Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: PsZaY3JQPurcusEDhguPww0Bqu2OFCZpjCD9ihwpT3g=
Subject key identifier: 22:CF:8E:E6:64:B0:7B:53:4E:F1:26:8A:A0:3C:CE:5A:B0:47:C1:E6
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 0198820BE89A4B707D7E59A396B660114C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0D63
Signing time: Thu 07 Aug 2025 01:01:15 +0000
Manifest this update: Thu 07 Aug 2025 01:01:15 +0000
Manifest next update: Fri 08 Aug 2025 01:01:15 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: aP4MIqQHTGlEJ020+w1xCPfOl7te/Rspcs0mHdwKxwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:e8:9a:4b:70:7d:7e:59:a3:96:b6:60:11:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Aug 7 01:01:15 2025 GMT
Not After : Aug 8 01:01:15 2025 GMT
Subject: CN=22cf8ee664b07b534ef1268aa03cce5ab047c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:5c:f6:3f:6e:ae:88:a5:59:23:55:45:53:
a9:8b:ab:2c:e9:80:dc:61:93:03:fa:51:8f:7f:c2:
d3:d5:ee:cf:21:af:94:97:8b:2d:8a:e3:6a:26:03:
68:4f:b6:39:76:d1:f5:98:14:4a:8f:c1:9a:e6:e7:
5c:4f:f3:42:cb:7b:9d:22:67:43:f2:c7:64:0c:78:
a2:4a:9f:a0:2f:fc:6b:d3:32:44:21:57:8e:78:b4:
e8:0a:2d:e5:cb:1d:ef:bc:69:45:35:6b:0b:cd:ba:
97:ca:1f:9e:64:e9:c7:35:d0:ff:51:23:a8:3b:1c:
0c:48:1d:12:e5:c3:3e:27:8f:1a:8c:74:0c:66:ee:
54:d4:52:69:80:da:8d:b4:b0:67:41:be:4b:c4:40:
29:99:09:a8:3a:cb:d6:d8:75:02:27:9e:0e:01:4c:
4b:06:be:2b:aa:0b:d8:41:95:71:21:7b:87:fe:8a:
c3:a2:ae:ff:53:bf:b7:5b:c5:15:32:ce:82:45:90:
b2:9c:aa:37:dc:ca:7a:1a:bc:60:56:f2:ad:a5:89:
40:7a:88:d6:22:17:db:59:83:de:af:c0:63:33:01:
d7:e1:09:2a:0f:26:2b:a1:50:2c:d1:b6:57:6f:57:
16:8b:47:72:2b:cd:6b:a4:29:52:db:95:06:d7:7b:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CF:8E:E6:64:B0:7B:53:4E:F1:26:8A:A0:3C:CE:5A:B0:47:C1:E6
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:97:47:b6:00:76:62:a0:ff:59:19:30:9a:51:b6:f4:46:
83:77:47:9b:7a:14:5d:88:1e:99:b7:58:0c:44:38:89:5c:f7:
d6:97:5a:73:e2:e8:4d:19:bd:e7:0c:f7:05:d3:58:d1:c9:6d:
aa:61:df:96:8b:12:01:e6:94:27:a1:63:31:ad:93:f3:42:7f:
54:c4:28:02:9b:84:0a:06:43:82:53:b2:b5:c9:74:78:9b:02:
95:95:45:8c:34:42:95:08:8f:a9:96:a7:6d:06:d7:e4:e7:b4:
a6:01:8d:10:cb:df:8e:b6:a4:8d:c5:74:d3:84:93:5c:ee:a6:
7c:7f:21:c6:31:cf:0a:dd:b0:94:93:34:6b:b8:9a:9c:e5:5a:
d9:c0:90:6e:25:d9:53:80:e0:e1:cb:21:ae:2d:0e:52:1c:22:
9a:ff:8d:69:db:d0:f0:1f:9b:b6:57:56:f2:9b:4a:07:f8:02:
6c:22:9c:f9:c0:48:22:ec:2d:31:bd:61:e8:bd:3d:bd:26:4e:
88:93:da:b4:b6:ac:1e:23:67:1c:21:7a:c8:76:86:c7:53:a3:
a5:d8:82:52:e2:1d:9c:7d:d3:d7:da:5f:a9:7c:17:2b:e4:b6:
ad:6e:9e:cc:ca:5a:e9:d4:e9:8c:bb:64:b8:14:91:fa:80:6d:
68:7f:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:30 2025 by rpki-client