
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: 23eaOwL2jY+vNrxlwaGfIfSCsvCjyZWlsP705hIhIX4=
Subject key identifier: 24:D1:AA:D8:53:F5:EE:AF:75:F3:C1:F2:EC:9B:F0:D1:B9:3C:FC:BB
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 0198D660329C9C4AC4DE212CF92133BFD4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 0FE7
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: 6uLEqFFyIYXtKq1VkTOeThO5QBFiQpMRdrFBEpoN2A0=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:32:9c:9c:4a:c4:de:21:2c:f9:21:33:bf:d4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=24d1aad853f5eeaf75f3c1f2ec9bf0d1b93cfcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:a1:27:bb:7c:78:4b:8e:7e:75:64:94:32:
0a:c6:aa:5d:fa:fe:20:4e:40:5f:b5:ae:80:f7:56:
bb:6e:be:b1:e9:66:ed:b6:b3:05:c8:3d:96:56:d7:
0b:50:2e:6e:c0:37:58:55:e0:8f:a9:7a:22:2f:53:
bd:16:c5:00:5d:21:1b:df:d0:18:f7:4a:4f:5d:61:
99:2a:86:5e:14:7a:ca:c9:65:78:1e:e4:fb:3f:db:
bf:da:bc:3a:c1:9d:fb:65:51:ee:26:37:41:6e:ae:
be:08:88:5b:d2:4b:07:3e:a8:b4:c2:2c:f6:85:f6:
0d:d0:4a:23:ed:d6:c2:f5:70:5c:11:48:66:03:45:
4b:b6:e1:b2:98:94:92:47:8c:3c:eb:7e:4f:4d:ba:
92:50:57:c7:7a:f4:29:ba:5b:c9:b6:7e:bf:81:29:
d8:af:63:50:c0:fb:0e:38:a5:75:e2:36:b4:ba:5e:
1d:63:cd:96:3a:7c:ad:6a:09:8f:b7:bb:03:db:52:
4d:0e:18:51:de:29:13:af:32:47:ee:2c:30:82:dd:
48:c5:07:cb:d1:59:72:87:6e:0b:f1:9e:0f:b1:94:
ae:61:96:38:84:26:dd:bb:5a:c3:f1:06:b1:28:e5:
10:98:49:fc:9a:3e:f2:8f:4f:de:16:f3:a4:a0:f8:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:AA:D8:53:F5:EE:AF:75:F3:C1:F2:EC:9B:F0:D1:B9:3C:FC:BB
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:3d:14:2e:c8:27:75:20:a6:0e:04:1a:0d:8c:ef:c8:51:
6d:6d:e7:6a:ce:ff:4b:3c:99:f4:a6:07:7f:b7:22:4e:c0:32:
03:5b:4c:7f:51:db:0e:4e:24:78:48:d2:ca:38:7c:7f:f4:1d:
d8:58:8a:71:39:8d:7f:68:c5:8a:5e:36:6f:b6:c7:f2:1d:85:
36:53:7f:dc:7e:68:56:48:8a:b8:5b:da:47:cf:9f:aa:73:f6:
81:0a:1d:02:dc:9c:5c:03:72:84:4a:ba:fd:43:51:61:8c:88:
2d:73:a8:a3:f2:0b:94:8e:df:7f:a5:a9:7e:38:40:ad:01:d8:
c1:4f:f2:41:ad:c9:6f:98:37:b9:18:c0:a6:3e:04:be:f0:e4:
3e:33:8b:9e:15:98:12:52:a8:c7:ed:c4:17:99:d3:f3:fd:9a:
46:62:44:37:f3:83:85:5d:dd:8a:88:6d:d8:b8:d0:52:f3:f2:
25:89:8e:3d:be:25:d5:ec:5f:a3:6b:a0:c8:a3:94:21:4d:77:
0a:a7:51:9f:4e:a0:f9:fa:fc:8d:34:7e:f8:96:97:3d:2b:24:
dc:49:0d:c1:de:4b:9f:67:5e:b5:9d:87:ee:a6:00:ea:06:98:
0f:34:be:fd:aa:dc:f7:81:ec:06:06:07:fb:37:94:42:3b:a5:
b5:cb:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:52 2025 by rpki-client