Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: LAmSDULAZZXIdIZOpABTT71cPoS6BGHGlbO7cCqR/C4=
Subject key identifier: 4F:36:E6:9E:C6:5B:38:8E:66:5A:98:FB:E3:2B:D9:55:D0:F0:F1:C5
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0198D77335B23DFE2487669EDDAC57793616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0CD8
Signing time: Sat 23 Aug 2025 15:01:48 +0000
Manifest this update: Sat 23 Aug 2025 15:01:48 +0000
Manifest next update: Sun 24 Aug 2025 15:01:48 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: dMoJx7LdhnSDe/8EtM92j054zxFMlPWj/QOKY5g5KVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:35:b2:3d:fe:24:87:66:9e:dd:ac:57:79:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Aug 23 15:01:48 2025 GMT
Not After : Aug 24 15:01:48 2025 GMT
Subject: CN=4f36e69ec65b388e665a98fbe32bd955d0f0f1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:04:f0:45:05:77:2c:77:eb:77:9b:2f:4d:
09:ce:f1:03:ce:18:56:3c:6f:7c:5a:5b:35:16:35:
59:b7:62:4a:fe:ac:f3:55:a9:dd:4d:24:eb:15:fa:
b4:0f:4c:7d:b8:a5:1d:03:1a:42:c0:07:ef:2b:e6:
94:73:23:87:0d:fb:86:87:f3:f6:d4:a6:a6:12:08:
ab:88:6c:7c:c0:59:b5:51:1e:c2:d0:fd:4a:54:fb:
21:bd:e9:68:c2:08:b1:96:f4:6a:83:65:f2:f3:eb:
5a:96:50:0f:f2:e9:8b:b3:32:77:0a:b5:46:16:02:
aa:49:78:cc:94:87:a6:e4:26:89:08:08:dd:48:92:
d6:54:bc:d6:b5:2d:b2:9d:53:7c:14:3a:2f:23:73:
ae:e7:89:f4:94:c5:16:63:07:82:9b:4d:f9:5d:a3:
09:1d:5d:92:a5:09:d0:5b:9d:6a:ae:a3:a4:d8:75:
59:11:60:87:4a:81:26:32:1a:cf:0d:a5:b6:04:bb:
d0:30:16:56:9b:ca:41:dc:6a:e9:8f:6c:45:fa:7a:
84:82:7f:f4:dd:ab:24:40:e1:a3:76:0b:4c:cf:23:
d6:d2:39:d3:bc:fe:5d:e7:f4:9a:cb:91:91:ae:48:
07:62:d7:8c:31:cb:ea:c8:95:56:ef:0b:eb:da:c1:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:E6:9E:C6:5B:38:8E:66:5A:98:FB:E3:2B:D9:55:D0:F0:F1:C5
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a7:b7:20:5a:73:ed:85:fc:13:10:05:40:69:e9:33:dd:f9:
d2:08:1b:ca:8e:37:28:97:44:f1:61:f0:1a:a9:b7:c3:17:ec:
0f:2b:98:40:df:0d:98:4c:a1:c6:8e:3c:e0:07:44:12:64:63:
2d:72:19:0f:29:69:0c:ca:6c:f4:51:6f:45:75:a5:94:c4:1a:
4f:88:33:4d:c7:e7:74:dd:cf:bb:eb:3f:61:4a:2d:f3:8d:3f:
90:e8:59:00:5c:7d:43:0b:09:b8:11:2b:00:c4:ad:4d:fe:0b:
e7:ee:0e:a7:09:51:a8:51:26:37:f8:25:18:10:ef:e1:9a:68:
37:57:36:21:a9:e0:c7:f3:4e:9a:ea:79:6e:b9:8e:3d:e6:80:
68:cf:0e:7e:41:2b:5b:0d:13:92:93:e9:59:6a:5b:bb:99:14:
53:d7:6b:4f:ea:6b:0c:70:45:98:d2:85:67:30:3b:36:0b:b1:
48:40:80:5e:ec:e7:de:77:2f:c7:5d:41:ad:c5:0e:60:dc:6b:
40:77:b0:b1:e0:ba:53:1d:c0:6a:e5:96:8e:ce:6a:13:65:dd:
b3:14:70:d3:47:36:14:a9:f1:b2:2d:ab:86:43:1f:c9:eb:41:
d2:8e:47:3f:c6:92:63:be:9c:a3:39:e6:fa:b1:94:10:8f:30:
3a:b2:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:33:20 2025 by rpki-client