Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File: 2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier: ekN8lKeMzTVqNq+G8oTFfDZ3AVBWW7U9ytQjXvwJlQQ=
Subject key identifier: 7C:B6:83:FE:97:28:11:99:B9:52:F7:CE:D3:F7:C6:80:BD:5C:FE:5B
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial: 0198D4A8483A5DFF5A743A0D91B5A8A91069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number: 0EC8
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: MS8sWSOruRfk5gPEiv/HorL7MXf4V4nYicrLFzxGVzw=)
2: eiMs1L-2oXZyMFT4lsivxnF_7rI.roa (hash: 0CKxvXKh07lSdtj09xAAc1IiwY6cm22Ml7wMgfzveTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:48:3a:5d:ff:5a:74:3a:0d:91:b5:a8:a9:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=7cb683fe97281199b952f7ced3f7c680bd5cfe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:05:0a:7f:ec:d9:94:81:b8:8b:9d:3d:46:
bb:3e:68:d2:30:08:47:19:8d:c9:59:b4:e8:98:a8:
ae:04:59:1c:98:e8:4f:e6:93:43:4f:6f:b4:3f:62:
0c:47:07:40:24:10:53:45:97:3b:31:db:d1:cf:95:
94:15:23:2b:d2:1f:6e:3f:68:46:69:06:79:b1:cc:
68:5d:04:76:09:f2:3a:b6:71:66:9e:5a:07:e2:2d:
7d:c0:56:66:b2:fe:77:05:38:b8:a4:f3:9e:25:ad:
d2:29:2d:90:df:61:63:e0:c1:7c:ed:68:80:80:81:
5a:1a:e6:56:f6:e2:c8:c6:1b:34:a5:d2:fb:37:83:
f9:95:6e:e9:89:88:81:c1:55:ea:b3:a5:dc:23:f4:
a4:cf:2f:5d:3f:75:26:8c:f7:77:ce:a6:1d:df:00:
97:5a:a6:cc:74:e0:12:18:70:69:74:09:ce:55:c4:
54:e5:11:a7:c9:93:78:1c:dd:89:ac:11:b4:8a:66:
f6:55:3c:fa:9c:71:ca:04:f9:c3:92:1d:76:1e:21:
73:8a:ee:14:cc:1a:e7:94:b7:0e:04:3a:17:5b:af:
cf:a5:52:a8:0d:2c:eb:8d:ad:83:1c:06:3f:18:40:
2b:07:18:ad:ac:18:82:cc:42:b4:a6:c0:10:56:3c:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:83:FE:97:28:11:99:B9:52:F7:CE:D3:F7:C6:80:BD:5C:FE:5B
X509v3 Authority Key Identifier:
keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1b:1f:c1:c1:0e:f9:26:fb:76:c0:f4:1a:39:08:01:f5:16:
9a:af:5e:10:cf:4c:c4:f3:2f:5b:d2:ca:55:37:47:30:a0:da:
ca:d3:12:a2:5d:d5:c6:c7:84:15:d2:c7:dc:29:78:4f:2f:27:
03:15:7a:42:8d:59:5d:f8:08:94:f6:dd:eb:05:d3:c9:8e:13:
0b:b2:a7:cd:0b:4f:10:96:20:c8:14:e7:c4:c8:0c:54:49:98:
05:b5:de:cc:da:01:7d:4e:c7:1f:97:c4:96:7a:f9:19:33:9f:
c3:ee:e9:0e:71:89:33:4e:a5:14:48:46:1b:03:19:2b:20:c0:
ba:9a:49:bb:91:b5:f9:47:cd:ab:bc:f5:51:35:10:2a:14:db:
03:57:09:f0:13:6c:f7:8c:7e:c7:18:4c:2c:8b:cd:a3:85:ad:
7f:c1:08:27:3a:66:b1:98:ef:fe:c6:0e:04:e3:8f:a5:43:fa:
53:1b:ab:a3:b2:16:ad:f5:a4:0d:dc:ed:68:eb:b9:75:31:f1:
92:cc:64:38:80:be:42:24:07:ba:82:eb:62:df:03:5e:38:5a:
fa:c7:cb:eb:3f:b1:15:05:f3:b7:e9:1b:34:47:3c:53:d8:58:
23:53:d7:51:ac:02:7d:57:50:a7:10:91:f0:d8:9e:ab:eb:4d:
f6:05:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:26 2025 by rpki-client