Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: XvDF0edgKtIDFb/ZPx30ZPEhu8MSfiIShnx8NgxOBmM=
Subject key identifier: 78:8D:08:47:FF:9E:AB:AF:A4:13:9B:97:75:86:CE:CE:67:C9:73:A1
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 0198D73B7632292F03A75B39C39E10F27016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0255
Signing time: Sat 23 Aug 2025 14:00:54 +0000
Manifest this update: Sat 23 Aug 2025 14:00:54 +0000
Manifest next update: Sun 24 Aug 2025 14:00:54 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: XD4JxsNpFX4iQeZkmWatE9rrVlqOCF49P6Q3NvPo3sI=)
2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:76:32:29:2f:03:a7:5b:39:c3:9e:10:f2:70:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Aug 23 14:00:54 2025 GMT
Not After : Aug 24 14:00:54 2025 GMT
Subject: CN=788d0847ff9eabafa4139b977586cece67c973a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:e4:d7:31:4e:8b:c0:f4:71:dc:1f:f9:52:
32:b3:f2:66:5a:86:bc:0c:46:ac:fe:b6:4a:35:fa:
4c:5d:60:ce:33:ae:60:98:22:5f:1b:84:3f:f9:11:
7e:b3:b0:b6:5c:9d:2b:b9:b2:6b:51:da:ea:25:6c:
f6:3f:1b:ff:24:c2:4c:89:8d:de:ad:07:a5:ce:8f:
31:41:06:04:71:29:ff:e7:93:3d:fe:52:ae:a5:89:
d2:98:57:bb:35:f2:17:b9:73:68:ff:a0:7f:56:e7:
8a:26:44:5d:a5:cc:8a:9d:dc:b8:21:a9:ed:46:97:
56:38:2b:37:ab:28:fb:a8:20:5e:03:aa:9e:a2:cb:
1d:ad:19:b6:e7:31:03:fc:e0:59:9c:c6:3d:4b:c4:
a6:89:4f:46:c6:a7:f8:1d:2e:a9:f0:af:f0:d4:50:
df:bc:78:69:40:a0:ef:01:44:2c:6d:a6:56:6f:a9:
f3:2a:cc:ef:21:91:99:7b:5d:de:f6:1a:59:96:00:
b4:2d:ae:8a:bf:ff:8e:b6:8e:13:88:e4:7b:b9:b6:
fa:ba:6b:30:9e:85:c2:03:b3:a3:e2:5c:5f:4f:a8:
c3:b6:e9:b1:04:d7:ef:79:6e:67:17:9a:42:40:6b:
6f:41:5e:36:1f:fd:bf:f3:7a:fd:d0:4e:e7:f7:b1:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:08:47:FF:9E:AB:AF:A4:13:9B:97:75:86:CE:CE:67:C9:73:A1
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1a:91:c1:6d:d9:12:c5:e3:4c:bc:c5:3c:8d:35:06:aa:bd:
a4:e9:ab:3c:d1:93:70:18:30:da:15:83:e3:d7:7a:c4:72:a2:
f8:ea:8b:db:c5:e4:1c:8a:c5:11:e3:4d:1d:e0:a5:44:98:66:
52:95:71:88:38:27:81:41:d4:ab:47:58:db:57:c6:70:13:40:
c3:54:85:3b:41:bf:24:bb:4c:b6:11:f8:3e:8d:8b:0a:e4:fc:
63:17:37:b8:a3:83:9a:9f:cc:31:fb:df:95:65:f2:50:8b:9d:
de:3b:50:74:01:c8:65:15:8c:29:4d:b2:d3:57:7e:da:6f:b8:
21:01:18:64:22:dc:20:c6:cc:8f:a6:07:88:0b:61:a5:4b:70:
74:4b:d6:f9:6d:67:7f:86:af:38:bc:4a:f7:99:0f:90:97:74:
c1:a5:aa:eb:96:12:cb:5b:30:15:6b:9d:61:c8:75:34:7e:6d:
ea:1b:9a:ee:46:3f:dc:a9:81:4a:8e:7d:c5:e5:99:4e:c8:b5:
26:08:53:60:4b:23:45:da:f4:89:0f:22:17:3b:fe:74:ca:d7:
cc:dc:1f:eb:fa:88:06:0f:7e:c7:e8:fc:d8:d2:85:f9:51:ee:
21:82:9b:76:e2:87:3f:1b:76:1e:1f:21:70:50:5a:9d:b1:75:
25:f2:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:54 2025 by rpki-client