Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: DKueo2+0bm5hGxoXH/KPkYl2E3PN0BL/3xtQNYipVE0=
Subject key identifier: 2B:49:9E:ED:00:95:CB:5A:81:59:D8:0D:25:88:83:A1:EF:38:4F:0B
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0198D473633CB8669CB0E306729EA19C8F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: ypAYLg1G3TBcs4OxxewjpYk6Nz4XWtZahMyZbI0QM3g=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:63:3c:b8:66:9c:b0:e3:06:72:9e:a1:9c:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=2b499eed0095cb5a8159d80d258883a1ef384f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:b3:2b:e9:03:06:5b:0a:71:e7:c5:7f:c9:
2e:75:ca:35:b7:40:4d:34:75:44:b5:85:2f:f4:0a:
3d:90:0d:d0:f9:9d:fa:28:df:ee:5d:1f:24:0d:b2:
c7:27:19:23:05:be:17:88:3d:37:e3:ee:94:d6:67:
c2:26:af:2d:c0:19:ad:a2:e4:3e:27:39:92:dd:0f:
35:dd:b8:ee:3e:28:6b:b4:0b:de:dc:05:c7:6d:99:
40:36:d0:f5:9d:50:e6:3e:dc:0e:15:52:dc:3f:25:
30:16:0d:fb:c6:42:6f:e2:c2:10:8c:13:04:f1:e2:
d6:c8:9e:9e:df:c1:e3:26:98:36:8f:b0:95:dc:c5:
12:99:b6:73:81:7b:8b:20:4e:7c:ab:a5:d2:27:61:
7d:62:39:13:bf:a8:30:42:f8:5b:2b:d8:d5:a7:8a:
6f:4f:bb:08:12:3a:8d:64:65:cd:7c:1c:de:82:1d:
55:0e:80:e4:c8:e9:c2:25:fd:2e:bd:1c:7b:53:7c:
62:aa:18:ae:5c:fa:ea:1f:66:0e:21:31:6d:9a:68:
35:bd:bb:95:9c:46:af:7c:4b:60:05:27:05:60:44:
79:b6:a3:5b:91:25:0b:8e:95:d4:2b:47:36:fa:67:
46:63:92:c9:7c:ca:a9:22:f2:37:45:85:ce:42:45:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:49:9E:ED:00:95:CB:5A:81:59:D8:0D:25:88:83:A1:EF:38:4F:0B
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:26:3f:63:e0:82:23:60:33:c1:15:16:1e:6c:e4:8c:43:d7:
62:01:7b:a6:d2:fa:b5:c6:de:94:74:88:2c:73:2e:22:a1:e2:
c2:1b:0b:fb:d2:5c:f0:27:51:f5:80:cb:2d:38:f8:7e:04:cd:
3f:3f:8f:55:48:34:a4:ed:e8:f3:a4:61:b2:80:1c:32:ea:d6:
2a:b9:39:15:73:ef:d7:f4:ca:55:20:66:b8:73:e4:ae:ab:53:
a0:eb:74:b2:d1:e3:0e:7a:f1:b9:00:e1:fd:3f:6c:95:96:a4:
1e:3e:16:93:cd:cb:e5:48:49:f4:fd:96:41:8c:1c:24:c5:58:
22:ff:37:bf:7a:93:c0:44:1d:49:e4:ac:14:60:3f:c5:71:61:
93:63:31:a6:37:72:7b:97:31:39:1b:11:e3:7a:f1:5f:71:42:
70:ce:b6:eb:dc:ce:b3:5c:33:de:22:b6:4a:39:18:94:00:b2:
74:54:15:b6:fc:ee:0b:2e:6b:e6:90:89:5f:e0:93:6c:2b:1b:
28:80:e5:a1:51:7f:6b:c0:70:b9:8a:03:a6:79:c3:39:41:6b:
2f:6d:85:05:13:cf:2c:92:51:c7:54:3f:20:9f:c7:2a:5b:e0:
c1:c4:7e:f7:ae:c2:b3:ba:45:ab:7c:cb:ec:70:90:94:4c:73:
ef:40:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:24 2025 by rpki-client