Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: qJomZvSzyaVmIozSUiAAWMudAYnIKXKX2BjRlve8lnw=
Subject key identifier: F2:48:A2:DC:A4:29:7F:CD:ED:1F:9B:1B:B1:FE:99:00:C8:90:F4:D9
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 0198D7A8CD96608E41B97641BA049F56A258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 16:00:20 +0000
Manifest this update: Sat 23 Aug 2025 16:00:20 +0000
Manifest next update: Sun 24 Aug 2025 16:00:20 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: PH6zwhRpHj2vgQdpYQd2r29EjkxBtTL1gT/Bdf0G4Do=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:cd:96:60:8e:41:b9:76:41:ba:04:9f:56:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Aug 23 16:00:20 2025 GMT
Not After : Aug 24 16:00:20 2025 GMT
Subject: CN=f248a2dca4297fcded1f9b1bb1fe9900c890f4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:a7:c7:c4:42:b7:fe:0a:f8:64:61:58:f7:
0c:28:62:df:cd:a3:40:13:f5:88:15:46:84:26:ba:
49:7e:c9:7f:ae:29:a5:04:d6:dc:77:f1:fb:2d:d7:
e2:eb:ce:fc:d9:54:23:52:3e:50:15:7c:60:58:4f:
a2:08:ec:ef:94:f8:8a:96:0b:f8:d4:bc:05:d7:82:
ab:2f:1e:c4:c1:f2:ce:ae:3c:0e:b6:ca:79:15:a2:
00:b5:14:83:5e:e0:06:69:c4:80:d8:ac:5e:e7:10:
ab:47:e6:e2:b3:1a:e6:06:4c:2a:3b:14:43:9d:31:
c3:46:b2:57:0a:dd:7b:5d:d1:8b:c9:4c:42:f9:1c:
d1:d7:f0:4c:ba:61:3f:c4:fd:6e:14:bd:09:08:b3:
7e:1e:53:20:1c:15:e3:88:04:48:a8:6b:15:eb:5b:
03:5a:e0:7d:53:04:fb:d9:c8:12:b6:54:71:2c:68:
23:a0:38:2e:95:4d:2f:67:f1:c7:9a:d9:43:e5:b9:
8e:32:ff:90:3b:11:66:25:a3:55:68:c4:8d:db:e7:
33:9e:2b:e1:3d:ea:c6:98:20:c9:5c:eb:e9:93:c4:
ba:18:1a:3d:e0:9b:c0:ef:f4:80:e3:30:09:7e:c1:
fd:20:e0:fe:3a:b1:92:e6:84:7e:8c:63:5f:d8:ce:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:48:A2:DC:A4:29:7F:CD:ED:1F:9B:1B:B1:FE:99:00:C8:90:F4:D9
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:04:88:6d:8f:d2:4a:f6:7f:da:67:54:5d:f4:74:c9:6c:
01:8c:6b:24:9c:fa:87:82:ed:63:a6:8d:82:4d:cb:4a:01:ff:
3e:34:f1:c7:c9:d1:3e:dc:7a:40:f1:2e:7d:7c:d9:22:6e:b8:
86:95:ff:6a:4a:b1:ad:5d:f4:d5:fa:39:b5:48:ec:52:ff:59:
67:97:2d:97:ca:c6:5b:2a:16:6e:fe:9c:2c:e9:01:44:96:37:
8c:98:ec:b1:34:40:71:e1:b5:5f:1a:68:5d:c1:4f:b2:79:df:
33:bc:40:fc:c4:1a:17:fa:d6:e7:44:f7:45:02:ec:b7:35:67:
6c:66:67:d9:d8:e5:44:45:e6:d5:a8:db:27:23:4e:ba:35:b6:
e7:0f:58:2c:59:b0:26:8b:6e:25:41:a0:f8:12:b4:1d:24:e0:
8c:50:97:94:30:8f:91:d9:be:07:d1:83:15:9c:6e:e9:a9:be:
26:34:4b:38:27:20:20:4c:f1:6b:26:f4:c3:b1:e3:95:e1:97:
1c:73:bb:a3:f8:69:fe:a8:9a:cd:ec:5c:f9:a8:20:87:b6:3c:
78:1b:0c:25:c3:1e:28:29:22:b1:de:7e:74:69:72:0f:02:02:
3c:66:26:df:81:5b:e1:d5:21:c5:19:f6:98:aa:8a:be:9d:1a:
9f:96:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:00 2025 by rpki-client