Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: zuiV6/HmJIoGtr2N2VwIfaTU2EjK4yaFrB4NUczsZdM=
Subject key identifier: 0D:23:12:6F:FE:89:D6:8B:FE:85:1F:D0:3F:01:F1:B2:3A:67:1A:23
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 0198D70580F644F4C4F587197348EB49761A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 076F
Signing time: Sat 23 Aug 2025 13:01:58 +0000
Manifest this update: Sat 23 Aug 2025 13:01:58 +0000
Manifest next update: Sun 24 Aug 2025 13:01:58 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: HRxWUcTjoh1qcc/FLP1KUkTcptXrDANsE0lhLssMF2o=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:80:f6:44:f4:c4:f5:87:19:73:48:eb:49:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Aug 23 13:01:58 2025 GMT
Not After : Aug 24 13:01:58 2025 GMT
Subject: CN=0d23126ffe89d68bfe851fd03f01f1b23a671a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:f5:f0:6e:b1:07:2a:99:b0:dc:ad:32:5d:
54:a0:77:ad:2d:6b:27:3c:37:f0:dd:da:f0:d0:03:
c7:a3:4a:43:9d:99:20:4d:89:ae:af:5d:d9:74:ac:
f9:69:6a:72:be:32:64:79:87:d6:b5:36:6d:5d:99:
e3:9f:cb:61:2c:22:29:dd:4d:f2:8f:0b:14:e2:fb:
2f:1b:b3:78:4c:63:fe:8f:ec:39:8c:42:58:db:cf:
cf:e4:82:13:c0:96:7f:9d:31:22:6b:ce:90:88:e3:
da:5c:da:3c:b1:8a:28:0d:ee:3f:c3:45:be:f6:09:
2d:08:8a:9e:b1:5d:0e:f4:e5:92:e4:0d:01:4c:9b:
8b:ae:39:62:96:f7:2f:92:f6:20:5e:98:81:02:5d:
ac:25:ad:d4:6a:2e:e5:78:d3:f1:8f:05:4c:8b:74:
31:ce:dd:c2:ee:62:dc:3c:62:f9:ed:97:82:0f:ea:
1c:5d:46:6d:a8:70:a0:9a:8b:26:54:cc:7e:9c:67:
20:0d:61:d0:4f:08:c1:50:05:40:f6:d1:a2:49:2e:
d3:5e:6d:06:14:93:a5:c3:4d:5b:6b:23:bd:bf:eb:
a7:98:d9:67:89:fe:15:b4:f6:b6:08:dd:4d:02:6e:
0e:c3:a6:c6:c7:3a:29:fc:31:31:e9:22:3a:3e:3c:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:12:6F:FE:89:D6:8B:FE:85:1F:D0:3F:01:F1:B2:3A:67:1A:23
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9d:1e:16:e8:ea:3f:68:50:3c:51:5d:8e:2b:82:fe:0c:a7:
37:84:d2:1e:1c:b6:da:14:d5:b1:ec:f2:4f:32:81:30:5a:7f:
68:99:e9:19:a7:fb:63:8e:09:e9:5c:ae:87:57:fe:b8:d6:72:
a9:35:68:86:56:0d:69:87:bb:4f:a2:63:72:68:89:7d:6d:86:
19:20:0e:12:4d:c1:92:5c:9b:d2:5e:4f:c6:d9:ba:52:1e:e1:
2e:f8:33:af:7a:bb:14:8e:72:09:02:43:cb:ff:e8:cc:cd:14:
92:96:aa:d9:07:55:26:0a:84:23:b4:6f:31:a8:6b:a3:2b:44:
6b:5f:d4:90:a6:1b:84:23:2a:bd:57:f6:d3:7b:4f:5e:91:8b:
7b:94:63:be:5d:29:8a:cc:d1:2f:cd:83:d1:5e:42:d4:44:76:
30:99:1c:c2:24:20:75:02:77:0f:85:41:94:56:ca:e2:1d:c5:
a7:74:88:2c:3d:6d:e5:32:c8:34:b3:ab:e5:d9:65:40:01:8d:
d1:9b:11:c5:a9:65:24:b4:f5:a2:ab:ed:f4:f1:99:61:bc:4a:
39:bf:ba:2f:81:32:5a:c2:c5:a5:9e:44:58:f8:07:bb:84:cd:
18:59:6f:87:73:69:8d:48:a0:92:fb:3e:f8:91:f0:16:2c:64:
49:2e:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:53 2025 by rpki-client