Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: xpK2K+G0xy0vsqhgFXaFPVBkQwmbmjf1owww48DNyoY=
Subject key identifier: 8F:CB:BC:41:0E:F0:BB:4A:B0:37:C9:75:86:F2:0B:8E:7E:23:D1:B2
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 0198D660E7B2A7AB77D646526B060E3FB8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 14E1
Signing time: Sat 23 Aug 2025 10:02:11 +0000
Manifest this update: Sat 23 Aug 2025 10:02:11 +0000
Manifest next update: Sun 24 Aug 2025 10:02:11 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: sbAtDxWecSWbGyLTadTFhT/9O510tMVH+TFbNzLMsbE=)
2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e7:b2:a7:ab:77:d6:46:52:6b:06:0e:3f:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Aug 23 10:02:11 2025 GMT
Not After : Aug 24 10:02:11 2025 GMT
Subject: CN=8fcbbc410ef0bb4ab037c97586f20b8e7e23d1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:77:7d:ce:c2:dc:78:a4:33:dd:bb:64:30:
74:b6:ae:5f:47:93:3c:5f:a4:91:bc:86:55:f9:6a:
15:91:36:99:f1:63:37:90:7e:2c:c2:86:42:de:88:
b9:9f:81:c2:c2:72:a5:c3:f5:09:26:b3:59:28:ab:
3a:c4:3d:46:34:a5:63:9e:c3:bb:48:73:8d:8f:f0:
63:29:8b:f8:bf:c5:0d:0a:42:92:2d:eb:82:74:11:
ef:f1:d4:46:17:65:bb:6f:6f:bd:ff:c2:fa:1b:3e:
f9:3b:74:9e:47:db:81:0d:c3:95:46:42:43:dd:2a:
e0:d5:ad:02:e3:25:7c:89:71:4a:4b:79:69:26:24:
e9:4f:2a:4b:fc:ea:81:cb:4e:34:7b:21:c1:48:70:
21:2b:76:cb:e7:be:73:dd:82:29:2a:9f:b5:7c:60:
7b:2e:df:34:7d:8d:e9:83:b1:43:4b:b2:eb:53:a5:
de:d7:8e:49:af:7f:8d:e4:4b:74:fe:e5:b7:4b:e9:
0f:f0:40:8b:45:0e:ca:d1:3c:01:1b:c6:18:13:5b:
94:47:04:c9:76:fb:9c:56:cb:1e:ad:4d:2d:ce:b2:
75:1e:af:eb:bc:8d:f9:1c:89:1f:d2:aa:90:a4:5d:
36:9b:97:fd:2e:81:9e:19:81:b4:d2:e4:8f:a7:11:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:BC:41:0E:F0:BB:4A:B0:37:C9:75:86:F2:0B:8E:7E:23:D1:B2
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:e4:8c:cd:aa:4f:5c:c0:79:7c:f4:7b:41:16:70:11:f5:a4:
37:c4:bb:83:77:1d:e1:ac:e5:97:0b:8f:8e:61:f3:6b:a9:3a:
e1:08:d9:76:bd:33:7e:39:97:aa:2f:01:5e:fe:cf:69:21:90:
cd:85:8e:14:6f:af:cd:3f:5d:db:0c:ee:a6:87:6c:7e:42:43:
71:63:bb:16:5b:2d:63:e6:f8:cb:a4:b3:77:66:67:15:3b:f9:
f2:e3:75:13:b9:25:8a:ba:e1:9d:05:31:89:e9:8e:5d:4a:0f:
10:e0:78:c3:97:df:1f:50:28:57:1b:57:3d:28:fd:0c:d1:71:
00:1e:a8:85:02:ad:f0:7d:26:45:63:ee:e6:53:f6:f0:26:f8:
24:92:37:9c:01:1a:db:ab:8a:e1:d3:09:7c:ec:04:cf:3f:21:
d1:ea:a9:33:e3:ca:1d:06:b2:4d:b1:2c:a6:0b:81:f3:10:37:
f4:2b:85:60:73:91:87:f7:f5:e7:c9:93:10:c2:9d:24:00:3b:
63:8f:a2:7f:a9:b9:08:0c:c7:21:67:fa:69:c0:85:0b:b9:dc:
7e:e5:8a:34:29:e6:4a:19:65:e2:59:d3:62:6d:ee:c2:a4:7a:
68:d8:8a:b6:40:41:19:1e:c8:1d:81:3e:50:7a:3f:1c:89:4c:
3c:12:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:00 2025 by rpki-client