Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: 44INBFrxcS1KKor3pW1066wuEFwWGv7NjODOFdASXHg=
Subject key identifier: EB:74:79:B4:25:B2:2F:FB:41:90:A6:0E:0D:EC:03:DC:C0:2E:FF:F6
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 0198D54E353AE25FCD624923CDB61C4923D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: 3eTTicuhC1XlWKv47V67cit9pCDF0vcAJu62g9quY4Q=)
2: 4yhoCs9M-fjQaMlDWlUpC1ERe-g.roa (hash: t+8njXgDpdo9kegDaGKO6tPmuatvzfS0I/p9sqY0v4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:3a:e2:5f:cd:62:49:23:cd:b6:1c:49:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=eb7479b425b22ffb4190a60e0dec03dcc02efff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:a8:bf:cc:0d:ff:5b:c7:fb:34:68:90:6f:
76:be:00:9c:38:5d:e1:6b:4e:37:8f:12:ff:f9:ce:
12:3e:a2:a0:3f:b2:09:5d:b2:2b:02:15:27:e3:f4:
82:80:74:2e:da:1a:f7:bb:b6:53:aa:f1:44:77:a6:
35:5d:1f:ef:44:0e:71:fe:d3:53:df:cb:9a:11:a4:
2d:53:0d:aa:dc:af:c0:a9:51:5d:d2:df:1f:11:3e:
f1:dc:ee:29:08:6f:7d:ef:dd:93:a2:ce:f4:a3:16:
32:fb:63:34:12:4c:6c:0e:de:d6:3d:98:3d:3c:6e:
06:cd:cb:35:8d:0a:00:2b:84:3b:64:1e:a3:eb:ae:
57:79:da:f7:68:65:d9:e0:dd:3e:cb:6b:32:f3:68:
bb:a1:4a:b5:53:84:4d:d3:a7:6a:49:5f:07:f9:83:
de:91:07:42:1e:e1:c9:3d:47:4d:77:4a:57:5b:20:
1b:4a:36:6c:15:ac:0c:cf:f8:a0:97:ae:0e:2f:92:
2f:d1:6b:7d:b8:cf:c7:7d:1c:4c:2a:1e:9f:84:5b:
32:95:f6:d3:2c:27:a5:fe:81:9a:c0:dc:75:0f:d6:
cf:44:7d:2f:41:6a:c9:c3:bf:f7:24:32:05:da:ac:
1e:e7:76:bc:52:79:90:7e:b8:4c:eb:79:5a:14:b4:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:79:B4:25:B2:2F:FB:41:90:A6:0E:0D:EC:03:DC:C0:2E:FF:F6
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a9:6a:d5:93:26:9b:69:a8:40:ce:51:df:01:a7:c9:94:c0:
b7:b2:c1:e9:47:a4:44:ae:b3:80:58:7f:8a:65:dc:81:4d:91:
18:4e:c1:0a:1e:36:f2:c2:b6:47:3f:aa:1e:d3:80:6a:85:91:
ee:f8:80:59:13:90:d6:18:67:2c:e2:35:9c:a1:3b:09:a1:fd:
c2:6f:ce:e5:32:10:58:5a:29:e8:4c:6e:af:5f:3d:8d:ef:2c:
ff:5d:ba:22:52:82:bb:22:fe:6e:12:46:14:e9:fe:90:bd:ab:
75:61:a9:0b:56:28:af:10:fb:8d:d5:ea:9b:31:47:9c:31:5a:
4f:3d:f0:53:3e:b9:e3:54:fb:a7:ea:21:7a:70:ba:3f:2f:6a:
d3:53:08:e5:0d:cc:4f:da:56:7e:1a:0d:0b:7c:8a:a3:d0:52:
20:5f:99:a7:67:72:70:04:5a:72:2d:16:6f:ad:b0:f1:0f:80:
98:29:68:57:9a:5c:2e:4d:0c:96:86:22:34:cc:62:94:af:ff:
a2:a1:fc:49:dc:da:84:36:0e:98:ef:24:9c:bd:46:ab:c3:2e:
2c:6c:03:d5:0e:13:42:4a:6a:78:5f:9a:4d:a9:7b:b6:48:2a:
4a:93:6f:ae:a5:1e:7d:c9:24:c4:e9:9c:23:e7:45:4e:db:9d:
a4:5c:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:10 2025 by rpki-client