Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier: 3frzeMhnU2J5k3gcXTOgS2IRO0U/JUXEgWV9dBPAMPs=
Subject key identifier: 09:88:59:C4:66:4A:64:02:CD:0B:5E:8E:5A:1E:33:86:4B:4C:B8:BE
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 0198D5160ECC9B9EAC7B3D31C5859846A141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: ApVVla0ZkYPY4VtRFKmZiWrRNB+lEJRWjgTM8Ulwk6w=)
2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0e:cc:9b:9e:ac:7b:3d:31:c5:85:98:46:a1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=098859c4664a6402cd0b5e8e5a1e33864b4cb8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:d2:8a:d5:b3:a4:71:dd:16:f2:01:43:89:
c1:d1:9d:d2:bf:df:ce:28:bc:fa:44:cd:25:b1:2c:
5e:35:b2:38:b5:04:79:76:37:52:93:f7:0e:0f:dc:
bb:08:27:7e:35:3d:ff:30:2d:45:96:5d:ab:aa:73:
ce:36:7c:31:0c:e8:ac:8c:f4:3f:52:1d:6a:ac:72:
37:dc:a8:4d:d4:f1:a3:62:29:20:e7:17:5e:9c:42:
e1:d5:46:7e:f8:be:fb:9e:59:38:9d:ee:02:0c:f8:
60:88:8c:5a:f7:ac:33:08:b0:84:e9:46:4e:5c:82:
32:58:c2:e1:a7:49:46:03:81:eb:ab:65:21:64:30:
61:ef:25:4b:23:63:0c:86:26:cc:0d:bb:99:a3:7f:
d0:6c:28:2e:b2:20:4b:5f:a7:62:04:6f:4a:c3:68:
c1:b9:25:b8:ff:34:a9:54:89:9a:55:a6:0b:77:fc:
7d:08:bb:73:13:bd:52:1c:da:8d:4e:d4:33:07:79:
30:aa:01:43:e5:d8:d3:5d:cf:cf:ea:73:96:00:53:
8b:b8:4f:3e:41:90:64:0b:01:84:27:0e:b0:95:43:
09:18:5a:e9:a0:48:84:8e:8e:ea:65:68:03:68:a4:
15:61:c8:1c:d6:5b:d3:0e:c8:92:01:aa:e4:23:0f:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:59:C4:66:4A:64:02:CD:0B:5E:8E:5A:1E:33:86:4B:4C:B8:BE
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:65:31:26:15:f3:ae:f4:bf:a2:d1:d4:1e:5e:75:45:21:87:
75:bc:b4:ab:9d:5e:67:70:89:d2:dc:9a:6a:00:9e:ad:81:a4:
4a:ed:27:07:ba:dc:33:57:55:a3:5a:3c:28:97:d9:44:35:8b:
d2:2a:af:90:22:fd:b4:52:52:b6:bd:a0:5d:ed:f3:4b:6f:b1:
b8:62:f9:c0:87:5d:f6:6a:a3:62:2d:1e:c7:9c:19:fa:56:9b:
fb:58:24:61:58:fc:c9:0a:26:10:36:87:f7:0d:82:db:c0:4d:
c0:92:2c:16:8e:69:d9:47:de:07:f6:59:b8:f9:a2:14:1f:8e:
b6:de:fa:d5:cf:e9:bf:2d:31:42:5b:39:52:08:ea:30:d9:69:
ce:44:20:86:ed:07:17:64:1e:af:02:7a:c4:38:49:f8:a2:1c:
cc:ef:c5:dd:34:26:55:52:86:e2:fd:a2:85:8d:7b:c0:ae:d8:
1d:4f:50:10:b0:4d:84:88:b5:2b:c6:3e:54:c8:c6:99:c0:39:
ed:06:b4:7b:37:2e:53:ee:ae:19:26:c6:32:43:38:fb:15:bb:
00:04:8c:9b:59:a8:b5:08:d2:b7:b5:7c:82:85:a7:87:bd:9a:
d3:04:b9:15:dd:ad:bd:65:f8:12:15:f6:9a:2f:42:7f:b2:01:
89:69:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:42 2025 by rpki-client