Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: sJcnzr/upaYS76of95ELRiUtWB5bKd31Dx92soUko9s=
Subject key identifier: 53:A0:8C:B6:BC:AA:83:8F:5B:05:4B:40:71:54:F3:E5:95:70:CA:78
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 0198D4A788FB6CBE1F6BF134BA1ED7B1A8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 10BA
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: LzpHzraD81n0+xYvKVkodyv/3zYzr8hDfD1D5erA9tc=)
2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:88:fb:6c:be:1f:6b:f1:34:ba:1e:d7:b1:a8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=53a08cb6bcaa838f5b054b407154f3e59570ca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:40:ce:3a:f8:49:4a:3e:a8:b4:fd:61:b4:
a7:90:f1:4f:1e:d9:4e:b7:52:e2:0f:b4:d1:0e:bb:
64:14:6a:74:d1:12:02:87:c4:d0:99:86:fb:b2:7e:
e6:14:b2:10:a9:2b:6d:c6:b1:87:2a:65:68:9e:13:
d9:35:4a:9d:a1:1b:37:eb:a5:1f:a5:ce:2a:3f:da:
18:03:ea:50:2a:5c:e1:f8:dd:89:2f:08:43:a3:5b:
c0:c7:3d:0a:ec:9e:4a:b5:c5:d8:d6:b7:3f:04:c8:
8e:c0:2c:89:91:79:cb:4e:c8:5f:18:f5:59:25:15:
3d:70:33:ae:02:f1:5a:f5:46:a8:16:a2:19:2c:17:
f5:b9:b2:f3:31:f5:df:18:06:1e:ed:b0:84:ec:58:
95:6d:22:36:79:ab:6c:c7:87:a7:0c:75:ca:f4:97:
7e:d2:f5:50:1c:d6:89:a8:de:e5:c9:31:82:a9:9b:
4b:3f:73:55:74:ce:39:d3:4b:01:57:ac:85:b6:26:
a0:21:02:77:ca:e5:b8:de:55:47:c4:7d:be:72:09:
2f:65:f4:25:fb:e3:ad:8f:55:72:49:fd:79:87:e1:
15:eb:07:8c:f9:c5:d0:80:50:7c:ba:8e:68:46:ba:
2e:48:06:b1:b3:f9:4b:67:2e:16:02:72:03:88:6c:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:8C:B6:BC:AA:83:8F:5B:05:4B:40:71:54:F3:E5:95:70:CA:78
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:ad:85:e6:82:3e:1e:3b:11:e5:9b:41:c5:f0:ae:18:fb:
81:ef:1c:9f:0f:ec:57:84:4b:27:87:a1:cf:86:7e:74:7b:da:
4c:29:a9:dd:ff:40:86:14:9b:10:c1:91:85:cd:91:2a:f3:b7:
b8:42:4f:80:0b:af:9b:fa:e5:eb:56:36:09:a5:34:cb:a1:0c:
75:80:a8:33:10:e3:27:46:c2:32:66:c6:f5:72:eb:95:69:eb:
68:98:e9:33:ea:c5:6f:9d:4f:5f:a5:8f:a7:bb:6c:b0:ab:ca:
06:56:a8:8a:ed:0e:b2:b0:0f:9e:5c:2e:d4:0c:b5:14:3e:8a:
82:3b:f3:20:e8:47:a3:fe:d4:30:16:0c:8a:ff:04:d1:6c:ac:
21:73:44:cd:52:76:ec:92:e1:8b:c9:fc:1a:2e:dd:bd:59:4a:
e4:a9:a5:99:bb:80:6a:52:93:b1:be:9f:40:02:cc:c1:64:8e:
59:14:15:a0:bb:b6:eb:88:a3:cb:38:a9:7a:95:aa:5d:7a:35:
9c:75:ea:32:af:66:b4:58:96:f7:84:5f:c7:ee:c8:d6:62:11:
6c:5f:cb:4a:7a:8a:b3:6d:49:64:da:f2:60:77:a3:3d:8e:95:
b6:32:4f:e5:26:44:19:c3:6a:44:1b:c4:c8:9e:e7:71:0c:9a:
16:bf:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:58 2025 by rpki-client