Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: 4b0IDATyBilg1h0JZk3wqRKemJeVKB5kTU/Hi0CdJd4=
Subject key identifier: 90:D5:01:18:68:BA:C7:5F:D7:BF:7C:C7:3B:A1:F1:1B:55:85:83:D5
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 0198D54EC4A7A75C64D9A8081A8D2E6D764A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0C22
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: 9YGCWm1FiIVdKw8mKzaESPMo43Y9X6YpDTF2OwJ/Cd4=)
2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c4:a7:a7:5c:64:d9:a8:08:1a:8d:2e:6d:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=90d5011868bac75fd7bf7cc73ba1f11b558583d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:00:83:26:69:3d:aa:03:e0:f8:79:13:bb:
bc:2b:4f:2c:15:26:fb:e1:4e:77:70:eb:fa:36:42:
da:0e:1a:87:dd:ce:69:24:a7:7e:7c:36:74:f5:a7:
2d:8e:90:dc:f0:39:21:0f:6b:27:45:c8:07:74:51:
15:d3:f2:6e:de:f5:73:3d:e5:76:9d:ac:0e:85:bd:
e0:5b:51:e6:8e:4a:a7:0f:5c:bd:af:c6:c2:3b:20:
4f:ca:ff:d7:36:dc:09:a9:ac:87:be:c8:b9:f8:16:
a7:56:b1:67:85:a6:47:12:74:28:66:92:fe:a9:44:
3e:f8:31:12:da:c0:f0:04:6a:b1:ff:6b:40:ca:3d:
9b:ef:a9:51:18:3d:2a:94:d0:f1:ba:65:b7:02:40:
aa:83:16:de:2e:6b:f5:4e:71:66:97:68:08:3e:b9:
9d:b2:26:e0:85:59:6a:e0:6f:68:e0:9c:66:e2:f8:
48:95:67:1c:2b:63:12:4d:43:fe:cb:6e:de:c7:70:
0f:c5:0c:86:a8:af:3e:ff:c2:64:65:e0:88:bd:8a:
98:f8:35:48:7e:d1:96:5b:48:6a:64:2c:82:95:4a:
75:e6:5d:49:66:51:5b:65:6b:5c:8b:64:e4:0a:b0:
96:d4:4e:38:33:34:df:93:27:97:68:59:39:83:b0:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:01:18:68:BA:C7:5F:D7:BF:7C:C7:3B:A1:F1:1B:55:85:83:D5
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:15:34:5a:c8:5a:ad:9e:c9:71:26:46:5b:b7:df:e2:bb:
1b:a3:5a:e8:46:95:05:1b:9e:72:0d:95:a0:57:b4:ec:ad:33:
8a:ca:af:4d:05:c7:36:3c:ea:53:af:c0:8a:18:ac:f1:9e:80:
0f:b4:14:d0:f5:5b:9b:fe:ea:58:5d:f5:02:e3:5a:fe:35:59:
a2:70:75:48:e9:d8:3a:02:4e:e7:6f:bb:3c:85:88:9c:aa:09:
2f:7a:39:62:ea:f4:9c:6a:53:74:96:c9:92:df:0a:0f:0b:4f:
30:04:84:87:1b:47:62:8b:e4:6e:f4:54:79:0d:57:a9:6d:6a:
4e:cb:f8:e6:c6:57:f5:03:03:6d:78:20:37:12:c4:a9:50:43:
8d:7c:89:92:53:a3:34:86:24:20:16:04:d9:4f:32:31:f6:a5:
14:fe:87:e1:83:e2:26:74:c6:10:ee:b4:36:8f:50:79:9f:98:
81:12:8d:f3:7d:05:06:ef:f9:ca:d7:d3:87:38:f0:1e:f2:90:
64:1b:2e:3e:60:ed:61:a2:c9:b4:c2:b0:1a:02:05:c5:ea:b6:
86:5f:5c:56:9c:f2:e2:67:c3:68:0f:86:79:63:b4:36:b9:28:
49:df:63:0b:85:d8:b7:64:7c:06:a1:49:18:3b:c1:cb:55:ee:
d3:eb:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:25 2025 by rpki-client