
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: fmUHqftp/cThopTgNNUbNzYP1bizIyiCBWP/CRZ25/s=
Subject key identifier: EB:45:10:4E:CC:EA:B5:EF:D4:3F:B9:BE:2F:2C:87:9A:70:6A:BC:A6
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0198D5BC337BDCA3D7B6EC1783B311911A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0710
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: F8ljmam3vBOnvB4QbmiryGcxvCC4ge7Dqv+/x4Vdh4k=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:33:7b:dc:a3:d7:b6:ec:17:83:b3:11:91:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=eb45104ecceab5efd43fb9be2f2c879a706abca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:c9:d5:73:a1:ef:c9:ce:04:39:de:65:4c:
a3:5f:a8:4c:d1:cf:5b:9d:47:69:43:77:0f:16:d1:
fa:45:d4:5e:31:81:69:8c:1a:fe:c0:1f:3b:db:ca:
e1:ca:cd:fe:24:a5:fb:bb:cf:d3:66:ab:49:5d:ed:
35:54:65:44:a1:bc:a1:19:92:de:77:85:a1:d1:29:
a3:bc:fa:40:32:0f:84:d6:1d:a2:15:8d:eb:fb:db:
2d:9e:a7:61:a0:23:9e:86:c9:2d:c6:f2:cd:12:f1:
ea:76:e9:44:ec:ec:38:14:08:69:21:85:04:f2:da:
43:5d:e0:3a:bb:48:1a:dc:16:78:38:81:24:1d:ef:
c9:09:2f:e8:30:61:2e:9f:0e:48:6b:5f:34:4e:a2:
b0:80:55:e8:16:59:d1:a8:87:76:37:39:18:b4:0f:
da:56:33:0a:22:11:67:70:0b:d2:b8:5c:57:46:c3:
e7:12:94:0a:83:4e:d7:c9:1e:5c:ab:fe:dc:92:db:
2e:b8:ff:d1:c8:41:f1:ed:3b:6a:00:8e:35:38:e8:
41:21:9f:3a:a2:74:fc:95:44:88:a0:aa:93:44:10:
b0:26:d7:fc:06:1e:e2:13:66:82:e8:63:f1:bd:f8:
64:8c:d2:0b:83:94:5f:5c:45:8b:5f:00:96:ab:05:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:10:4E:CC:EA:B5:EF:D4:3F:B9:BE:2F:2C:87:9A:70:6A:BC:A6
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:a5:b0:2f:2d:61:b0:ed:be:1e:e1:9c:a3:4c:42:3b:a9:
8d:3b:4f:75:99:4c:3f:91:e8:d9:eb:e9:96:19:3d:4f:2b:c0:
d2:ae:48:4c:b9:08:37:00:aa:89:9a:be:f0:5a:65:d8:58:8a:
e6:7c:2a:22:1e:aa:40:2e:cd:4a:e8:e8:c3:8d:6f:6e:2a:9b:
a5:f6:36:8d:de:26:ce:bf:05:9a:a6:3f:8d:20:e7:48:ba:9d:
9e:8f:04:90:8b:91:ec:a5:6f:47:6a:40:9a:a6:ac:13:26:1d:
67:d0:ff:45:73:8c:38:9f:ef:38:e0:b5:1f:b7:57:a4:b0:ca:
45:93:14:3a:a9:7e:67:fd:ba:fc:99:a7:15:b8:79:49:13:d4:
01:c5:4f:d1:33:46:eb:c4:73:e4:ab:b9:7b:76:ed:4a:f6:40:
f0:63:90:ad:60:d5:e4:30:cf:a6:0e:8d:ef:46:39:54:44:89:
b5:f7:a7:b3:ca:30:57:0e:1c:da:89:0e:65:f6:22:11:c4:f9:
38:be:48:4e:d4:44:c1:3b:6b:9e:9f:8a:a4:f6:04:08:d1:7c:
54:70:47:9c:4a:5f:22:f7:50:1b:77:62:78:ec:f0:28:2a:0b:
3a:a5:d9:52:f0:5d:df:be:ce:bc:ea:c1:af:06:5d:3f:bc:9a:
d1:bf:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:41 2025 by rpki-client