Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: +WISxNa5hxXwihqC4Y+7RiwlNdH88x2+N7lQ9RU17xU=
Subject key identifier: DB:7F:B9:C7:EF:33:E2:B5:93:FE:FB:BC:9A:D5:25:E4:4B:E2:A6:91
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 0198D7E1316D6E31C51B0EA3BA774A144638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 07F2
Signing time: Sat 23 Aug 2025 17:01:56 +0000
Manifest this update: Sat 23 Aug 2025 17:01:56 +0000
Manifest next update: Sun 24 Aug 2025 17:01:56 +0000
Files and hashes: 1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: nzUoxK9mNjKcPwGddCONJUjF2SV6o9+kNP07NH0CtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:31:6d:6e:31:c5:1b:0e:a3:ba:77:4a:14:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Aug 23 17:01:56 2025 GMT
Not After : Aug 24 17:01:56 2025 GMT
Subject: CN=db7fb9c7ef33e2b593fefbbc9ad525e44be2a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:48:d1:c3:20:b3:1d:e1:62:ad:5c:7b:1d:
bb:8c:f3:aa:f6:2e:76:28:55:36:59:e7:a6:65:1e:
62:be:80:bf:2f:a0:ee:09:b6:e4:ee:b8:a6:a8:bc:
d7:43:62:9f:85:74:46:2f:d0:67:c9:cc:ca:f5:48:
09:6d:56:db:3f:b2:13:fc:ec:9a:a8:99:30:af:68:
51:88:bd:2f:82:05:a6:06:82:76:3b:c7:3f:5a:01:
65:ce:db:20:8f:bd:ed:d8:4f:3a:39:da:3c:49:5c:
6f:2b:d0:59:91:da:87:5f:34:18:a5:8c:96:90:09:
01:b9:28:3f:fc:b9:29:4e:38:74:e4:fd:7d:30:02:
3f:e6:c8:0d:48:24:db:91:94:f2:34:f7:fc:e0:3e:
23:18:fc:48:b6:e0:4c:c5:bc:16:9b:24:36:84:09:
72:f2:c9:5e:69:47:b3:94:97:b9:fb:8f:18:92:57:
32:70:3d:dd:53:ee:b5:2f:c8:cb:02:26:08:b7:b1:
c0:0b:31:a1:1b:03:01:a7:5e:d2:33:b0:1c:b3:51:
12:a3:12:d4:40:8e:94:2f:b0:42:6f:dc:2c:ce:e0:
8a:ea:99:f5:d2:22:dc:5e:97:4b:72:15:b4:a1:7f:
73:25:3a:3d:7d:18:ba:fa:d3:65:fa:03:da:03:99:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7F:B9:C7:EF:33:E2:B5:93:FE:FB:BC:9A:D5:25:E4:4B:E2:A6:91
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c5:40:0d:54:85:b8:ec:6a:50:86:a8:15:12:34:7b:b5:94:
51:f4:03:1b:30:05:96:b5:92:06:61:a7:db:79:91:2b:3e:01:
22:c7:02:6e:17:95:7f:31:e8:c0:00:83:f5:74:1f:a2:92:b2:
60:cd:89:3f:0e:91:41:9b:91:5e:77:61:76:53:cb:10:1c:1a:
1a:e8:29:1d:49:8f:46:c4:d4:79:68:5c:77:ec:fc:c5:a5:68:
ac:0d:ac:02:c2:f5:fe:50:ea:77:6c:49:68:40:33:63:31:26:
eb:34:73:dc:18:08:05:c6:d6:5d:90:bf:b2:1a:f8:24:39:11:
f8:ea:79:0d:6e:a3:6b:74:1d:32:30:a8:72:a2:e9:e3:6b:93:
a9:e4:3e:c7:98:e6:bf:f4:f3:be:f4:df:a4:5e:c8:7c:21:ff:
f5:24:09:0b:dd:cc:75:3f:e8:c7:6f:23:3a:c2:96:ab:51:37:
ef:43:0c:b7:f4:53:dc:74:d4:e2:6d:39:72:43:f9:47:cd:2e:
97:6c:14:39:27:1b:28:e0:b8:7c:e7:1d:dc:c1:a7:7e:02:22:
c7:14:49:90:b9:a3:67:d9:44:a0:e6:33:01:7e:86:7f:fc:40:
50:16:91:13:51:d4:96:a8:b3:07:be:bd:43:d7:d4:54:ad:68:
95:b6:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:31 2025 by rpki-client