Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: koZucSQD/mAfkq2h6JBbct00SuDr8y/5CKz3j55JR44=
Subject key identifier: 25:DF:9A:96:FE:C0:84:D0:9A:00:78:7C:2E:6F:BA:83:0B:A8:61:6F
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 0198D5BBFA632B93B2B739B19EEBC9874BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 146E
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: tpaixJAl3zZ+xqo2FXT+kOBb4xGETYfkqNFBJYq/8wo=)
2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fa:63:2b:93:b2:b7:39:b1:9e:eb:c9:87:4b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=25df9a96fec084d09a00787c2e6fba830ba8616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cc:f2:19:4f:29:af:bc:db:5d:3a:51:01:ed:
d8:f2:48:e2:6f:a2:1b:1b:f9:eb:71:95:58:eb:f2:
f1:83:56:5a:9e:5e:ff:c9:60:52:3b:76:f7:1c:03:
19:68:08:35:aa:e7:2d:4c:e8:5f:ab:73:55:81:02:
91:61:2f:f3:87:96:74:d9:80:b2:b3:e4:20:7a:95:
c8:a5:d3:b7:af:c1:d2:bc:3b:ef:a5:c4:c4:cd:bd:
6f:2e:03:1f:c8:ac:be:45:8e:58:ae:0f:56:21:12:
25:1c:28:58:85:0b:20:be:fb:24:44:66:c2:94:30:
66:c3:2b:2a:73:4e:c3:17:da:b6:87:9a:81:ae:81:
3f:05:03:41:c8:b5:b2:eb:84:f2:ac:5a:24:40:08:
75:a0:40:75:94:78:f7:a4:4a:71:c4:88:72:52:1f:
ce:6c:8e:20:45:4d:bf:34:80:fd:65:3e:c7:3f:6a:
36:67:8c:58:8a:b0:06:37:bf:fa:30:ba:95:be:31:
87:8e:28:0c:2d:74:62:bc:98:ad:8c:10:41:00:1c:
1c:d0:a4:b3:a2:ed:d5:bb:4e:c5:82:e6:0a:6a:d0:
f5:c2:a8:7b:6a:21:d6:dc:55:c0:1d:2b:81:24:9e:
8a:77:a1:db:f2:8c:b6:84:1f:ee:06:03:35:5d:bb:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:9A:96:FE:C0:84:D0:9A:00:78:7C:2E:6F:BA:83:0B:A8:61:6F
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:c2:35:3d:c5:c8:77:12:41:87:07:86:34:51:cd:e6:bb:
92:d6:b8:ab:08:2a:9b:a5:e8:94:a7:d5:86:31:4a:08:41:1e:
ab:4c:80:7e:51:99:37:15:75:71:6d:6a:92:8e:f0:1b:01:f8:
6d:48:d0:a5:77:c4:41:b0:01:7e:18:27:bf:bf:a1:6b:c5:a6:
bb:51:73:f7:e3:49:3e:a0:60:32:2f:74:8a:ea:00:6c:e3:bf:
73:1e:d6:cc:e5:dd:77:63:28:62:43:81:59:bb:17:60:93:35:
40:71:92:70:92:7a:d9:a2:6e:a8:9d:2e:93:8d:25:7e:f7:3d:
83:32:cb:e6:91:a9:11:89:c6:78:b1:d0:b4:60:e4:88:ce:a6:
2c:9a:3c:09:09:f2:c4:3a:de:2f:72:cc:f3:59:2d:8a:d1:a0:
18:0a:1f:87:50:77:5f:82:b4:0e:5d:ec:d9:1d:3a:3e:a2:ab:
26:c0:9e:69:d6:42:01:61:e0:ef:00:89:dd:b8:cf:77:ab:e3:
6b:c4:93:e1:d8:5a:1b:d6:f5:5b:03:ae:4a:05:06:72:cd:0b:
82:3e:38:6f:35:b8:54:25:ff:64:a8:d6:98:90:3f:73:3b:f0:
d5:ee:d3:71:22:83:e8:42:7c:7b:98:ff:7b:ca:95:02:4c:b8:
a4:78:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:50 2025 by rpki-client