Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: jOCuZzl6RsvaYoN3/M4WBeJkSnzOijZ+TXm9EZ7eVOw=
Subject key identifier: 79:1F:8F:4A:1A:23:1C:13:9F:C2:B3:35:BD:E3:C6:D0:7A:31:C0:58
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0198D5F1333E944B7D973BC0B820F83B39A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: 0Z2tuJksksE9UPtrOk6I6KqStNArxiqUbaysNidcYp0=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:33:3e:94:4b:7d:97:3b:c0:b8:20:f8:3b:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=791f8f4a1a231c139fc2b335bde3c6d07a31c058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:06:36:24:31:c7:db:47:3f:c5:0a:51:19:
e2:e5:aa:ff:a7:c4:6c:9f:f9:73:4b:99:00:79:cf:
13:43:8d:9e:92:41:42:f9:c2:78:b9:f9:4d:4e:ac:
1c:7d:1f:42:e5:ad:bb:b8:0e:9f:dd:b3:9a:d3:98:
55:c9:37:83:a3:ed:3b:9e:4f:49:25:8c:10:ff:ab:
99:35:46:f9:e7:22:35:dc:97:b2:c2:c5:e4:83:e2:
15:4c:80:5e:95:d2:38:86:06:3b:eb:4f:95:23:c1:
b5:81:10:33:eb:b7:51:15:9a:60:3f:1e:8c:77:6d:
53:78:6c:66:3c:48:46:d9:81:9e:d9:db:3e:0f:9e:
44:77:f1:1f:8a:4b:84:10:b9:75:67:29:6d:54:13:
cd:5e:99:70:60:cc:db:40:2b:da:fa:05:41:1e:0a:
46:45:44:bc:2c:4d:e9:44:62:62:49:63:9a:11:79:
b2:09:10:56:5b:70:61:ba:a9:0d:63:9c:be:20:14:
f0:97:a7:bf:6c:74:43:fd:70:fa:8a:f1:52:e9:8d:
52:b3:16:c8:9d:c3:84:50:2e:63:73:34:bf:99:b4:
0c:2d:f2:5a:56:f3:81:f9:57:ac:c5:9b:6a:7d:f4:
e7:bd:42:b7:03:17:21:72:94:c2:cd:20:cd:61:38:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:8F:4A:1A:23:1C:13:9F:C2:B3:35:BD:E3:C6:D0:7A:31:C0:58
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:96:1c:2d:36:3c:b5:eb:ff:fd:bd:20:7c:90:ea:e8:bc:d2:
f6:d3:8e:fc:f8:1d:a8:c9:39:69:9d:94:6f:5b:3c:8c:6a:03:
aa:2c:94:18:ea:a0:58:96:3c:e0:bd:d4:bb:66:dc:6a:c6:7b:
23:80:ae:b0:0f:6b:ab:f6:79:0d:81:c2:25:18:fa:c9:c4:b8:
1b:63:70:ed:66:07:4b:95:b2:c8:04:7f:e9:0c:f4:9f:fc:fa:
89:f2:84:37:4c:b1:a3:73:27:49:bb:e3:cd:6c:95:e4:83:37:
5f:50:a1:b6:ba:e4:26:8a:07:e4:ac:68:04:bf:3c:37:f8:23:
d3:b4:3b:32:b5:df:e6:2e:b4:a5:27:da:b2:9a:6a:48:63:c6:
e8:2b:85:c1:cb:93:0e:ad:80:6e:8a:40:fd:cf:86:a5:a4:b4:
de:20:63:70:05:b1:72:c6:19:5d:76:1f:0c:80:56:6b:11:6b:
b6:3b:26:19:95:f7:62:82:60:be:5b:77:db:0f:fc:90:fd:e5:
1c:75:6b:96:89:76:65:72:a3:fc:f4:ec:e9:fd:45:1c:4f:df:
47:3a:ee:31:af:43:07:14:86:fc:d6:77:cd:9f:64:71:54:db:
b8:c8:5f:21:5d:e9:89:b7:a9:0a:bd:8a:22:f5:b6:c0:50:84:
99:5c:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:41 2025 by rpki-client