Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: 69spRbpdloBxPnAKn2aEnMSxQ9oefhZVhncNJmcoxEE=
Subject key identifier: 71:03:96:D9:EC:E6:4E:BB:92:3D:E1:DA:FA:F4:DE:CD:24:B1:18:B7
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 0198D706442CBB20A05BC5527DC87BEC7E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 138D
Signing time: Sat 23 Aug 2025 13:02:48 +0000
Manifest this update: Sat 23 Aug 2025 13:02:48 +0000
Manifest next update: Sun 24 Aug 2025 13:02:48 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: GIXumDH5SuzBlewtL5tkb1BDA3a3ZL6h2iqIhizjz14=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:44:2c:bb:20:a0:5b:c5:52:7d:c8:7b:ec:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Aug 23 13:02:48 2025 GMT
Not After : Aug 24 13:02:48 2025 GMT
Subject: CN=710396d9ece64ebb923de1dafaf4decd24b118b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:64:9c:1d:f4:c9:42:09:21:c0:bb:9d:2e:
24:ee:2a:67:90:5c:de:3e:f6:ac:4f:5a:8d:c9:a9:
a8:b3:7f:76:d2:17:c7:43:b3:ac:0d:34:35:c0:f8:
38:2d:b6:3f:2c:cd:f5:ca:94:71:0d:02:5d:8d:49:
bf:9b:d1:c7:42:93:77:f8:38:09:e3:19:47:ee:3b:
9d:ed:13:79:ca:b0:26:74:fd:f5:12:d8:b0:7e:60:
42:b7:3e:55:2c:47:eb:6a:c8:ec:78:c5:9e:ab:d9:
3a:90:fe:61:0d:8d:56:8c:69:da:b2:4d:13:a2:66:
4b:46:b4:f2:43:ae:5d:27:fa:41:d7:4b:36:3d:7a:
6f:77:34:07:94:04:81:47:20:39:11:5e:70:50:61:
c3:31:36:f4:d4:c8:55:9a:40:98:1a:27:20:35:44:
91:19:75:33:2a:77:4d:83:1d:59:05:3b:3d:d5:4c:
fa:b3:89:8d:8e:cb:a8:37:2d:89:ef:a5:86:32:e7:
58:c4:3e:25:1e:eb:03:91:cd:68:b2:5b:2b:b9:bf:
fe:ff:39:a3:7e:4d:93:b3:5f:e4:f5:d2:65:23:b3:
c2:0f:2e:e8:5d:45:e0:07:37:53:e0:89:3a:81:95:
89:f1:7f:97:08:55:67:80:a0:9c:af:89:1b:17:db:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:96:D9:EC:E6:4E:BB:92:3D:E1:DA:FA:F4:DE:CD:24:B1:18:B7
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:69:3b:ca:a7:c7:3f:8d:ca:37:21:5b:12:3b:be:e5:3e:
e4:2c:7e:a8:1d:e9:a5:f8:dd:eb:f8:b7:44:76:62:eb:61:02:
92:e8:19:27:45:b2:91:e8:3f:60:b5:75:66:20:58:fa:25:6d:
d9:b1:27:b8:b8:60:fc:af:b6:e7:24:4d:61:6a:d3:e9:ce:d3:
b9:01:d5:78:aa:ee:a6:c5:e2:6f:4e:c7:92:38:0a:8f:1e:61:
7d:40:0b:2c:7c:15:28:ec:6f:7f:73:e3:77:d5:f4:d5:f7:1b:
52:f5:68:0f:82:89:d6:4f:95:0e:cc:9d:cc:88:e3:14:ae:03:
46:db:a0:42:d9:fe:e8:dd:f9:73:5a:14:99:7d:05:29:bc:2f:
cd:2f:42:65:b5:a6:05:e6:00:07:eb:b8:7d:f8:b5:db:15:31:
7e:ec:d4:84:67:3c:42:ad:09:83:d0:9f:6b:64:f9:3d:c6:e4:
79:6e:80:4e:6c:8e:9e:71:39:b3:b5:d3:0e:68:b5:d2:11:e9:
91:07:71:72:3b:8d:f5:cd:e3:54:cb:c8:0f:30:9a:de:e1:39:
c9:43:7d:c7:a4:c4:96:40:2e:03:c9:ed:07:bf:b5:bf:55:27:
55:99:88:7b:d5:d7:3b:2f:cb:da:f2:4b:6b:66:6c:44:ac:bc:
2a:44:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:19 2025 by rpki-client