Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: 72D3Trhrg9xXOhqkG18m4AVUOsMus4UZRJhna0Hxnvw=
Subject key identifier: B7:15:64:B8:D1:93:28:49:2B:0D:04:9C:4D:35:92:70:A1:70:85:18
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 0198D47362E91C3CEFEE7A4220FCC632C020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 123C
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: MYKo1BJ2pmg+5e7lsNqP3gVU+Vo8QOF6vTs3ij9fOgs=)
2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:62:e9:1c:3c:ef:ee:7a:42:20:fc:c6:32:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=b71564b8d19328492b0d049c4d359270a1708518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:5a:5a:de:38:a3:0c:ec:68:36:b3:e8:9a:
c3:66:bf:40:74:41:d6:b5:c7:9d:eb:82:bc:9a:b4:
fd:ea:27:59:ab:fb:dc:7a:2b:61:b2:f8:f2:3f:4b:
82:ce:7f:dd:ed:75:ed:13:e4:60:c5:e9:c0:9b:a5:
22:68:b8:c4:5f:4c:ab:c4:b2:d2:64:dd:9b:6a:10:
9c:78:ce:43:c6:fb:36:17:ce:16:44:24:b1:30:47:
81:73:5b:d8:73:da:b8:20:c7:7e:d0:f8:33:fa:be:
0f:5f:1f:06:20:29:34:b3:4d:7d:62:84:1d:5d:74:
32:c2:da:7d:3b:46:a5:89:de:ad:9d:0f:e5:b4:69:
a6:f5:35:bf:e2:af:d6:f1:73:a0:fb:e9:a3:1c:89:
dc:71:21:32:a2:e9:cf:bc:c9:ff:9c:9f:df:40:d3:
cd:83:d7:bb:15:c5:e0:28:b3:23:71:47:94:6f:ed:
2c:e8:fb:de:3b:73:13:3e:10:30:4a:3d:77:fd:80:
2b:34:4d:43:8c:a9:cd:89:cc:c4:25:77:f0:3d:43:
7f:99:0a:59:bd:e3:37:35:6a:40:81:dc:6a:63:bc:
7e:bc:03:12:ce:93:22:6f:a8:42:a5:24:c3:2a:34:
a9:4c:42:78:6a:7a:a3:f9:a3:45:d1:7b:38:f9:fa:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:64:B8:D1:93:28:49:2B:0D:04:9C:4D:35:92:70:A1:70:85:18
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:9e:d3:18:3b:cf:49:29:3b:15:5c:0c:49:50:fa:02:ec:60:
06:f8:39:a2:29:45:bf:9e:a7:49:c9:7d:3f:bf:63:8d:99:2c:
89:23:02:10:c8:c8:ef:d1:c0:8c:ab:5b:75:a7:fe:3c:31:93:
e9:6c:34:78:2c:a1:f8:4e:0c:a4:05:58:19:bd:35:07:75:af:
03:f0:43:34:bd:e4:f0:d9:e6:ce:24:44:4e:2f:e3:46:0c:52:
eb:fe:07:a2:d2:2e:a2:e5:d1:ed:60:a3:bc:8a:aa:fc:54:a7:
58:66:96:7b:d8:19:14:23:ff:f6:b0:2d:73:29:58:56:a3:fd:
04:0a:ac:e7:2f:05:d6:48:a1:d3:d6:9d:13:4c:2c:4b:ec:46:
98:35:26:a2:87:ef:38:ee:9a:2b:19:0f:03:63:17:a5:80:8e:
f1:59:6b:bf:b0:1c:38:4f:7d:7b:97:5c:f7:5e:ac:58:d0:77:
10:b9:d8:52:de:41:33:d0:91:05:14:b5:b6:b6:81:f3:9f:d9:
af:c8:4c:2b:9b:df:a5:12:82:07:ef:6b:9f:76:76:0c:54:1c:
da:0d:1f:5c:99:92:fc:83:d3:a1:a1:b3:d7:77:b0:95:f5:ce:
f9:6f:bf:3f:c1:36:b6:df:d1:4b:2e:5e:aa:09:0a:49:59:f5:
8c:4c:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:51 2025 by rpki-client