Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: /q9LZQ/MHN5dKSyy7SDroZ/OLA9AJDfJvE7XcFqfctE=
Subject key identifier: 23:EB:59:DA:05:29:BA:CF:0E:9A:DD:2D:F2:08:91:CF:82:A6:BB:8A
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0198D474A09D0D1671CA577E1A7C25520145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0885
Signing time: Sat 23 Aug 2025 01:04:29 +0000
Manifest this update: Sat 23 Aug 2025 01:04:29 +0000
Manifest next update: Sun 24 Aug 2025 01:04:29 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: 5dcYAhL3/pYID5KUB+Bx3EWkkbq8RrAHd0Mla8bM8bw=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:a0:9d:0d:16:71:ca:57:7e:1a:7c:25:52:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Aug 23 01:04:29 2025 GMT
Not After : Aug 24 01:04:29 2025 GMT
Subject: CN=23eb59da0529bacf0e9add2df20891cf82a6bb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:5e:03:d4:e5:f7:f8:63:bb:67:40:8a:99:
70:c7:49:61:57:57:d1:25:68:38:c5:08:e6:49:9c:
45:d8:bb:fb:9e:d4:fd:0d:b4:7f:8b:52:e5:c2:5c:
06:16:4a:aa:30:bf:13:f0:d8:51:a4:04:58:96:d6:
3a:66:6d:90:60:7d:1a:fc:3c:e8:61:f9:57:04:3b:
b7:51:bb:c4:66:2d:b5:70:87:db:fe:0d:8c:53:56:
c4:d3:34:c4:7a:90:c3:c6:d8:50:94:58:8c:f0:6a:
78:b1:6d:37:5f:88:d8:9e:d0:cc:b3:78:9e:82:9c:
a1:3a:c4:6d:3a:e1:ac:cd:43:3c:7d:ea:52:01:f2:
e1:b1:b6:0b:82:4d:51:8c:e2:10:88:a6:db:e7:2a:
09:63:07:30:4d:72:6a:80:40:8e:ea:ef:8c:a1:b3:
46:2d:cd:fb:5c:66:1b:a8:2d:0d:19:7e:e4:7a:96:
ef:b1:98:84:5b:1e:d3:65:f5:ab:f2:3d:2e:1a:bd:
59:17:88:35:5c:d1:78:75:ca:aa:f9:1d:93:0f:73:
3d:fd:2e:49:01:c2:1a:5e:83:7c:af:ed:2a:a1:b8:
7b:1d:7f:a8:ea:b2:86:67:8d:3d:7f:7a:9e:88:1a:
85:3e:3b:23:d4:43:5b:34:de:ee:a2:bc:90:dd:be:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:59:DA:05:29:BA:CF:0E:9A:DD:2D:F2:08:91:CF:82:A6:BB:8A
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:c4:3d:af:96:32:7f:65:28:2a:e0:e5:b9:7c:10:6d:10:
3b:7e:fd:9f:72:6c:55:f6:12:07:4f:b8:70:76:64:61:88:08:
ff:08:40:d0:25:8a:1b:00:2f:62:ad:8d:25:9f:cc:63:ab:9c:
5e:31:bd:e8:d6:16:05:9e:e5:ab:d0:e8:7a:30:8a:c4:52:a4:
66:3d:62:12:a9:30:7e:3d:5a:90:a2:04:41:05:82:59:f0:2e:
0c:c2:e2:44:55:b2:e3:7b:95:a6:aa:fc:3a:15:18:f4:4a:76:
ac:91:12:88:53:30:ec:ba:18:e8:b3:9c:bc:17:a4:8e:9e:80:
ad:5f:42:10:58:eb:e0:fa:c7:f8:a4:a4:f8:45:82:22:58:ea:
0e:fa:58:ae:e7:4c:2b:57:3e:08:d2:f3:97:35:27:69:cf:14:
a8:fb:9d:04:73:d0:21:71:0c:65:65:3e:8f:c7:c5:ef:d1:6e:
15:1f:13:be:91:bd:4a:0a:7a:15:68:51:69:ae:c9:03:7e:e9:
52:f1:7e:c5:58:c7:83:f2:78:88:2b:fd:90:e9:55:c2:ae:38:
0d:f6:e4:cf:44:3a:97:7a:e3:33:3c:fc:58:ed:93:6a:e0:00:
0d:f5:c1:30:4e:78:d0:ce:ee:d8:99:1f:05:97:1e:3e:1b:ee:
15:6b:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:44 2025 by rpki-client