Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: FDc0Oy1vbCINHxoic5mj9q2fdlZrDOq7uj7w0tJUIGQ=
Subject key identifier: 8D:DD:68:36:0C:74:59:B5:8D:1C:7C:90:6F:BE:E4:4D:43:6E:94:CD
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 0198D583908665C74CAF121621C334C5BCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0B4B
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 6zPdhhihAawlN4dlV/7KvSo7x0A+r4SjqpENH/mgRSw=)
2: CG3x7I98EjZtkbH9NKVH8MGo7MQ.roa (hash: GCfsUPcC2f3i5NeIFShOXSyPQkyaLzW3HSZxxFMMc6w=)
3: GJCUY3nrgNM2NDxV-O0zUbUykYY.roa (hash: EJV3m3TtsYZ5PvcDYBP3yPbAO1evED39x6o2hDg8w7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:86:65:c7:4c:af:12:16:21:c3:34:c5:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=8ddd68360c7459b58d1c7c906fbee44d436e94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:07:b6:f8:bf:19:ff:5c:f1:0b:ae:75:f2:
d6:57:b0:49:54:04:a3:7e:14:c2:c2:b9:4c:90:ac:
d8:4c:8d:fd:16:9d:62:73:0d:2b:69:a0:92:15:dc:
62:ea:2f:f7:38:58:bc:85:7d:b0:c6:43:d5:c6:bd:
93:86:fd:39:38:07:34:91:4c:6b:f8:71:3f:85:7a:
bc:86:6b:2e:29:f3:41:e0:eb:c4:80:ac:b2:4d:5f:
95:ce:72:b4:40:41:0f:8c:b6:e0:fc:eb:84:18:7c:
db:a0:19:af:c4:cc:69:b9:4d:2b:e9:b6:6e:3e:f8:
da:c3:31:cd:92:85:6a:0e:f8:dc:e8:73:58:80:09:
41:9d:40:09:a1:04:ff:b9:86:b0:68:a0:e1:61:31:
e2:52:15:65:ef:ea:bc:ed:12:5b:cd:34:ec:0c:2f:
59:4d:62:cf:8a:b8:ca:40:88:bf:3a:d1:3b:98:0e:
a8:29:fc:db:86:75:70:9e:0a:88:01:74:7d:23:11:
cc:86:cb:3f:7e:e5:ee:41:6b:95:49:02:1b:e0:ce:
46:6f:52:39:ca:fb:dc:7e:c1:3a:7a:f7:1f:5b:83:
84:70:7e:94:6e:22:f0:d2:cf:d1:44:84:56:fc:44:
a7:8d:52:20:51:c8:7a:90:a0:9e:0c:5b:89:6c:df:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:68:36:0C:74:59:B5:8D:1C:7C:90:6F:BE:E4:4D:43:6E:94:CD
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:68:3a:eb:6d:a3:97:df:75:68:e8:77:50:96:fc:74:55:
72:fe:3a:21:59:19:6a:1a:c4:bb:f0:c6:41:e6:1b:2c:11:f6:
d4:f9:c8:d5:90:dd:11:44:ea:6f:39:ba:85:22:72:8a:3a:45:
e9:8f:bd:92:2d:59:a9:c2:41:51:60:b5:04:da:4c:73:33:95:
eb:07:1b:24:b8:b1:3d:bf:47:2c:8e:0f:f9:e2:76:51:dd:05:
03:7c:74:6f:49:2c:48:bf:6b:0a:6a:3e:0d:44:12:bb:7b:9e:
a2:b0:cc:bc:12:e4:5f:33:fc:bb:46:f5:b5:49:29:fa:f8:9b:
49:43:ab:f6:42:4b:0f:a4:bd:5f:f9:e4:14:3b:3b:d5:38:d7:
a1:df:1e:2a:4c:bd:b1:65:e2:75:33:02:82:af:62:1f:48:fd:
4d:33:a0:f0:bd:16:2c:78:05:c0:fc:36:e9:53:8d:ea:7a:7e:
3f:c0:1f:44:10:d0:ad:63:5e:05:47:ba:25:0a:23:8c:2d:d7:
63:00:60:25:4a:1d:77:c2:4a:54:23:1a:5d:b4:2c:a0:39:f9:
97:24:60:c0:3b:e5:f6:3e:94:fe:ce:c4:59:1e:93:99:12:4f:
8d:c4:c5:39:64:c4:22:57:f9:42:ae:5e:2b:e0:ab:59:a2:4c:
8f:db:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:22 2025 by rpki-client