Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: l9ixOKiTuybxtPyKbTIQoZgSGQmoL3drvCcB6lIbLKM=
Subject key identifier: B4:96:68:5C:F7:75:B6:80:9E:AB:FB:7B:42:68:7D:00:92:F1:1E:BF
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0198D583DA76C3C553A91F1CB00D0460C325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0A78
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: mDdM7eB31pQbKKJERiF2uRPqobuLBTAaLahv51M2RdQ=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:da:76:c3:c5:53:a9:1f:1c:b0:0d:04:60:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=b496685cf775b6809eabfb7b42687d0092f11ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:b4:06:c6:bf:70:09:f0:95:74:22:39:71:
7b:48:24:af:80:e8:cc:ad:b2:7a:6b:30:3c:1a:f9:
c7:74:da:e3:24:6e:cd:92:b0:2d:8e:68:c2:6a:93:
d7:cd:85:d6:8a:1d:44:3f:f6:85:b8:d2:3c:fc:1f:
3d:43:fb:9b:5e:c9:ea:a6:54:ee:ec:b1:d7:9b:6b:
9e:4a:09:c3:30:a8:16:78:0e:13:cb:12:56:bf:7d:
04:f5:13:7f:5b:84:c7:4d:b4:ae:83:32:ec:99:a7:
24:9b:d9:c0:41:99:0d:c8:1d:db:58:71:44:bc:46:
50:53:ef:c0:84:19:42:67:5b:60:96:d7:7e:db:c5:
4b:4b:2d:3e:57:ef:3b:d0:74:88:54:42:d9:7d:71:
b0:9b:b2:44:b0:82:c6:a5:c4:4a:a3:58:a3:22:c0:
d6:ac:d4:7e:35:61:6c:c0:0b:cc:5a:a4:d7:85:7c:
67:fe:22:56:0a:cf:3b:33:4d:17:a9:29:d4:5c:a8:
d4:98:8f:35:05:5a:9b:14:8d:3c:81:e2:2f:3e:31:
ee:00:ed:f6:aa:03:6c:17:29:16:b6:89:df:ad:ec:
96:93:44:a6:63:43:8a:f3:f0:17:84:41:83:4c:29:
05:ed:0b:8c:60:99:4f:4e:26:a2:1b:e1:86:65:25:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:68:5C:F7:75:B6:80:9E:AB:FB:7B:42:68:7D:00:92:F1:1E:BF
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:78:49:07:b7:f7:46:b6:04:7e:5a:ca:24:09:55:c4:5b:5c:
d5:09:db:d1:07:fd:84:83:ff:fa:d2:9b:48:9e:63:c6:65:80:
b7:54:50:2f:fb:41:b0:62:d1:e7:9d:91:bf:30:e0:51:2a:02:
67:8e:9a:69:f3:9f:b9:19:b8:34:d3:b3:ab:9f:23:e1:8a:e0:
f5:7f:91:df:27:b7:f8:9d:07:3d:7c:e5:6d:29:8b:11:ef:df:
ea:ac:13:58:fa:41:8c:ed:a4:e6:50:e3:65:c8:b4:a0:36:80:
40:10:a4:94:12:6f:43:b2:8d:59:41:19:29:56:99:f7:74:90:
c7:24:4d:e6:45:8e:63:4d:73:3b:62:21:2d:a1:fe:1e:0a:a1:
e1:5e:bb:83:d1:5d:97:c2:1f:47:02:15:de:15:ca:0a:df:05:
e8:e0:4f:13:5d:0f:9e:31:d0:21:54:a4:4c:ef:2b:0c:dc:8b:
01:e5:bf:03:d2:6f:12:dc:76:e5:56:0f:6c:98:8e:8e:a4:35:
0f:db:b8:1a:16:d5:ea:c1:9b:f1:07:66:03:b2:52:ba:80:58:
a1:e1:d3:c0:82:6b:82:8b:8f:e6:c7:01:2c:8d:59:65:d9:c2:
82:4f:46:f8:33:1b:eb:df:d6:61:ea:7c:46:7f:bb:2c:23:d1:
83:3f:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:43 2025 by rpki-client