Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: mnpfP/1+Uuk/BNor+6bdzLrrvYRYgCmcYSVxmgUJiYU=
Subject key identifier: 24:99:CC:88:9F:9E:D8:F8:23:44:C6:DE:52:59:AF:60:7B:E3:15:36
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0198D4729ABE5D62553A3445488E29F621E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0EC6
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: oE9E8PbMgGOo7WxXj1AMMihYTHcb4VkauTQIIZ2tk1E=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9a:be:5d:62:55:3a:34:45:48:8e:29:f6:21:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=2499cc889f9ed8f82344c6de5259af607be31536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:24:8a:d0:bc:ec:6d:c1:96:e1:00:40:68:
de:99:98:17:cc:e1:29:2b:06:c7:b0:84:a1:f7:15:
ba:60:29:22:ba:3b:33:20:ed:d9:73:d9:a7:15:aa:
a2:d1:81:16:a5:18:d0:c2:f0:58:d4:a4:0c:1a:56:
8c:6d:2b:6f:3b:fd:fe:39:6c:4b:e3:7b:04:f4:fe:
ec:1e:04:db:96:0b:66:17:4f:69:f8:a7:3a:05:01:
2f:4e:44:e8:e8:18:87:7b:d8:ab:85:43:af:6c:59:
89:b1:99:eb:ce:8e:2e:64:ae:a1:72:5a:ab:8c:e1:
71:de:8b:62:24:12:a5:24:ac:55:df:20:b9:ed:3f:
26:48:a5:b5:10:67:7d:4f:b7:c9:e2:6a:56:f8:b7:
ce:a0:d9:82:b9:24:38:29:3d:2d:2d:df:d4:f7:03:
f9:bb:07:b8:b1:4a:2c:ca:54:24:b5:0e:53:90:7f:
b9:46:f5:00:66:6b:4a:bb:9d:22:7a:79:79:33:a6:
d7:6f:49:04:8c:68:c6:9d:c2:8f:74:10:73:24:2d:
df:fa:ab:0a:9f:0f:a4:cc:23:cc:45:c4:e8:c4:ca:
ac:49:d7:eb:b9:9b:19:87:21:65:65:82:db:d3:25:
5d:c0:c5:0d:f9:56:c2:89:78:32:99:12:c2:c4:5f:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:CC:88:9F:9E:D8:F8:23:44:C6:DE:52:59:AF:60:7B:E3:15:36
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b0:08:78:2a:19:93:ae:6f:41:77:41:18:24:d2:58:9b:61:
97:b7:fd:25:df:66:bf:cd:7e:69:21:80:84:48:1d:00:b9:15:
56:53:40:f6:62:60:0b:70:3c:6a:03:ef:fe:42:e9:83:bf:c9:
83:91:d8:04:b9:62:b6:61:2a:62:a3:4b:51:e4:0b:df:14:25:
1d:0d:2a:3b:3e:de:ac:30:56:95:83:f7:d9:5b:d2:db:51:8f:
d1:fc:10:f9:8e:9a:fb:6e:56:4c:6f:f1:10:a1:ee:dc:09:8d:
ea:99:d2:c1:52:95:08:6c:35:fe:c3:6c:6d:da:9d:f0:65:56:
67:5d:4a:2b:5a:d2:bd:20:38:89:dc:98:b6:17:35:34:07:73:
b5:41:bf:b9:d7:e3:2c:f1:e8:07:c9:9b:92:12:dd:2c:25:72:
0b:41:f1:73:43:86:98:2d:fd:c1:e0:a5:20:a7:2a:f9:85:51:
02:b6:7a:4e:fe:8e:a0:df:f1:e7:d1:13:97:92:6d:70:19:13:
3c:ae:21:a8:aa:72:13:e1:c7:db:b5:f9:73:a7:f3:09:b1:98:
c4:93:7d:77:b7:76:82:4a:40:78:aa:fd:09:c9:bf:51:28:99:
df:66:69:9d:f5:22:6b:c0:d7:19:58:b6:f6:9e:cc:e8:98:ad:
be:c2:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:54 2025 by rpki-client