Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: H7B44XzZ1zZzMvYE0TMOfgqeFK1szYPuo6myO0p2674=
Subject key identifier: 0D:45:EC:55:1F:3C:2F:2D:96:12:06:17:EE:F5:7F:07:B5:1B:08:F1
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0198D47400693C0F178C43FF6D7AC0A0A0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 02B8
Signing time: Sat 23 Aug 2025 01:03:48 +0000
Manifest this update: Sat 23 Aug 2025 01:03:48 +0000
Manifest next update: Sun 24 Aug 2025 01:03:48 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: SGht5sAUdAanUYPKT/j49MC1+K4ujw7ZcNj569dDZo0=)
2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:00:69:3c:0f:17:8c:43:ff:6d:7a:c0:a0:a0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Aug 23 01:03:48 2025 GMT
Not After : Aug 24 01:03:48 2025 GMT
Subject: CN=0d45ec551f3c2f2d96120617eef57f07b51b08f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:28:50:21:d2:7b:8e:a1:25:df:95:33:ae:
e2:1f:1e:48:28:44:90:f2:c2:25:d2:1f:49:b9:bb:
40:d4:a9:3e:24:46:89:8e:b3:9d:40:bf:59:5b:2a:
d1:ef:bf:52:82:2c:10:94:4b:d2:4f:16:37:0d:ad:
ce:0d:e2:63:16:49:d4:4d:e2:13:91:5b:65:2b:5b:
2c:bd:0e:64:21:8b:a6:97:e0:9b:f3:85:94:d3:35:
eb:18:ce:47:f8:a2:34:64:9b:35:5c:a4:2c:cc:2c:
10:4a:a8:e5:50:53:fc:e6:58:92:b1:9e:cc:8e:4b:
b4:2c:a4:2c:a1:a9:e6:8c:74:13:e7:ae:11:11:a1:
d6:30:e2:a4:cf:0f:62:ab:90:94:ab:06:fd:85:f5:
15:6f:cd:55:e1:0d:b6:38:ed:c9:6a:22:77:ab:93:
f6:d7:6f:61:c9:d3:6e:35:68:e2:ba:6f:8a:be:2b:
67:c0:e2:dc:32:10:3f:32:01:51:2d:40:f8:a0:ff:
42:01:79:c0:fc:b9:52:51:90:ac:40:b2:f5:31:55:
06:bb:c2:ef:29:64:36:d5:a7:45:75:b5:c0:05:78:
7a:fa:53:37:15:ff:ee:23:b9:83:bc:e8:d3:7e:06:
cf:ac:5b:cd:d1:96:66:b7:87:7c:71:1c:64:b9:39:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:EC:55:1F:3C:2F:2D:96:12:06:17:EE:F5:7F:07:B5:1B:08:F1
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fd:85:39:57:ce:5f:12:48:f9:ab:4b:8f:5b:f3:5d:e4:f2:
e5:d7:60:d7:4f:6c:a9:fd:a0:74:52:15:0a:45:1a:4c:6c:4e:
62:a5:c3:3c:f1:9a:60:9a:03:b4:63:7f:4f:a5:80:af:f9:ca:
8d:1e:85:0e:f7:53:95:9b:fa:09:64:56:57:53:15:08:96:81:
79:57:fb:de:2b:e9:5e:45:27:64:49:c1:b6:f9:e7:71:2b:01:
de:0b:ad:f4:3e:5d:06:4d:bf:e5:63:24:88:f7:5f:a6:bf:df:
97:04:84:1b:77:b5:7a:74:4f:5b:0d:65:b3:23:70:b4:ee:00:
0c:65:5c:12:f3:b0:70:51:ce:bd:0b:78:41:42:f0:a8:72:cf:
98:e7:99:3a:ab:03:77:23:a6:15:10:e5:25:79:f6:a5:cd:3c:
25:e9:33:5c:23:af:27:ec:f2:be:d6:41:51:92:8d:05:e8:94:
d0:c1:d4:a0:f2:1b:2a:35:5e:35:60:66:13:fb:a3:19:f1:85:
86:f6:1e:e6:74:a6:bf:81:ac:f0:3e:4f:eb:07:5f:af:af:63:
6f:fe:78:3a:70:26:ef:e5:e7:1b:ac:9d:14:9a:f0:92:58:43:
a8:bb:e8:1b:39:ac:52:0b:c2:1e:70:b1:98:07:6c:bc:81:da:
a6:f2:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:37 2025 by rpki-client