Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: gUSE7HLfuNwBJB+lct1FasuLHhr8prG7ALaB7XRCYIM=
Subject key identifier: 75:FA:58:BA:02:B1:9C:4E:EA:42:E1:33:E7:E9:26:E8:97:A5:C1:DC
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 0198D40469CF442403C5A111E9E64C443F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: B6
Signing time: Fri 22 Aug 2025 23:01:55 +0000
Manifest this update: Fri 22 Aug 2025 23:01:55 +0000
Manifest next update: Sat 23 Aug 2025 23:01:55 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: j3uPETyQzDRKU/vVSXcFems9QPj37kppAYxiT/nMUU8=)
2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:69:cf:44:24:03:c5:a1:11:e9:e6:4c:44:3f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Aug 22 23:01:55 2025 GMT
Not After : Aug 23 23:01:55 2025 GMT
Subject: CN=75fa58ba02b19c4eea42e133e7e926e897a5c1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:23:d3:46:f8:17:f8:a2:a2:25:3f:fb:50:
40:02:5b:16:05:73:fc:78:06:26:f2:16:d4:75:58:
8c:28:fb:ad:4d:7a:95:1c:f1:c4:bc:3d:2f:36:f1:
0d:99:80:36:39:ae:e1:2a:d0:35:c0:9c:d4:d8:85:
c2:5e:62:7e:59:f8:ae:f0:19:9d:c7:42:fb:a1:b9:
ab:72:5b:b6:b8:66:ba:2f:12:dd:62:ce:03:cd:a6:
2b:c4:d3:1d:66:b1:a1:82:13:07:7d:b8:8b:cd:ee:
f3:ba:30:0b:6f:23:02:2e:f6:ea:1a:77:48:20:3c:
3c:43:ca:1b:68:1a:de:24:db:bc:ba:8b:75:c4:b2:
3b:a2:f6:62:97:1e:9e:03:1d:5b:39:b2:ff:9e:95:
66:11:27:7c:9d:97:19:11:1a:9f:a5:b7:36:58:64:
d0:a4:81:a0:69:a0:f7:a0:ff:0e:d4:27:96:7c:ad:
01:51:da:1c:18:22:c4:a8:6e:8a:62:7c:09:7b:52:
1c:33:93:a3:97:fe:9d:19:20:91:91:43:60:73:1c:
6a:f4:2d:a9:07:ed:dc:30:ea:fa:32:44:83:a7:57:
e3:65:90:5f:de:7a:b5:73:8b:39:ce:86:a9:96:32:
34:60:ae:a3:3a:99:0c:23:4b:62:b4:7a:4d:39:3f:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:58:BA:02:B1:9C:4E:EA:42:E1:33:E7:E9:26:E8:97:A5:C1:DC
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:96:88:f9:d8:0d:f2:77:11:a1:f9:a1:0c:25:a3:f2:c9:
b7:b2:f7:9a:41:23:69:86:10:0d:09:61:f4:1f:91:9f:13:77:
a7:39:e0:a8:fc:11:ea:79:88:3e:c9:f5:c2:2d:4d:f9:cb:e2:
5b:11:2a:3a:1e:c5:bc:9c:9d:8c:2e:f4:8f:c3:c2:23:f3:f4:
f7:cc:97:f6:1c:e6:e3:e1:b0:4c:22:ce:58:a7:1a:24:b3:c6:
3a:c5:f5:46:e3:29:68:fe:84:c6:82:9a:27:36:dd:ac:f5:25:
32:24:ac:be:af:61:4b:8c:54:2d:13:1c:a6:f1:1e:55:1c:b8:
18:77:cc:35:3f:97:d0:80:5f:b7:d8:04:29:26:aa:a5:0b:0a:
17:85:72:12:ff:95:60:30:64:50:3a:6e:3f:a0:77:00:41:fb:
7c:97:34:02:64:8a:5b:4f:be:c6:03:8c:d9:8a:bc:b6:7a:41:
31:25:a3:ed:bf:ff:01:42:51:3f:4e:e3:a3:ae:16:82:93:91:
f3:ea:0f:10:0a:0d:cb:56:7f:9b:5a:53:e3:8e:19:7b:3c:88:
2a:ee:c0:19:5c:68:d8:74:04:38:83:c9:3b:34:28:bf:a8:82:
15:e1:ac:0f:3a:40:66:83:02:99:a6:4b:ee:e6:8c:87:5e:67:
98:8b:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:36 2025 by rpki-client