Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: 4u0X9z/VFUm9rxO5is94Nd6ujTs33ssb7tLmni+jwKo=
Subject key identifier: 18:A7:D3:6E:15:90:39:F2:1B:30:10:25:3A:25:7E:DF:98:7F:89:E8
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 0198D84F14DCD57EF6670265A50D39B531DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 48
Signing time: Sat 23 Aug 2025 19:01:57 +0000
Manifest this update: Sat 23 Aug 2025 19:01:57 +0000
Manifest next update: Sun 24 Aug 2025 19:01:57 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: p8AEkTYbfUo5u6/Zd3aWvylW3gOZgvD5xa5U0E1wk8M=)
2: DnzCg_u4NFNmMwRYc8qXyMIRWiY.roa (hash: xF2+ZjEPkdHENu1uFlay4DzSYMCWEitq04qek3Yq/2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:14:dc:d5:7e:f6:67:02:65:a5:0d:39:b5:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Aug 23 19:01:57 2025 GMT
Not After : Aug 24 19:01:57 2025 GMT
Subject: CN=18a7d36e159039f21b3010253a257edf987f89e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:54:a5:58:e3:d4:b1:2b:3c:07:49:55:c1:
ff:b6:38:05:51:21:8e:8a:31:1c:6f:9d:b9:a5:7f:
03:5c:b8:cd:01:2e:f4:36:d3:ed:46:6f:7e:f3:56:
9a:e5:e1:0d:f8:d7:88:2a:17:97:1c:7e:6f:8d:cf:
e6:ac:42:d3:ab:31:c8:05:41:22:0e:27:89:8c:16:
41:6a:fe:e4:dd:56:5d:f5:25:f0:a4:08:54:6d:f8:
c0:6f:31:80:66:d7:d8:dc:69:4e:cd:73:d0:83:b6:
9e:a0:33:23:df:8a:00:85:7e:70:df:34:d3:25:61:
be:5b:62:b2:4f:20:3d:74:bc:87:c3:36:cb:dc:2c:
04:0a:00:fd:89:40:4e:7c:98:0e:fb:71:6c:09:cb:
4c:59:1b:7d:a1:ec:f0:90:83:af:3b:46:c6:ee:a3:
60:f0:62:4d:cd:38:74:17:71:0c:70:7f:8a:a9:b7:
10:e2:b7:e5:ad:77:1d:70:d6:74:5d:b8:10:f1:c7:
e2:cf:a9:e2:45:5e:cd:e5:04:07:7b:72:71:72:5c:
34:5a:6f:39:55:81:48:d2:74:36:03:b7:8e:4e:bb:
d2:da:07:dd:1f:4b:e5:89:0a:b8:25:b1:df:e7:12:
e8:1c:0a:43:12:78:ec:c8:92:c7:5c:83:a2:1b:cd:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A7:D3:6E:15:90:39:F2:1B:30:10:25:3A:25:7E:DF:98:7F:89:E8
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c9:3b:f5:dc:53:c0:04:95:46:eb:06:fc:af:82:13:60:86:
0e:d4:cd:87:2f:8c:e6:45:cc:5f:de:78:69:60:d4:d3:7a:8d:
db:dd:b2:ce:65:7c:04:aa:de:c7:57:93:a1:cd:c6:95:11:69:
07:ac:d7:3b:f0:cd:8b:81:4d:90:49:0b:f9:9c:31:99:ad:4f:
8f:a9:9d:dd:dd:40:6d:53:d9:fa:1d:8a:e6:fa:3a:25:04:6b:
83:eb:7c:7d:e1:3e:23:4a:eb:e9:bc:54:fe:65:84:d1:cd:5f:
0c:d7:42:a5:7c:2a:3c:4a:f8:f8:24:ba:4a:1e:88:e0:b6:07:
e2:b1:ca:95:c7:43:a0:30:80:cd:92:bf:fb:7c:7a:d3:bd:c0:
b6:85:c5:78:06:99:2a:42:22:8f:42:e5:08:f5:94:5b:c5:7a:
83:f5:76:64:1d:e7:79:ac:e1:de:15:f2:e4:d1:06:89:0e:38:
e8:2a:43:4b:e5:b0:a2:35:78:b2:94:b3:45:92:e7:77:5c:cb:
41:6d:3a:b5:28:08:7a:21:7e:24:71:b5:3b:cc:c2:71:eb:69:
2b:4f:f4:86:59:18:f1:b2:50:71:16:4f:35:ed:a9:25:63:7a:
77:c3:61:69:77:93:6a:90:e4:e7:e0:47:2e:ea:e2:18:77:17:
51:0e:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:58 2025 by rpki-client