Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: OHgmVWvAEoaqOv+1RFo+BM+EkIt5b1DFSrtAqT3aQn8=
Subject key identifier: 14:AF:FC:86:F5:03:D0:89:C6:5E:A4:53:EE:8D:E2:D3:3F:3C:E4:AF
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 0198D73B7EF131ED6871EA4C9919575C4A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:56 +0000
Manifest this update: Sat 23 Aug 2025 14:00:56 +0000
Manifest next update: Sun 24 Aug 2025 14:00:56 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: xPVA0Ogs+GfSrDGhNXxHTpWEtNbyEZbUwN4QX8VBuYE=)
2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7e:f1:31:ed:68:71:ea:4c:99:19:57:5c:4a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Aug 23 14:00:56 2025 GMT
Not After : Aug 24 14:00:56 2025 GMT
Subject: CN=14affc86f503d089c65ea453ee8de2d33f3ce4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:32:d5:a9:4f:77:67:cb:8f:2b:aa:1e:09:
6e:53:98:f1:42:86:93:a3:e9:a6:7b:35:b5:c0:b8:
be:bc:9c:63:d2:40:8e:53:0c:da:b7:cd:9e:76:4d:
93:9b:0c:c8:42:0d:87:6d:87:76:82:2c:35:50:46:
b1:e0:26:8a:2f:48:41:e3:41:12:43:0d:8d:f2:9d:
c8:c7:d0:8d:2b:5b:17:5f:08:66:11:1f:f0:9a:bc:
c0:6e:25:22:1e:f0:32:ea:2c:b2:fb:33:3e:85:1b:
ca:1c:d7:42:49:40:8d:25:60:97:04:b5:31:ba:2e:
bd:2f:a9:77:4e:57:4f:1e:c4:5e:be:b3:51:0f:45:
ad:9f:84:e1:eb:6a:c0:c1:f4:77:6d:25:37:82:f5:
ee:bd:db:d7:fd:89:7a:2e:a3:6b:f4:d6:42:24:8a:
41:f9:97:87:18:dd:3c:75:9f:ff:04:69:76:4f:42:
6c:6a:4c:86:dd:17:6b:f2:34:bd:9c:03:e1:ef:76:
8a:b4:28:01:ab:95:3a:e8:7e:8a:9e:ec:89:fc:28:
a7:5e:f3:d9:5f:14:a5:45:7b:cc:2d:9d:dc:f8:55:
e0:d9:33:dd:07:33:b2:6e:f0:c7:4e:8c:3f:be:73:
42:91:2f:b3:fa:72:ca:4c:c0:78:76:79:63:f1:9b:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:FC:86:F5:03:D0:89:C6:5E:A4:53:EE:8D:E2:D3:3F:3C:E4:AF
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:38:fe:c3:c4:5b:66:ac:2d:a7:bb:58:75:22:b9:fd:ce:62:
01:21:1c:b4:ee:8c:a8:13:78:b2:c0:71:aa:8b:72:42:18:a7:
d8:42:c8:8c:e2:0b:44:b5:94:01:0c:41:c4:3f:7b:c4:30:12:
81:73:86:c2:19:a3:39:8d:fe:c0:32:67:49:a5:ec:c0:a5:2b:
82:0e:f4:2f:23:50:72:35:08:c9:6b:4f:f8:74:5e:7a:00:f9:
3c:ea:fa:b0:96:3f:95:28:4e:f8:9d:87:a2:02:5a:54:46:6d:
3d:a8:f9:64:6b:2d:0f:5a:62:3f:75:c7:67:c1:06:99:0e:b0:
0c:a0:2d:6c:a3:16:e7:dd:af:76:19:99:d0:38:79:05:9d:ea:
6f:51:29:bb:ff:61:a2:8f:3c:43:a7:df:ca:b4:60:08:ba:86:
76:05:1d:0b:5d:f8:3d:73:32:24:0a:f8:26:ab:e2:d9:a5:3c:
59:b7:da:5c:6b:af:c4:c4:da:e8:17:69:ce:2a:82:50:86:bf:
3b:df:29:2e:67:ca:e6:87:c5:8d:6b:27:5e:6e:b1:07:39:54:
c8:14:15:b1:28:73:d2:b8:0d:9a:1a:57:d0:fc:ba:0f:12:e6:
af:02:52:f9:34:25:9a:d5:13:35:a4:d3:aa:64:53:a5:43:e7:
fa:e5:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:53 2025 by rpki-client