Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: kMaLy+cWrh+09l1DEHkPkuTUeg4w9BBIGZievEbDsDE=
Subject key identifier: CD:57:44:13:97:53:4A:93:6C:40:B2:41:24:ED:CE:F4:ED:49:F5:D3
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 0198D515E35723F113BC8077A64A90B5E24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 2B
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: HVB8siAFEYcbFFIveVfJDBHotS4FL0WfXlDDOh31OwM=)
2: G9oTd4bBpmlm3pZMn3YyyXAVIyI.roa (hash: XC2pyO3ZNZCKadVf4J0EDWPKrfSqScmOhmM8oMNNkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e3:57:23:f1:13:bc:80:77:a6:4a:90:b5:e2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=cd57441397534a936c40b24124edcef4ed49f5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:7d:05:68:80:2c:0f:45:37:08:8b:fc:2f:
61:7b:cc:be:2c:6f:0a:15:a0:70:2b:ab:e8:48:c6:
33:89:ac:96:bc:fd:e3:60:bf:62:5c:ec:ed:d0:07:
e9:65:cd:90:37:97:36:86:8e:6d:04:ea:b6:af:c3:
ad:02:31:07:a2:0f:81:d4:23:eb:4f:b2:b0:59:91:
2e:ba:d6:3f:e7:2b:64:30:ad:72:65:cc:71:48:ed:
99:b4:00:ff:04:6d:eb:db:06:cd:57:16:31:1e:18:
1a:a7:fb:20:98:40:5a:b1:56:c3:b9:67:65:60:e4:
ee:ae:e6:b6:29:df:7b:40:76:97:e6:56:a9:f4:64:
05:13:10:3b:35:72:45:bc:3f:33:b2:a6:56:75:be:
b0:99:ca:e5:90:d1:43:97:f2:42:74:7f:10:ab:22:
f5:55:30:14:58:fc:4e:7d:12:83:78:73:e3:29:d8:
7d:f8:5c:c2:49:7e:67:fb:3b:b0:7a:94:4a:9d:7f:
0d:2f:f5:81:2d:20:bd:d6:eb:76:bf:e3:98:db:90:
e3:10:8d:11:87:2c:f4:c1:99:5d:c3:67:8c:60:c3:
95:62:05:fc:07:39:29:c0:30:87:96:a3:f5:c1:e5:
2e:fd:9c:22:5e:27:f4:1b:49:35:c2:b1:8c:b9:6b:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:44:13:97:53:4A:93:6C:40:B2:41:24:ED:CE:F4:ED:49:F5:D3
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1e:8b:47:17:59:34:6c:18:87:81:89:ca:5c:56:38:b5:7e:
f1:5d:fa:40:5e:ab:b4:a7:80:3e:50:9d:8b:bf:94:71:81:5b:
85:47:44:9d:59:69:9f:b0:9c:b7:d0:76:d8:21:0d:78:7e:12:
33:c6:a4:50:41:26:72:cf:fd:f5:8f:e6:64:fa:62:c6:bc:c4:
ca:27:74:18:41:87:49:11:36:ed:fe:c3:86:74:28:1c:95:3e:
29:65:d3:42:1a:18:9c:19:25:59:d5:36:8b:8c:4f:e5:3b:c8:
96:7e:f1:97:ad:a5:99:48:cf:b6:b5:9e:0d:99:ee:0e:06:88:
b7:a7:04:94:c9:11:5f:cd:2a:48:e6:1f:0e:eb:bc:4c:6f:04:
a7:e9:ed:4c:4c:c7:e9:d6:10:a1:42:cf:b4:cf:3e:98:bd:5e:
6b:53:1d:1f:f5:31:77:22:81:d8:2e:fb:d2:55:af:87:2a:82:
7a:72:23:70:02:cd:6a:ab:4d:6b:4f:d0:a6:23:86:64:e4:f7:
49:ee:ef:61:52:c9:7c:2f:87:3e:14:dd:44:6a:0a:e0:e8:41:
ed:fe:28:eb:23:20:8f:86:e8:57:80:a9:d2:de:a6:b5:fc:0f:
bc:8f:b2:8e:17:ff:ff:00:ed:72:e4:c4:8d:3f:3a:2a:01:8e:
12:dc:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:48 2025 by rpki-client