Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: gXKdthxSvSgZ6u+U9FYY+0YqDq3vC5VamK5SnhRYdOA=
Subject key identifier: 5A:56:2B:DA:B9:CD:65:D7:A6:DB:A0:41:A8:CE:AD:5D:06:0C:F1:91
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 0198D65F003D366F8B3545FCF0F8E236D185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: cXHnFkq5Fl5lHJhLpznAfUHSaO1F03fqdEhDfYUAiIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:00:3d:36:6f:8b:35:45:fc:f0:f8:e2:36:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=5a562bdab9cd65d7a6dba041a8cead5d060cf191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:f4:ea:b3:89:ab:e4:ca:93:4a:b8:6d:71:
79:4f:f9:91:18:52:e5:90:15:f1:eb:4f:e3:96:22:
c4:fd:a7:ce:d8:e6:4b:52:4e:cd:7e:67:6b:a0:06:
fc:25:77:a9:45:48:e9:48:f0:3c:12:5b:5a:76:07:
1f:ec:db:b0:a7:b5:ee:f8:c6:14:c9:27:30:e8:f7:
bb:13:d9:d1:20:40:ca:ad:cf:33:84:77:1e:7e:9f:
ad:ee:f2:02:af:30:25:e4:c8:ee:b1:1f:08:86:00:
19:b7:48:79:da:b1:51:cb:de:7b:22:5a:99:8c:a3:
ca:77:32:70:6e:35:db:7f:6c:38:43:6a:ac:6a:14:
18:10:19:33:c1:53:a4:2a:44:ae:19:16:7b:86:52:
e7:d7:ce:8c:64:1a:82:e2:1d:db:84:13:24:b5:3d:
e3:10:20:7c:5f:e1:77:dc:21:6a:ad:ef:bb:9c:6a:
1d:d3:e1:f4:3f:9d:a6:22:3d:cd:85:95:99:63:5b:
02:10:e9:42:14:6e:f1:7a:d0:d4:5c:89:11:8b:0b:
8d:7c:49:b7:54:cc:c0:1b:65:d1:f5:e1:1a:7a:33:
b6:7e:98:1a:13:93:83:37:e8:3a:15:52:40:04:9b:
a6:70:30:75:f7:d1:81:88:ff:f9:e1:ed:83:bb:db:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:2B:DA:B9:CD:65:D7:A6:DB:A0:41:A8:CE:AD:5D:06:0C:F1:91
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:f2:66:0c:e4:51:0f:aa:75:39:eb:99:ff:ce:36:75:fa:
d1:01:6a:d4:cb:bb:17:e6:e7:08:04:05:09:80:dd:e6:dc:fd:
03:f3:af:4c:9f:ba:4d:bd:cc:00:c9:01:b3:a4:eb:57:d6:e8:
a1:0c:59:22:17:32:0f:a5:89:24:a1:09:25:fb:a7:16:31:37:
5d:51:4a:30:e9:0a:2e:e6:fd:d3:fd:6f:6f:b5:0b:2e:51:43:
2e:9d:94:4f:c1:57:51:b2:1d:aa:c7:a2:e4:fc:e6:8d:f7:be:
26:b4:4b:a1:cd:c7:c7:4b:4b:97:7a:a9:fa:da:24:c9:58:da:
32:0d:65:34:de:82:0a:38:6f:d2:dc:e3:c1:38:d9:8f:17:e1:
f5:2b:28:da:ea:13:7a:3e:4e:6f:b0:dd:67:1b:a1:d9:61:53:
2a:d7:93:36:c2:ab:50:1c:a0:19:af:d7:3d:fe:7c:f9:f2:62:
8e:2f:f1:c9:13:1a:54:1b:32:71:c3:fd:78:de:fb:d0:49:60:
a2:ae:ca:4b:89:2e:28:ef:f7:1f:1b:3f:ea:da:88:0a:1c:27:
2d:9c:8e:a3:db:c4:15:ae:40:ec:d6:0d:a5:0c:87:87:da:dd:
dd:88:6f:bb:ec:d1:eb:65:0c:a2:f7:e0:f7:3b:1b:54:50:b1:
4b:bd:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:05 2025 by rpki-client