Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: ODLy9qES88Q8vMVE29GkhLUE2exP2DI/X+yjy79O2Ro=
Subject key identifier: 86:F2:ED:E0:F5:66:93:69:B9:E3:3B:77:BA:09:2C:D7:3D:2E:A2:CF
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 0198D58365399417583FD98F363CFBCB7CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 09CC
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: H6psk1oQ4fKKfQDQrP+9LHl4uRY7g9UQKJsTpN4x0N8=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:65:39:94:17:58:3f:d9:8f:36:3c:fb:cb:7c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=86f2ede0f5669369b9e33b77ba092cd73d2ea2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:9c:03:54:0f:9a:56:9c:1c:8d:4b:c1:00:
d3:d1:fd:6d:16:4e:a3:48:17:54:c7:b0:cb:fb:27:
99:b7:ca:92:73:72:6a:77:91:23:cb:95:fc:83:6d:
f9:cd:4e:45:05:74:ec:a9:13:5b:0b:61:33:be:64:
a7:98:19:dd:68:a3:99:8d:db:2a:40:ec:55:53:79:
43:67:36:ef:a2:4d:91:e6:e4:93:6f:2e:8c:43:5e:
83:49:77:3e:97:89:e0:e3:c4:9e:40:bc:95:bc:8c:
51:bf:70:40:15:bf:86:a4:02:67:22:29:b7:fd:ce:
f3:e1:30:e7:63:01:0e:4d:cd:ff:22:d6:e8:3d:49:
95:5e:5a:fb:db:1b:f0:0d:de:58:ae:3a:a4:f2:94:
e0:b3:1e:44:b1:0a:90:6d:c3:68:73:26:f7:ea:36:
67:45:f7:71:ff:93:1f:a7:c0:89:ce:84:97:63:bd:
a9:15:a1:13:91:ed:2d:5e:65:50:11:c7:58:e2:f8:
9d:61:be:d1:0e:b6:ba:87:6d:6f:e6:04:e9:da:09:
da:28:1c:4d:db:c5:1b:0b:a6:2d:d2:60:e4:0c:a8:
0f:9c:1e:04:8e:6b:96:ff:95:70:08:64:7e:f4:d0:
25:4c:47:9e:d6:1d:e8:18:f9:1e:b3:57:cf:e7:1b:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:ED:E0:F5:66:93:69:B9:E3:3B:77:BA:09:2C:D7:3D:2E:A2:CF
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:a8:a9:3f:53:6d:1d:9a:7d:be:91:b4:05:6a:cb:76:78:
ed:72:66:c4:d6:bb:c7:d8:9c:35:33:93:a2:20:db:f0:7e:4f:
c7:01:47:e7:39:cd:84:8e:b2:3c:84:06:c8:29:cc:96:80:69:
fd:d5:a3:6d:ff:4b:fb:3b:88:d8:b2:54:1d:35:72:37:fd:d6:
a9:5f:10:97:5b:ff:06:16:bc:b6:a1:f8:3a:b0:8e:de:e0:d1:
a3:02:11:20:3f:b5:f4:2f:e5:7f:ae:0d:a7:7f:f2:e2:82:21:
10:98:df:ee:3a:96:2f:5c:03:d6:3f:c4:7a:1c:c6:0d:81:5c:
27:bc:46:13:c6:52:a4:a1:ea:25:3b:26:53:d9:33:0a:77:83:
2b:40:a8:73:d0:56:e2:3d:65:1a:7b:94:70:b8:0c:ce:59:20:
19:13:cd:64:06:bd:31:45:cc:06:2c:70:96:36:5d:6b:20:b0:
c9:0c:c7:9a:56:e4:ef:b6:2f:e4:bc:a0:91:0e:9c:e8:c6:d0:
43:b3:2b:5a:fa:d4:ee:a8:de:92:09:48:09:0f:d9:d2:01:fa:
ad:8b:2d:fe:8e:38:0e:94:58:6d:55:5a:81:8b:07:87:a2:7b:
dd:7c:78:e9:74:fb:04:9b:46:f2:23:fa:27:e2:c1:84:99:35:
0a:fc:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:49 2025 by rpki-client