Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: NsEw5mg+Hkakb5d2MkV0kCDlQiTAARRl68meopishmU=
Subject key identifier: 47:D3:D8:17:1D:B2:07:84:E7:3D:75:4A:8C:0C:E3:D7:A5:91:65:51
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 0198D705983359E528AABB531308DC1ACE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 0EB5
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: h+uITv+2xH6UnGt6VeaPnEqPwNAs2ymtP75Wc8lJHYY=)
2: 787WsGeG_PtOH4NifJLvSRcdjKE.roa (hash: LXK7T54I67xPwZvLYoiPIC1z9h7T9ebkz0cAqwvP0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:98:33:59:e5:28:aa:bb:53:13:08:dc:1a:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=47d3d8171db20784e73d754a8c0ce3d7a5916551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:58:93:b9:54:4b:3c:27:81:79:60:a7:80:
de:61:a9:ca:71:a4:54:2a:63:db:a0:d0:30:16:41:
0c:39:9a:da:ec:d7:65:ad:47:0d:ce:59:89:c3:c1:
52:22:65:6e:65:b5:37:d6:75:89:9c:97:c2:d0:d0:
c3:2b:96:bb:cf:91:cb:0e:32:fd:f1:6c:ed:93:84:
d8:f9:a1:d1:51:21:9e:e4:22:de:6f:aa:a1:4b:0f:
c4:3a:e0:08:93:58:e9:65:82:28:cd:d1:ff:12:80:
fa:39:b4:64:ac:9c:42:c7:f7:a7:ca:b3:2e:c0:b5:
dc:8d:b3:db:63:e8:a5:2f:2a:25:c1:b6:f9:d1:63:
cc:28:9d:ae:66:77:c2:ac:10:8a:73:c3:88:f2:10:
03:50:2a:f0:3f:7d:9f:a1:83:b4:36:e1:7a:4c:11:
1d:5f:67:94:99:70:bf:d9:65:32:10:d1:9c:d7:65:
1c:a8:da:49:23:81:e5:ac:0c:f3:19:f7:83:de:c0:
63:09:ac:e3:49:74:90:3c:41:29:39:fa:04:82:b8:
9d:aa:2f:36:ee:fe:9c:9f:f2:1a:3d:1f:d9:12:59:
fc:8f:ba:5d:4e:41:e3:e2:b1:fa:48:6b:66:ce:14:
f3:a1:2c:5e:60:bf:a0:f7:bd:56:96:2c:a9:12:3d:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:D8:17:1D:B2:07:84:E7:3D:75:4A:8C:0C:E3:D7:A5:91:65:51
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:97:81:58:df:ad:af:7d:6a:9c:e3:40:e7:a9:03:75:8c:02:
03:da:4a:ef:1c:40:ab:cf:1d:02:56:08:82:ca:90:1e:1a:dc:
fc:9d:d0:cc:55:28:d4:2d:fc:c1:7a:9d:3e:39:0c:90:41:78:
5e:bb:7a:79:84:1b:07:b0:5a:98:e5:e5:63:50:a9:ca:a2:5e:
ba:42:6e:65:9f:3e:0b:76:13:ed:74:87:d2:87:a8:cb:37:bc:
46:41:6a:81:b2:f2:be:61:2c:1a:e2:0d:ca:45:ff:48:82:20:
be:7a:79:c6:4e:dc:79:b9:45:0a:33:52:fd:7a:7b:3d:7d:51:
2b:11:6c:64:11:5b:2f:32:59:c3:cf:ec:3a:f2:d7:75:8d:db:
a3:9a:62:ca:0f:56:ec:1c:2e:09:42:5b:af:70:46:25:12:4b:
0c:85:a0:ea:04:5b:33:9a:7e:cc:d9:d1:ce:2a:39:38:f8:34:
78:3c:a3:e0:f0:b9:be:68:d3:37:9a:2a:aa:ed:ec:2f:9a:e2:
e2:88:61:02:74:ae:eb:3e:16:50:89:c3:e3:81:ca:08:9d:67:
2f:7b:99:05:de:36:ec:83:a1:49:12:3f:9f:aa:87:7b:c2:4b:
b2:04:6f:70:7f:e3:3e:98:de:8c:db:ed:40:20:7c:de:e5:f5:
37:65:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:43:17 2025 by rpki-client