Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: 204p4/tkPvnhD7W3US0t3oLHjBBcUyBSx1P9Hm3RkEc=
Subject key identifier: FB:7D:6C:33:CA:85:6B:DB:6B:7A:B7:2B:39:B3:9D:9C:C2:EE:9A:A7
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 0198D5BC15B34014420A81B820CDDA615DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: khcsjuJHH1TI3hdl9YmunZsSUMRMNShFnrPUfT+Tbgk=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:15:b3:40:14:42:0a:81:b8:20:cd:da:61:5d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=fb7d6c33ca856bdb6b7ab72b39b39d9cc2ee9aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:8b:81:ce:1e:0e:80:7b:fb:78:a7:e3:25:
85:ab:72:b3:48:9c:30:39:25:c1:39:da:7c:8d:c8:
22:87:6b:d6:e2:6b:22:2c:31:7e:d8:3a:60:aa:dd:
5c:d5:bd:f5:09:06:51:91:85:e9:f3:20:40:4f:81:
23:ea:ad:41:ac:3d:c3:21:2a:2d:e9:3a:36:34:6c:
2c:6c:57:98:42:87:f9:0a:13:13:83:5a:00:cc:3c:
fd:ed:78:87:02:a6:6a:c8:7a:5b:e4:fe:d2:c3:f2:
9b:44:05:6b:93:04:d9:2e:7b:89:df:96:d6:3e:72:
54:ba:17:ad:19:9f:dd:56:ee:c9:e0:79:df:e7:d8:
a2:96:db:08:05:93:d6:6c:93:4d:d9:c7:22:40:9a:
e5:c1:9a:82:48:0f:cf:29:de:6a:f5:8e:99:e7:e1:
77:c1:05:e9:ee:db:d4:4c:84:fa:70:68:de:49:96:
a8:94:8e:df:f7:70:bf:82:dd:9d:50:17:7d:cf:b8:
2e:6e:00:28:f8:a9:ce:dd:70:2d:4c:e5:f7:89:47:
12:40:2f:38:2c:0c:25:91:39:af:3d:b2:aa:12:d0:
e6:b6:69:f9:a9:c6:f7:5a:f0:8d:1a:29:5f:af:79:
98:74:98:f4:ab:75:e2:1f:fd:d6:66:7a:7e:4d:14:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7D:6C:33:CA:85:6B:DB:6B:7A:B7:2B:39:B3:9D:9C:C2:EE:9A:A7
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:95:eb:92:f1:a0:6b:17:af:59:16:1a:fe:4d:e7:6e:68:c5:
60:a5:01:b0:93:64:61:46:09:1e:c3:76:88:fb:37:3e:c1:1f:
71:29:93:e5:ae:6a:c0:d9:29:5b:02:75:68:88:7d:52:85:ff:
dc:94:78:8f:83:3f:33:ed:1e:89:49:ba:24:90:30:b7:05:bd:
c0:0c:e3:2f:3b:7f:e5:54:94:2c:3b:24:c5:06:13:d5:0c:bf:
b5:cd:17:46:cf:75:e7:75:ef:99:f9:4f:ac:81:37:f0:83:45:
e0:50:19:e5:ff:b7:76:6a:bc:67:98:6e:fa:30:82:35:9b:c0:
53:bc:e5:29:53:e7:01:0d:69:bc:a0:c2:88:8b:74:d6:b7:ad:
cd:d2:43:d2:4b:04:ae:27:91:cf:7a:eb:d7:44:34:02:ce:92:
1b:a6:8c:65:aa:f3:62:e3:94:75:c5:93:69:2c:f3:b3:99:c5:
38:3e:cc:0b:22:41:48:92:e6:4a:a1:a1:ae:f7:97:9a:1a:4d:
32:14:e7:58:1a:80:e8:a7:6a:da:ce:d3:15:78:e8:e5:0b:ed:
87:e3:bb:90:cf:08:7e:59:4d:00:b5:3c:5e:ad:92:e1:00:ef:
59:fb:71:ea:ab:a0:c4:b4:3e:c1:33:62:44:d7:1b:54:01:ae:
7f:2d:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:07 2025 by rpki-client