Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: VkD8BLZD+T9Q2itD1PHDg5vUJ2KniqjSLgvidMzb3xA=
Subject key identifier: 7C:E7:3B:78:99:FE:96:1B:72:CB:26:71:19:D2:A9:63:D6:DC:12:BF
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 0198D5835788FC076F9A29AF971A7C69618C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: L5Q7Yv+OTiiGe3GJ+REisGsqnAxeH5oDf/fOqRl3H2w=)
2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:57:88:fc:07:6f:9a:29:af:97:1a:7c:69:61:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=7ce73b7899fe961b72cb267119d2a963d6dc12bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:ba:bc:76:22:18:d2:d2:e7:99:ed:d5:f6:
77:71:77:bf:a3:b4:1d:2e:4b:d0:ae:f6:3e:ae:59:
bc:8f:6d:61:f8:5c:04:fa:a6:5a:0e:50:50:f9:eb:
a6:3d:1c:6a:5e:f0:a3:4e:23:a5:2a:8e:e2:2c:f7:
d8:46:f3:ed:7c:79:79:a5:85:3d:e1:d1:b9:08:0f:
27:16:70:ff:c6:d6:c8:77:58:45:b6:1a:db:3c:ff:
57:83:4c:87:b0:24:33:64:0c:12:69:e5:c9:ff:fc:
3c:d7:e3:d0:4b:b7:6c:26:f2:b7:5d:ec:bc:2e:00:
6f:ee:07:0b:81:ce:5c:f8:29:24:05:71:3d:d3:6d:
7d:ab:6e:d7:1f:d3:18:3f:0d:c4:33:7e:af:e5:34:
67:e2:8f:78:d4:83:3f:9a:f3:53:7a:2f:7a:d1:6a:
9e:3b:58:1d:e6:f5:53:ca:5f:a7:ce:6b:35:5c:28:
28:43:b9:2b:c0:c6:58:31:25:8a:0a:90:59:dd:39:
ae:83:55:03:92:3d:bf:f0:1e:c1:f1:29:d1:cf:4e:
37:c5:56:78:47:55:56:c6:86:92:3d:a3:ad:be:1d:
dd:93:65:31:d3:db:67:67:fd:c8:40:1a:f2:72:48:
0b:a9:fe:8b:c9:be:f1:5c:5d:ab:bc:e3:76:1d:ff:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E7:3B:78:99:FE:96:1B:72:CB:26:71:19:D2:A9:63:D6:DC:12:BF
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4b:4e:a1:10:a4:10:23:8c:e9:40:0f:54:87:8e:09:35:ad:
10:c3:76:a5:6f:00:1f:7e:47:49:88:f4:97:31:4d:a3:8a:1a:
32:e5:9f:2b:34:b4:12:f6:1c:e4:81:02:51:12:79:bb:70:de:
5b:ac:46:8f:0c:dc:a2:5d:00:50:74:d9:a1:2a:c6:6f:6d:e8:
4f:ac:ba:c1:0c:ec:76:a0:a6:ca:b5:7b:db:77:e7:ae:89:90:
5c:9c:ea:d2:01:e3:b7:a7:2a:07:5e:6e:10:f7:00:be:e7:78:
38:05:e3:f3:9c:63:11:50:b6:f5:a2:7f:97:4d:07:19:5a:8c:
b2:50:60:43:bb:5c:ec:ea:47:f5:49:64:b0:87:4d:29:20:78:
a6:7f:c1:bc:ea:a4:6d:2b:45:b7:5f:f3:15:b4:d1:bd:f5:77:
0c:41:8b:cd:06:2e:00:a3:79:1f:fc:c2:56:da:c6:a0:06:37:
84:69:cd:bf:52:c2:6f:20:c6:c4:2b:10:d5:9f:69:89:36:1c:
37:9b:23:81:b7:1b:a4:9c:fb:a4:51:20:c1:f4:73:91:fc:c0:
96:7a:85:1a:d9:17:9b:e2:67:27:82:73:12:40:f2:cc:a7:90:
0e:5d:5c:d3:91:31:a3:59:07:07:f0:aa:4f:e7:d3:ab:97:6a:
1c:e6:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:58 2025 by rpki-client