Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: 6OZJlXLuF/XFiAM9ISQGNdjPgWEU+0/VqI7o2ctB44o=
Subject key identifier: 46:F7:E9:7E:EB:27:5C:4C:A8:05:8E:1E:16:54:EF:AA:E5:28:74:3F
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 0198D47374779E08295CCCF0099B0FF2EF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:12 +0000
Manifest this update: Sat 23 Aug 2025 01:03:12 +0000
Manifest next update: Sun 24 Aug 2025 01:03:12 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: HgUqLzJ5DE9jpK1F8D5LzsEDOj5/PQqy7I9vvYcueFE=)
2: _y5CZTQPUqUUQngHW900Y82Ke5c.roa (hash: NWkl1e7xKV8FX9A552bXtm6FLbLssbeZQgoWd/8O4Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:74:77:9e:08:29:5c:cc:f0:09:9b:0f:f2:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Aug 23 01:03:12 2025 GMT
Not After : Aug 24 01:03:12 2025 GMT
Subject: CN=46f7e97eeb275c4ca8058e1e1654efaae528743f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:74:1f:24:4d:8d:2e:0f:de:d8:a2:58:88:
3c:bb:9c:c8:d2:eb:bf:02:c4:c3:bd:87:a5:60:f0:
3b:f7:fd:a7:18:fe:95:c7:04:95:6e:0c:bd:c3:db:
d1:ea:3f:20:da:0a:1c:8f:33:b2:82:80:de:5f:67:
ad:8c:9d:7f:24:ae:13:10:1d:69:90:5e:4f:0d:fd:
f5:d6:1f:6a:b5:ae:62:7f:b7:a3:ff:78:7c:34:c9:
5d:9c:c6:0e:d4:b6:94:20:d1:fe:59:ae:fc:cc:21:
4b:ba:f6:ca:8d:bf:e5:e4:8e:73:0f:ac:03:fa:f2:
8a:54:26:8c:8d:88:c1:fe:e4:7a:55:ed:09:2a:6b:
23:a9:f2:fb:e4:9d:46:1a:91:23:d4:79:09:24:c4:
55:ce:bc:51:41:6a:d5:da:2d:1b:20:f7:1a:9f:af:
97:bf:e2:6d:1f:0c:ee:87:11:ff:1b:9c:a2:03:3b:
dd:3d:2b:88:6d:e2:8f:9b:32:f3:0e:d5:b4:65:37:
bc:16:ca:72:cf:58:55:3c:09:e4:ab:d0:79:5d:a7:
cb:72:91:eb:dd:73:2f:50:c1:cf:d6:1f:94:3a:35:
11:46:57:f8:96:a4:8c:4c:08:41:8b:4a:0d:52:7c:
7c:2b:df:2d:b4:40:76:65:28:15:89:3c:71:29:bf:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F7:E9:7E:EB:27:5C:4C:A8:05:8E:1E:16:54:EF:AA:E5:28:74:3F
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4f:ce:1e:83:25:e1:37:ff:4f:da:b6:0a:d5:74:33:0f:87:
30:3b:63:a2:49:3c:86:25:41:4b:60:88:56:0b:37:01:ea:49:
e1:b2:5b:2e:e7:27:94:a3:15:f7:d7:2d:77:ee:27:b2:09:d3:
a3:4c:69:35:d6:09:f2:1d:38:77:ed:09:4d:8f:55:82:83:2b:
19:e1:83:67:89:ab:c6:23:1b:6e:21:0e:59:d7:f2:4d:51:fa:
9e:31:8c:44:d6:c4:0f:11:e9:a5:56:99:ed:43:46:53:ef:5d:
e0:e2:d2:54:85:fe:35:bc:07:e5:a4:bf:d5:82:d4:c8:a7:44:
29:d0:7b:9d:a7:34:b7:df:da:de:a4:79:ea:93:51:9c:a8:bb:
0c:11:00:81:5a:70:b2:89:34:d6:4a:8b:5f:02:6b:67:0a:4a:
aa:b4:c9:3a:79:5b:33:9c:56:04:10:e0:34:c3:ba:d4:6a:5b:
66:e7:c0:9d:25:34:91:7c:fd:ba:e1:a3:7d:c0:6f:ae:2a:08:
9b:b5:29:30:23:93:50:09:e3:06:23:dd:31:20:21:99:7e:05:
cf:35:1c:97:c8:9b:5b:1e:c0:53:43:42:36:38:ce:46:03:55:
dc:db:4c:5d:cf:0f:49:08:3c:49:91:8e:36:a5:eb:c8:55:c0:
f7:33:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:41 2025 by rpki-client