
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: c7ETNoaI53m7n4vYPgrSdYH0M86MdwUgR9ChvFMS/8M=
Subject key identifier: F6:70:C3:BB:09:6C:EC:C4:79:CF:42:6B:88:90:6B:A1:30:8A:E9:37
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 0198D54E651743258E3F90E3EDA63A189F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: JgplMPufrSLj/Qfam4jtMh1m4DjBkr27K9kYOZPufJQ=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:65:17:43:25:8e:3f:90:e3:ed:a6:3a:18:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=f670c3bb096cecc479cf426b88906ba1308ae937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:31:f8:e1:c3:7f:98:fe:d1:02:95:de:ae:
63:b7:fc:5c:22:89:b4:3b:c7:51:ae:42:86:92:44:
d2:02:51:1f:fa:98:1c:3a:fa:50:15:09:9b:fb:98:
ec:7a:bf:49:63:ca:59:82:05:87:38:b3:ef:e6:83:
e1:83:3e:73:c2:26:31:4c:8b:ca:79:22:f8:ab:91:
b7:d1:a0:fa:f0:ad:ef:d2:b4:08:22:95:e1:17:3f:
c5:f3:4c:03:9d:63:84:38:92:2b:06:98:19:5c:b4:
ce:6a:7e:32:91:f2:13:1a:b0:d0:c1:34:b3:86:f3:
8d:aa:7b:d9:89:72:fe:db:ab:88:cc:c2:0e:7e:4f:
c2:c0:01:01:17:22:c4:14:78:22:f2:ce:4b:88:fb:
1f:19:89:24:0e:f9:2b:be:92:25:7e:03:6e:66:82:
16:1d:5b:5a:c5:66:bf:5a:17:bd:8c:85:39:7e:1e:
83:cb:10:c6:fb:91:1d:1c:eb:09:c3:a5:e7:4e:75:
00:a7:bc:c5:dc:b9:1e:5e:e6:64:45:88:32:a3:a5:
15:f9:e8:ec:27:4f:57:11:7c:9f:ed:e8:2a:fc:37:
b3:f4:18:ff:66:65:17:91:5b:1a:82:0e:cf:91:c2:
f1:45:9f:f6:64:2e:db:f1:df:92:37:41:80:66:8b:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:C3:BB:09:6C:EC:C4:79:CF:42:6B:88:90:6B:A1:30:8A:E9:37
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:75:38:b6:cc:03:0d:69:71:a7:dc:7d:80:4e:75:b2:a1:31:
29:cf:cd:a5:29:e8:49:ad:7c:1d:f6:bf:20:a6:82:3a:cc:3f:
8d:91:bf:9f:58:ee:95:d5:53:7b:88:ce:2b:db:c6:06:38:10:
f7:21:f2:1e:c1:a5:35:d0:bb:c1:29:2d:e6:eb:9e:81:bd:ed:
16:91:3f:af:bd:e5:c3:8e:87:dd:ca:34:56:d7:ee:dd:1b:21:
e9:4b:0c:cb:f0:a3:1d:7b:f4:d9:4c:74:82:16:bd:ea:90:f1:
ab:68:75:f3:87:fc:53:19:90:9c:3f:e4:12:8b:ea:b0:98:db:
5f:4b:97:63:52:4d:16:65:53:3f:2d:cc:d0:23:8e:fd:c9:64:
57:42:b0:46:9b:30:95:58:56:d1:36:23:4a:bc:24:4f:48:91:
56:e5:24:2d:73:0b:e1:fc:c7:a4:8d:f9:58:7c:83:ee:f4:e0:
66:7c:17:1b:98:ca:d1:0c:a9:6d:c5:69:61:d9:c6:04:8e:33:
5d:1a:75:a2:ea:9f:89:32:62:62:d9:ff:74:33:fd:38:de:46:
43:e4:6d:58:90:29:4a:5c:30:6c:31:d7:c7:21:d8:ef:78:3a:
04:6d:3e:2b:5f:da:7d:bd:99:0b:3f:e8:03:93:0d:5c:91:03:
76:e9:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:34 2025 by rpki-client