ac:67:11:1e:03:9a:95:8d:37:be:
4e:3e:a0:82:06:98:b0:ca:e0:18:0a:d2:64:d0:1f:14:7a:44:
ba:e8:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:54 2025 by rpki-client