Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: X4k260v0CRWdIZR5kzedyIV/zdM1rJ8XmD9gCQBFHTc=
Subject key identifier: C0:E2:5B:83:89:98:9C:37:88:D4:98:0D:97:92:8E:F9:E4:87:B8:2F
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 0198D73B462E640880A394F4D047FCB0F4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 1510
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: 6es4+lD07EzGjAnXdFS6j/p/j2bve10iOKYezF0A9ZQ=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:46:2e:64:08:80:a3:94:f4:d0:47:fc:b0:f4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=c0e25b8389989c3788d4980d97928ef9e487b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:84:a2:18:ed:5f:88:ff:ea:57:03:ca:fc:
3f:b1:84:13:0c:26:be:a5:69:b2:25:78:cb:5c:36:
20:43:6f:2b:6b:b7:cb:a4:e2:69:73:8f:fc:b5:cb:
88:d0:9c:bf:53:a9:a6:23:9c:bb:7e:1d:c4:f0:fd:
e9:22:b1:a6:85:fe:2f:08:23:95:22:2f:21:44:ab:
cf:de:7b:8c:a1:a5:70:f7:42:5a:c9:44:6f:21:c1:
48:7d:ad:c5:39:f8:2d:6e:d4:ed:fe:00:10:6e:54:
86:5b:5e:3b:34:7b:88:a7:eb:a3:ba:b0:ce:cd:8a:
f6:27:1b:f9:18:b6:ed:f0:87:5c:be:6d:e0:dc:22:
a3:30:a0:6f:db:1a:97:0c:ea:8b:69:37:0e:0c:ac:
e1:bf:67:ab:25:d9:df:a5:ef:63:4f:0d:0e:68:f3:
95:df:42:84:52:5c:0e:a6:2e:17:d5:7c:6f:9b:a2:
cf:30:52:f7:18:0e:38:ef:6e:29:59:66:af:69:97:
3b:3d:64:3d:ee:61:07:80:d0:a4:1b:29:f6:97:3f:
02:b4:b0:e7:17:b6:5f:2c:32:41:f0:39:da:c2:23:
e2:6e:01:d4:7b:1a:b8:eb:f6:2e:23:63:26:c3:ab:
8b:79:6f:6f:4b:c6:90:a0:5b:1e:1a:c6:2b:15:04:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:5B:83:89:98:9C:37:88:D4:98:0D:97:92:8E:F9:E4:87:B8:2F
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:27:84:22:4e:95:5b:e4:2e:d8:98:70:a8:1f:41:43:14:
82:b1:3f:0f:48:29:4e:7b:b4:d0:71:c1:c3:53:d6:78:a2:3b:
a6:65:38:bf:1a:29:5b:c1:ec:e5:8a:df:ef:9b:c1:ff:50:20:
6c:aa:f9:57:0b:eb:e6:d2:0c:44:50:76:f5:a0:3a:75:c0:c5:
6c:0d:2f:97:ac:76:9f:af:fe:83:ae:0d:c3:0f:6b:68:8c:52:
e3:71:b0:3e:e3:00:05:29:91:51:f5:6f:7d:30:fe:74:73:c4:
83:07:1a:3e:f5:5e:a3:73:25:8b:f1:8c:03:04:1b:4c:09:be:
11:7a:52:a4:96:f1:2f:88:0f:34:37:28:78:4f:72:24:c5:2d:
3f:d0:2c:02:e0:10:ac:c8:d4:68:6d:e9:21:cc:45:a1:9c:ef:
74:90:96:36:34:eb:58:0d:d4:ae:17:ef:1c:4a:88:2f:ed:14:
48:45:57:dd:7e:ec:dc:fa:24:fc:8d:6a:0f:32:59:b6:69:ca:
6c:5f:77:64:ea:40:4a:bf:ae:b1:69:fa:2a:5b:1f:a1:f0:af:
0b:84:4d:02:60:26:99:e7:1b:4a:48:d1:fd:9d:31:5d:27:db:
ef:ab:dd:00:c9:d2:cb:a5:10:d8:47:9e:74:9c:51:58:10:a3:
12:97:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:44 2025 by rpki-client