
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: Krjpe7XlNxWGVh6ZAQ6xJzPtxHv8XINE3sPTmIryNVQ=
Subject key identifier: 5E:D2:14:15:2C:68:8A:8D:82:FF:D9:87:85:2A:8D:FE:47:03:04:41
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0198D5156526F4CE9CA474D54659A3219C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1665
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: a7LjItaCRCZU0zsQUS5BfoDZ0IRyT2NYUmzKK3fUX+A=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:26:f4:ce:9c:a4:74:d5:46:59:a3:21:9c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=5ed214152c688a8d82ffd987852a8dfe47030441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:67:29:29:b4:53:d5:d2:60:bb:e2:c9:09:
ad:6c:37:78:d3:df:63:6e:8b:2f:97:91:d7:90:06:
b9:7e:92:6c:d7:df:9d:46:1f:c6:2f:7d:47:37:d7:
da:17:da:e1:6b:c8:ce:8c:93:fd:7e:05:16:1d:6a:
3b:1c:f3:cd:c6:04:78:02:2b:b8:e1:f7:a5:5e:64:
88:29:1d:14:10:a7:8c:61:3c:1c:d2:69:05:e1:9d:
61:c4:5b:4e:2a:27:71:b4:4a:ab:5d:6a:a3:7a:5e:
35:1f:26:ab:a0:56:d7:38:0c:93:af:a5:48:83:82:
00:65:0b:30:86:b0:58:a4:72:52:85:56:b0:31:f6:
d8:29:17:d9:e3:c7:16:5a:4f:ee:0c:d6:4f:2a:f2:
84:9f:6a:b0:e1:49:4a:b6:b2:4a:a7:7e:e2:64:96:
c5:c4:1a:16:c7:61:6b:b9:fa:ec:d8:ed:43:ef:5b:
9d:f8:94:f4:0b:34:fd:3a:5d:a0:31:fa:ef:81:87:
cc:9f:a2:d0:16:5c:7e:2c:27:87:23:10:7c:43:89:
37:79:a5:eb:31:8f:f3:c3:15:0e:1c:ad:36:5f:b4:
e0:db:50:25:c4:3c:64:1a:2b:48:f3:5b:71:d5:68:
d6:9d:57:71:cc:02:51:34:88:c1:e4:42:3d:2f:c1:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:14:15:2C:68:8A:8D:82:FF:D9:87:85:2A:8D:FE:47:03:04:41
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5c:2b:96:6a:12:f3:cd:5c:7d:25:b4:75:16:43:37:76:d9:
a2:a8:80:1a:16:27:7e:84:3c:e7:88:58:3d:b6:5e:39:ea:e7:
dc:ea:fc:fe:4d:b1:22:37:bb:26:da:24:f3:0f:35:a0:db:67:
77:48:2f:2b:f7:6f:67:c1:6a:ff:6d:2c:68:48:02:96:00:18:
96:f0:17:15:e5:e0:8f:44:c9:16:c5:17:9b:8b:85:7c:e1:a9:
d6:69:24:cf:58:38:60:73:75:24:88:dc:2f:7a:ad:2e:a8:3a:
c9:f1:b7:49:f4:74:9f:41:6d:42:8e:67:e8:b9:11:a8:0f:db:
a4:cd:ca:e4:3b:5c:ee:0d:e3:30:fc:9a:d6:bd:5a:f7:83:e8:
6b:d7:1d:48:76:4e:5f:f4:14:7f:61:5f:93:be:05:69:4e:57:
36:d4:be:9d:06:8d:50:62:7f:21:ad:60:88:ed:71:ec:6a:12:
77:1f:c3:f6:cc:58:e0:84:6e:58:c5:f4:a5:71:ca:fe:57:ea:
2b:74:40:e2:2a:cd:35:08:40:fd:3e:11:8f:00:d7:26:2d:d9:
b3:88:18:63:97:13:f7:22:e5:ae:9c:e5:1d:14:bc:c4:ef:e2:
d6:9b:18:1d:d9:6b:50:47:cd:6d:30:9e:d3:af:96:d9:35:dd:
ab:b8:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:52 2025 by rpki-client