Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: SN4MvQljd6fy2Wyzz9beydK/gIKk12UwtPLeUdKlSx0=
Subject key identifier: 80:6A:CE:D1:AE:54:38:A9:BA:C3:1D:09:CE:DE:12:AD:D7:75:DC:6E
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 0198D583D0A917009D81A46817CBE09A6C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 140D
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: UwuxH/lF1DYEqPPBzG9rsNH3S3EYTN97PZ5D9gmGIeM=)
2: FjL5MqcK0dv0phSETNIP5t1SBWg.roa (hash: HghvVzu9hsO9wX3NaFq2EgUKtQhDl/MHwAlkrJlofBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d0:a9:17:00:9d:81:a4:68:17:cb:e0:9a:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=806aced1ae5438a9bac31d09cede12add775dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:ff:3d:c5:81:58:12:b2:31:53:2b:f2:0d:
0e:a1:62:06:7c:c5:5e:2e:e2:ec:ea:5d:08:f5:40:
89:9f:4c:83:87:a1:5a:30:ff:0f:ac:9d:4a:8a:9b:
b3:63:93:d0:f4:b5:da:e2:8a:88:00:17:d3:16:aa:
ae:bf:5b:8b:c5:47:13:08:d8:7c:f6:28:48:f4:c9:
db:6c:fe:f4:6e:69:5c:07:0f:fa:c2:d6:d2:a2:f6:
64:c8:49:28:ba:80:c0:26:71:0b:a8:22:76:a8:4a:
da:58:ea:57:d7:38:93:d2:0e:9e:ab:47:1e:4e:88:
05:5a:fb:14:c9:af:44:66:f1:98:7b:4f:15:64:fd:
56:0a:ab:ad:1b:f0:4e:ee:92:d6:74:0f:42:43:4c:
29:76:73:a0:77:61:f2:26:10:c9:7f:61:15:14:41:
d2:7c:d2:38:4a:00:8c:57:c6:86:38:24:31:80:89:
b2:d0:b3:41:3f:40:51:e7:3a:d7:37:88:0a:b3:8e:
7a:08:51:cf:d8:7d:f5:5b:6f:a4:d5:40:46:4a:24:
ec:d1:f5:a8:c7:64:56:54:73:a5:8f:23:2e:66:10:
26:9c:5d:d0:f5:41:5f:1f:c4:04:17:44:24:83:bb:
40:c5:c8:49:9c:d1:2d:85:96:5c:a3:ac:10:69:27:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:CE:D1:AE:54:38:A9:BA:C3:1D:09:CE:DE:12:AD:D7:75:DC:6E
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a6:43:46:2f:b2:2a:a3:b8:6d:6d:e1:2c:bf:e2:a3:28:83:
24:05:7e:17:1e:92:d5:45:28:e0:5f:46:26:81:45:02:6c:73:
99:57:93:6a:0c:8b:f1:7d:5a:7f:69:9e:44:ed:dd:8b:5d:ef:
06:46:33:14:3a:7f:0c:79:57:33:ca:e6:f7:06:59:59:5b:17:
ba:f7:fd:14:ae:a6:09:cd:2d:1f:3d:a1:51:d3:c8:a1:08:74:
59:44:eb:37:30:54:d8:18:f7:f5:e4:10:bd:0c:23:6b:a8:1b:
d9:cd:4f:2d:e3:d8:0d:16:58:a2:0e:03:dc:84:3f:8b:96:23:
84:8a:a4:9a:6b:e8:73:10:87:b6:6f:64:b0:4e:0d:66:8f:d8:
79:d4:9a:13:e1:b9:28:13:f2:fd:78:33:1f:e3:ca:a5:7d:de:
7a:d7:38:bf:2f:05:40:73:4b:92:c3:f0:8b:1b:6a:76:62:cb:
0e:ad:cf:79:d7:b9:4f:17:4c:52:54:d7:34:aa:22:ba:94:b1:
df:48:e9:d4:aa:ce:dd:49:a0:42:4a:ed:58:04:99:1e:9d:4b:
df:40:8f:ef:ff:b2:60:0c:07:d0:39:76:54:52:5e:c4:4b:bf:
8f:44:e0:45:75:b5:b8:4e:82:c0:a0:21:47:72:41:8f:1b:92:
4e:16:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:33 2025 by rpki-client