Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: yCU9lajydkOR8FLE+gFoN8JT1WeJwQGlLzuGfB+phFE=
Subject key identifier: 5B:F8:74:9A:F3:43:7E:C4:10:39:92:09:27:B0:29:42:EB:2C:D8:81
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 0198D54E78E42CD2D2F7155394085CA91F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 1533
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: gRc7yf9VO5YU/t4ADRYuWxMgqEudiRaBhxvLrDfOo2Y=)
2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:78:e4:2c:d2:d2:f7:15:53:94:08:5c:a9:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=5bf8749af3437ec41039920927b02942eb2cd881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:e2:f3:49:bc:0f:48:ee:2e:31:5b:68:56:
13:87:d7:fc:a0:df:f5:d9:3a:f1:34:c0:30:36:5c:
b8:78:f6:4a:6a:93:01:f1:b0:c3:57:28:6b:75:7a:
4f:9c:3d:29:df:fa:53:23:c3:7d:66:87:f5:35:7b:
d8:44:70:60:c7:77:6c:32:6e:e7:95:c0:13:a2:00:
0c:1a:87:3a:3e:c3:5e:64:3f:1b:8b:44:61:24:2b:
bb:48:b3:57:b4:77:e9:d2:d2:bf:30:c7:3a:25:ee:
db:01:53:a1:14:83:82:45:76:7b:25:4a:72:3d:8c:
e7:07:99:ed:5c:c1:8d:a4:ff:39:b7:7b:e3:f5:01:
02:a3:a5:ac:ee:7c:54:2c:24:38:b2:09:43:d7:88:
5d:fc:c1:c4:62:24:15:6f:41:2f:54:a8:a3:4f:c3:
50:8b:de:87:df:c2:0f:88:e6:3c:3b:0b:c4:e0:5f:
16:e0:36:17:16:c2:49:31:24:4b:bf:57:ca:95:46:
d7:88:7e:27:61:c2:70:33:46:5b:fa:20:1d:58:13:
f6:05:a0:d6:99:9f:29:71:92:43:31:61:89:6a:88:
7f:43:65:74:9a:64:b0:4e:40:d7:d0:76:da:21:d5:
b5:45:eb:08:35:13:7d:b7:15:68:70:c1:c2:a0:91:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:74:9A:F3:43:7E:C4:10:39:92:09:27:B0:29:42:EB:2C:D8:81
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f9:aa:5d:2d:13:11:af:b9:3a:09:76:9e:80:1e:48:b4:f8:
b4:ca:75:17:4a:39:f9:1d:dd:82:a8:82:d4:53:07:ca:30:a2:
04:5a:e4:50:c0:8c:a8:ee:c1:df:2f:31:f3:01:8b:b4:72:45:
25:2b:3e:9f:08:a4:c4:c3:89:13:23:1b:61:97:86:65:6b:e2:
85:da:5b:24:f7:6e:b4:0c:1a:5c:5c:4a:d9:5f:19:a7:20:0c:
b7:95:da:c0:55:1f:1d:c5:fa:3b:cb:bc:cd:f1:6a:10:2d:6f:
ae:6d:63:a2:e1:7d:86:fe:9a:77:95:59:54:9d:ed:a3:d9:2b:
1e:ee:38:d1:f7:47:26:0d:62:5a:98:f0:56:fd:1a:b0:25:f1:
ed:d4:29:ed:e9:c4:f0:76:c8:ca:e2:b0:21:4a:d3:30:d1:53:
1e:19:36:e2:56:93:d9:a8:16:25:10:f1:0f:96:94:9e:fe:45:
3e:db:ca:c3:76:b2:9f:cc:64:67:48:63:97:b6:2e:29:51:a6:
92:15:4f:39:06:f7:46:22:b5:a3:d6:d0:7c:dd:46:8d:c4:94:
d2:1c:52:fd:d0:11:0e:9a:48:7b:4d:16:d1:4b:e8:71:c5:28:
46:38:f5:25:50:c4:87:39:45:9e:ae:88:cd:9a:7c:cf:ce:84:
10:db:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:52 2025 by rpki-client