Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.mft (raw, json)
Hash identifier: 6DXshg/HgzWlE2GJolEXw+IZNbdcm9YntKV/VKZ4yNs=
Subject key identifier: 48:19:B0:9D:CB:4A:F4:E0:AC:2B:E7:D8:9F:46:37:98:CF:DB:A8:AF
Authority key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Certificate issuer: /CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Certificate serial: 0198D472FEAF61C8AF7743BA39864726A8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
Manifest number: 15B3
Signing time: Sat 23 Aug 2025 01:02:42 +0000
Manifest this update: Sat 23 Aug 2025 01:02:42 +0000
Manifest next update: Sun 24 Aug 2025 01:02:42 +0000
Files and hashes: 1: 2NIjgppmhuxRYrz3DLITLBRmQ5Y.roa (hash: pfK3DW+mhfPMlrHb+zKcoWL6SLQiJQcLNvXFegBqlig=)
2: 2wpVo-1qrv-asCJTkXrJnRU3Amw.crl (hash: FA0ix62dLb/3s05I/BfHR9aEqtV/Zhedvr69MsIcM7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:fe:af:61:c8:af:77:43:ba:39:86:47:26:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Validity
Not Before: Aug 23 01:02:42 2025 GMT
Not After : Aug 24 01:02:42 2025 GMT
Subject: CN=4819b09dcb4af4e0ac2be7d89f463798cfdba8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:ae:98:8b:04:c3:24:19:e4:8a:80:de:24:
2f:c5:ca:0b:d7:30:df:b9:98:de:3c:e2:91:0d:27:
28:8d:19:9c:8e:70:dd:df:ad:79:52:18:50:73:1f:
af:d9:c9:2b:90:85:ce:f1:20:33:59:64:88:4a:7e:
06:58:c3:b0:55:84:43:e8:39:eb:1e:86:5c:55:16:
62:16:cb:c6:75:18:fe:a8:2f:6f:02:a2:2b:bf:ac:
11:b9:9a:aa:bc:19:59:8c:2a:8b:45:4d:e4:7d:ad:
a9:45:d3:51:52:ef:49:af:07:f5:18:ad:be:3b:d1:
16:35:a8:9d:28:5a:e4:7b:af:97:a6:31:df:2c:bb:
6b:23:aa:f8:a6:3c:65:1d:6d:23:44:5a:fc:93:32:
2e:8f:75:21:c3:0c:6d:c7:06:ac:0c:64:2c:6f:a7:
ed:99:53:d6:2c:2b:7c:4e:02:77:57:ff:24:37:37:
a4:2c:78:ba:b7:0c:a4:f8:39:c6:05:58:32:0b:ed:
ac:0f:c6:0b:30:59:52:1b:2a:8a:9e:50:9a:16:de:
a8:be:1a:27:7d:dc:0e:9c:bd:b1:47:43:1b:79:53:
27:2c:80:81:2c:14:a9:04:62:81:3e:e8:6a:ae:c9:
4a:fe:69:3d:28:0b:8f:e5:db:6d:c9:cd:68:3b:b8:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:19:B0:9D:CB:4A:F4:E0:AC:2B:E7:D8:9F:46:37:98:CF:DB:A8:AF
X509v3 Authority Key Identifier:
keyid:DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2b:a3:8d:2d:7c:db:4f:45:6b:c3:31:bc:d9:6e:1d:84:ca:
e2:5d:b2:da:54:47:b8:b2:17:9f:de:6b:cb:e5:7c:3e:e1:24:
34:a8:ac:2b:7d:de:c6:13:53:0e:57:57:7f:ae:8f:56:c7:1d:
97:95:b2:5e:10:10:7d:e9:ee:58:36:6b:f0:61:f6:ae:9a:6d:
cd:de:e9:10:e3:a3:3f:bc:fd:5e:c6:09:c2:47:66:11:1d:bd:
0a:67:f9:01:8f:68:1f:f4:a0:73:5e:24:d8:3a:01:88:12:c3:
46:5e:04:e1:ff:e2:48:ed:63:b0:7f:94:d8:46:25:46:09:2d:
5f:ab:df:0f:de:5a:f9:21:69:cc:cf:96:10:6c:33:1f:ca:fe:
84:9f:5c:3e:bf:c6:72:0a:0f:07:e7:32:a2:a3:e1:fc:66:96:
85:91:8d:ac:ed:04:3f:61:ff:45:f0:d5:79:a4:d3:cf:1d:04:
46:f8:ad:d3:b2:d7:a2:69:fd:b0:cb:c3:bc:40:e0:de:83:fe:
8e:b4:45:95:88:da:ba:b2:1b:29:1e:96:77:a0:27:ec:0a:64:
9e:ec:c5:a8:ab:23:0d:74:98:42:6c:c0:9c:36:90:68:80:fe:
07:3c:86:40:d6:61:d9:fc:ca:2c:c3:7f:67:d6:e2:80:51:dd:
ca:4a:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:08 2025 by rpki-client