Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: oHxhs9D9A7RsY8nqG2NuhQMnRVfMTVUO1OXA3DSBOVk=
Subject key identifier: 2F:C8:A0:45:B4:41:A4:05:50:FF:CE:FC:E5:4C:60:22:A9:AA:48:F7
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0198D5F13E6FF5359FA72A772CE0B9B2EF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0B87
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: cIN+K9cr05pFtbGVkPpWPomsP+zoR3FpBKW01vo60a8=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3e:6f:f5:35:9f:a7:2a:77:2c:e0:b9:b2:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=2fc8a045b441a40550ffcefce54c6022a9aa48f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:21:48:6a:6f:1d:a4:23:3c:72:03:0e:4d:
d8:37:02:b1:c2:df:68:4d:b4:d1:81:32:2a:48:60:
1c:7b:af:f4:a2:27:ac:29:6a:96:b3:30:7f:88:8e:
f1:02:ce:50:e6:d4:c9:91:3a:92:6b:b7:5b:f2:95:
0d:4d:a0:a8:63:bc:57:80:4b:c6:64:ea:d7:d6:79:
79:fb:fe:57:7a:25:bc:26:69:d3:e2:34:21:fd:c5:
85:ef:a3:60:62:23:87:6a:18:ea:96:98:c5:58:eb:
b9:42:0b:e3:be:e0:f9:2e:e7:e6:1f:ca:99:c5:40:
89:8e:41:2f:76:26:7d:5e:46:52:36:92:38:a4:7b:
5a:a1:98:03:fe:7e:01:da:b8:29:4f:5d:28:f5:64:
ac:c6:a7:75:62:ee:e2:e4:1f:a9:22:6b:35:28:74:
8e:d0:3e:61:b3:da:67:17:b3:17:8b:08:cb:75:8c:
50:97:40:e0:8a:fe:ec:1d:7c:78:b8:84:b0:57:43:
fc:eb:81:30:c5:df:c1:4e:83:05:83:59:7b:d6:ab:
49:5c:2f:c7:f6:80:c8:25:93:a8:7f:08:18:42:8c:
d4:26:66:60:ed:6e:d5:a2:ee:8b:77:08:d3:3a:9f:
4f:82:f5:df:03:ec:81:41:9c:fd:81:2b:cb:17:46:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:A0:45:B4:41:A4:05:50:FF:CE:FC:E5:4C:60:22:A9:AA:48:F7
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:7a:77:2a:47:73:6f:25:45:ef:67:8a:a1:e1:24:cd:1c:
3f:9a:c8:8f:b2:1a:4e:ca:a7:d6:c9:f5:5b:6b:32:ed:0c:67:
8f:aa:4f:8d:d5:a9:f4:5e:f4:da:56:fc:de:3e:bd:7d:d7:07:
64:70:c3:3a:23:95:a0:f7:ed:da:cb:14:a3:ee:16:d7:75:00:
a3:74:28:48:27:a0:96:5c:d8:85:63:81:e2:bd:d6:19:c9:13:
5e:41:20:8e:ec:7c:52:02:a3:c6:87:44:53:a2:96:72:c2:a1:
60:8d:a6:51:b2:42:4d:03:78:6b:5b:58:8f:74:9d:f1:3a:bd:
1e:5c:ff:db:cb:1d:1e:17:86:4b:9a:d1:f0:54:fb:a7:76:be:
97:10:85:b3:9f:8c:fb:e1:d1:ea:eb:81:c0:22:3e:4e:43:ba:
20:f1:40:48:81:d3:99:50:83:1f:4d:35:18:fa:dd:b8:9b:ed:
23:7f:d3:5b:0c:66:14:14:b3:9c:7f:ad:d8:5b:1f:d1:64:ce:
f7:7e:e8:35:fa:da:8e:3d:2a:bf:a1:af:73:88:24:cc:57:3e:
b6:cb:98:a6:9e:eb:59:73:d1:f6:5c:68:d1:6f:f2:79:68:5d:
fa:de:01:7f:06:19:8a:f6:7c:a8:41:ee:37:e3:cd:99:98:6b:
f9:d4:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:18 2025 by rpki-client