Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier: oSHGPtxH5GFssJBzVge7ikG6iQkhVYKYKSVXsG6IAVc=
Subject key identifier: EB:54:C5:0C:17:08:E2:DF:D2:1D:EA:75:43:8F:EC:07:A8:3A:90:80
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 01988BEA978D6E41D162B08B2CB777A4329B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number: 0C8D
Signing time: Fri 08 Aug 2025 23:01:03 +0000
Manifest this update: Fri 08 Aug 2025 23:01:03 +0000
Manifest next update: Sat 09 Aug 2025 23:01:03 +0000
Files and hashes: 1: 17FLk26rZWNpnvEJucbEAG-7zqY.roa (hash: qMmpcRGKwOqOR5+GsVwNkgRbdBAdNorVpaMiale+nXI=)
2: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: cs4iK+m3cdQQ00BhBWp7JDIWdYB4GuSSR+0AfRnfEiU=)
3: bBGzNd5qGUUIPYH3-5zWMnwwyJg.roa (hash: 290Z2J6Jo9xanYpdqpciKr53wSmtU/PW4k3Qs+NnOTs=)
4: k29cbE30TGhu-1q8rRu7-jpqTg4.roa (hash: 9mQL8HUgIQzEZ7MXmoS/sUavd/K/UaaalJ5/ztoLSTk=)
5: s7mUu7WrVHVPJEBCCdi0H3bHpis.roa (hash: ExGJpFM76OJZURK1GFJNiBKKffY4pIrBrUBBm9tcC8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:97:8d:6e:41:d1:62:b0:8b:2c:b7:77:a4:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Aug 8 23:01:03 2025 GMT
Not After : Aug 9 23:01:03 2025 GMT
Subject: CN=eb54c50c1708e2dfd21dea75438fec07a83a9080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:c9:5d:f9:aa:d5:a5:af:8c:67:ca:9e:af:
5a:e1:2e:1d:76:a6:4c:ae:fe:ea:d3:f3:22:4e:00:
cc:3f:2d:e2:16:4a:72:de:72:48:22:9e:3d:ca:f3:
f9:b7:93:bd:04:e1:34:f2:df:37:b4:f9:5d:97:50:
8e:8a:b7:82:1e:a9:01:4b:e6:5a:df:89:d7:79:dd:
68:8f:97:be:da:65:13:dd:d9:65:2d:0c:d6:5d:48:
fe:70:fb:46:b0:34:24:2f:65:d0:13:2c:d8:2c:2e:
4d:cc:4e:1c:c6:2b:48:a1:ac:e5:07:71:2b:1d:9b:
71:32:b2:c9:c8:cb:44:ce:aa:b1:51:7e:97:64:0f:
f1:ec:6b:5b:14:b9:a7:fc:30:32:fe:89:18:4e:a6:
25:28:55:1d:fe:92:de:2f:f6:75:7b:34:09:b0:b7:
53:59:47:7c:9c:b2:e8:76:43:70:ef:5e:11:33:69:
29:f6:fc:8c:2a:a3:e0:d9:55:08:48:26:ae:11:45:
33:25:68:55:f3:18:b0:9f:b2:e9:50:e2:c7:48:47:
d7:ca:23:3d:1a:a5:d7:6e:d7:bd:f2:af:c0:03:00:
d1:fa:56:10:58:75:8b:cf:47:45:ec:95:a6:e4:4f:
b3:9a:5e:fd:4a:b6:2c:d0:c0:6e:1a:eb:9d:31:09:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:C5:0C:17:08:E2:DF:D2:1D:EA:75:43:8F:EC:07:A8:3A:90:80
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:b6:a6:56:c1:0c:0f:76:94:62:a2:f7:21:84:0c:26:96:
d0:92:d1:e6:57:85:83:5d:ee:d3:c2:90:c0:19:9e:9d:78:c4:
8b:b2:88:bb:3c:25:c8:9b:a1:13:06:8f:47:da:c9:24:7a:e8:
d0:2e:ce:c9:09:b3:43:c9:f5:3c:fd:2a:f0:c5:4b:66:d4:da:
61:09:fe:7f:9c:11:b4:00:a9:38:d1:5f:62:09:16:4c:8c:a4:
01:95:a5:6f:eb:71:2f:4e:aa:26:9b:22:85:af:eb:45:32:f8:
2b:c2:24:45:47:b2:50:d2:84:26:22:ad:d9:e4:b5:0a:a7:02:
94:07:ee:c6:0b:cf:09:0d:9c:a3:9b:e3:e6:b0:36:9b:9c:72:
85:ca:85:56:18:69:65:d3:94:08:55:f8:f1:ec:0c:a6:ae:1e:
d8:f5:ce:54:0f:c1:1b:19:bf:b0:6b:99:a0:31:70:4b:31:cc:
a2:0a:7f:ea:62:35:52:d2:60:ab:3f:e4:fc:1d:44:5c:c4:0d:
97:c2:a7:d3:06:e5:d0:67:bb:66:5c:eb:8d:54:51:44:6d:be:
e9:f5:a6:f9:00:1d:a7:64:27:66:fe:07:88:25:57:78:2b:f3:
bd:c3:40:39:bb:b6:17:72:58:6c:0c:84:47:eb:2c:f9:8f:3c:
75:8e:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:13 2025 by rpki-client