Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
File: 2fGfBczyIhOYRpwL6N3ATOFOE1o.mft (raw, json)
Hash identifier: jlVvMu/OYnArEfAeGGLGrwsff8clVVUArbW0KC6AAIY=
Subject key identifier: B3:67:84:94:B9:BA:72:94:B7:F5:E5:38:C4:41:51:E1:86:BF:8B:62
Authority key identifier: D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
Certificate issuer: /CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Certificate serial: 0198D5F129AEE0716D7314E70F40D41E46B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
Manifest number: 1217
Signing time: Sat 23 Aug 2025 08:00:08 +0000
Manifest this update: Sat 23 Aug 2025 08:00:08 +0000
Manifest next update: Sun 24 Aug 2025 08:00:08 +0000
Files and hashes: 1: 2fGfBczyIhOYRpwL6N3ATOFOE1o.crl (hash: SheC7oUNihGWx5eHgzgH1aCWNY7iPtV0QZx/I2RPSKo=)
2: B9-JyKOh9vcA8Yt248kp1OHsLjE.roa (hash: IbF0FRhBYEIf5hZ2KcvfEljtf1YgGGazPG/5I71dHJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:29:ae:e0:71:6d:73:14:e7:0f:40:d4:1e:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Validity
Not Before: Aug 23 08:00:08 2025 GMT
Not After : Aug 24 08:00:08 2025 GMT
Subject: CN=b3678494b9ba7294b7f5e538c44151e186bf8b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:f9:97:d8:0a:83:04:98:45:ef:de:87:9b:
37:e3:bd:92:33:96:5a:4e:0e:a1:07:d7:62:2c:c8:
0e:8d:dd:fc:b5:f3:75:16:af:0a:e5:d0:8e:f7:54:
15:a4:bc:a7:f8:37:5e:0f:cb:d3:dd:13:e2:9a:6b:
79:a9:b7:4a:9b:c6:4b:e3:fd:a6:0d:65:c8:55:7d:
03:8c:e0:74:61:dc:06:06:1e:c2:43:64:d2:6c:ac:
e9:07:7d:6a:a5:48:7e:76:b3:47:78:65:d6:65:86:
d0:b8:00:76:37:80:5a:df:6c:68:6b:73:5c:3f:d7:
b9:4f:ec:e2:0d:87:1d:9a:a9:eb:41:56:79:e8:b7:
65:ee:44:27:6f:b0:a2:24:a4:e1:8f:1d:c2:21:6d:
69:52:a3:1e:51:00:95:2d:1b:2f:4b:2e:7f:f4:ed:
0a:f4:73:86:24:bb:2e:eb:ce:a0:69:8c:d4:0b:7f:
6e:18:15:4e:aa:c6:03:cf:fc:c0:74:31:84:e8:0f:
45:17:31:01:e7:75:ed:fb:82:9e:91:19:09:3b:c7:
80:a8:1f:ff:bb:8f:d4:04:fe:ee:7b:27:cd:fc:b3:
a9:9d:32:32:6c:e8:64:61:bd:9a:a6:45:63:d7:13:
04:2d:08:03:7c:89:04:cf:c1:51:1e:2a:b8:43:b2:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:84:94:B9:BA:72:94:B7:F5:E5:38:C4:41:51:E1:86:BF:8B:62
X509v3 Authority Key Identifier:
keyid:D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5a:f3:67:2d:60:81:dd:55:b7:bb:40:74:2a:1f:1b:cd:5d:
a0:3a:91:82:69:69:2e:17:46:57:8e:28:4e:9f:8b:91:03:00:
8e:81:39:ee:0e:fc:6a:78:40:55:7c:e4:02:6f:41:d2:ae:fe:
63:07:ae:fe:d4:2e:35:73:90:75:67:d1:50:76:79:bb:af:cc:
70:eb:84:56:75:e7:bf:79:e7:21:22:d2:3a:16:10:3e:49:ac:
d9:73:e7:33:37:55:f6:0e:56:08:1d:9e:69:61:1f:6a:a7:10:
32:07:7c:a1:cf:92:48:df:91:94:62:d3:7e:d6:b7:b6:ed:1d:
d6:c5:4d:00:d8:07:92:07:64:e2:a0:e1:21:ea:83:30:7c:5c:
3d:d7:b6:ab:bb:f1:39:e3:8e:db:b0:6a:d0:f0:f2:6c:6c:81:
d0:2b:b7:14:e1:46:04:91:c3:97:0e:0d:95:5e:3d:73:d3:47:
33:80:80:41:72:16:cf:10:02:1e:8e:24:a5:c0:e0:1b:33:84:
d6:6e:c1:fd:14:d2:8b:9a:ab:9a:db:3d:12:6d:ab:0d:66:c8:
6e:dd:46:1e:fd:62:c5:05:64:11:a9:87:b7:4b:54:ba:07:3d:
54:98:ee:72:0d:ca:07:a8:b7:02:01:9f:bd:d1:2b:8e:4e:dd:
ea:1e:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:19 2025 by rpki-client