Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: +EQ6TFW2ZX9HImre6R8Lx7/ZYRIJN2VZDH+2QNcA6JE=
Subject key identifier: 48:4C:BF:0E:2C:D7:95:D6:1F:79:1F:99:D7:32:0A:DC:27:0E:82:61
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 0198D54E9DC14D4FB1BE0DA82FCE33DF97EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0C28
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: gFCHviL6Q+9+mFY6cdAqhWNopvzH+FMAFvNr1lJxYdc=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9d:c1:4d:4f:b1:be:0d:a8:2f:ce:33:df:97:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=484cbf0e2cd795d61f791f99d7320adc270e8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:ac:85:77:2f:23:77:5c:8b:b1:6f:ec:f9:
02:dc:b3:f1:d3:91:3b:94:64:79:c9:c3:e1:5b:03:
1a:0c:a1:07:92:b2:ac:3b:59:49:42:3f:56:e5:ef:
ad:d7:37:98:94:1a:24:d1:10:60:db:f5:e7:16:5d:
e5:3e:10:09:d6:93:12:7e:57:cb:8e:98:20:40:82:
b7:48:8d:aa:8b:7f:52:12:cf:d4:65:e3:68:e2:e0:
a7:a6:e8:dc:ff:af:31:da:c3:0a:51:d2:f3:49:32:
89:fb:46:bc:bf:e5:90:6b:53:05:ac:84:8f:b3:74:
fd:b5:bc:cb:9e:0a:1f:1b:67:27:35:59:52:ca:7c:
a1:ca:b8:ee:44:6d:ff:6d:cd:0a:73:24:12:1d:4a:
3a:d9:f4:ca:33:e4:6f:a5:83:7d:5a:34:25:e7:2f:
71:f0:a0:ed:e8:cc:7d:07:97:63:a3:e4:16:bb:bf:
28:2b:44:a1:47:36:42:c4:29:15:17:31:ed:a7:67:
1f:ef:12:fb:43:87:c8:91:81:30:ea:98:fc:1e:e1:
2c:2e:06:b1:17:71:16:c3:28:4d:7e:dc:e8:e9:b2:
34:59:11:cb:6a:68:26:e6:17:5e:4b:95:23:e3:48:
bb:0a:35:13:de:48:aa:6c:1a:e3:cc:f7:86:b1:79:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:BF:0E:2C:D7:95:D6:1F:79:1F:99:D7:32:0A:DC:27:0E:82:61
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1e:a2:88:f0:1b:44:7d:d3:4d:e2:51:67:ab:5b:26:39:4f:
af:06:ad:fa:e6:72:67:55:d9:78:51:b0:5f:c9:f0:c2:60:80:
51:a7:3a:61:26:9c:e8:d6:a3:8b:7c:5f:72:e9:e9:19:ac:73:
1c:64:8a:eb:0c:31:98:48:b8:49:8a:e5:33:0d:36:4c:7d:b2:
61:a9:12:c9:a2:6e:01:af:5e:a1:b8:83:dd:27:cf:c5:71:37:
5a:70:7c:a7:c3:0c:06:ae:c7:88:c3:a0:1d:52:a3:9d:5a:2e:
a0:c2:59:c7:2f:47:69:e9:96:62:84:d9:0b:48:cc:87:b4:d4:
7e:ff:6c:15:d1:38:e4:4b:65:c9:b3:d4:af:a4:ef:2d:13:a7:
95:15:fa:15:55:b2:f3:b7:2c:cd:fd:a6:f2:88:16:99:99:9d:
25:86:e0:7d:94:91:24:33:53:df:43:2e:8b:49:ab:fb:e1:93:
28:65:f6:c6:fc:62:0d:dd:cd:ff:f7:d7:9c:a3:a2:76:a2:b0:
ec:43:12:10:5a:e4:49:58:ff:39:24:47:3b:b7:32:9a:27:31:
89:0f:76:b2:54:4f:98:75:e3:8e:09:9f:5a:f5:3a:e6:ff:80:
cc:da:55:9c:fe:df:f2:85:01:83:6f:4e:ea:fd:02:31:97:f6:
a6:0e:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:24 2025 by rpki-client