Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: SdKBbxfaoit8fPucjrqaZvGqJofSrojOPtTJxzy703Q=
Subject key identifier: A7:C9:F8:D7:F4:68:6A:41:23:FE:D6:BB:A9:E3:2F:F9:7E:10:7D:B8
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 0198D6CDD8DE083B17A2F0D3475747089ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 15A4
Signing time: Sat 23 Aug 2025 12:01:11 +0000
Manifest this update: Sat 23 Aug 2025 12:01:11 +0000
Manifest next update: Sun 24 Aug 2025 12:01:11 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: eWUmPs8y3J90EvoEvAIctzhILdbbn7HTI9G4nO6sHkw=)
2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d8:de:08:3b:17:a2:f0:d3:47:57:47:08:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Aug 23 12:01:11 2025 GMT
Not After : Aug 24 12:01:11 2025 GMT
Subject: CN=a7c9f8d7f4686a4123fed6bba9e32ff97e107db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:c0:2a:61:b6:25:68:0a:f3:61:34:4d:65:
32:59:4b:f3:1a:4a:a0:46:15:b4:60:b3:00:19:7d:
a5:99:8a:4f:0a:f2:79:78:4b:2d:4d:6f:7b:18:01:
06:a9:3f:81:47:83:c0:a0:3c:01:a0:cc:38:92:aa:
22:a9:47:9a:50:1e:ee:f7:41:c7:1a:2c:3b:23:b0:
1b:2e:7a:93:4a:e2:88:7b:2b:3b:9e:c0:33:c4:ca:
b8:1f:3b:54:cb:d2:5e:bf:42:b0:14:94:98:bd:0c:
ac:26:e9:b4:9a:42:60:1f:d5:a5:a4:9c:70:1c:4a:
83:9c:73:33:fd:95:0c:69:f8:02:1c:d0:69:b3:47:
ac:98:5a:c9:a4:80:b3:af:17:12:b8:28:f7:f2:52:
c9:4a:70:82:c7:a9:c1:6c:bb:36:54:cb:d3:7e:f5:
aa:dc:1d:6e:17:4e:28:9a:72:34:8f:dc:3d:46:70:
b3:00:4d:d8:0a:9f:fe:b5:69:75:e9:a2:de:55:2d:
18:c1:9b:82:19:bc:96:3d:7a:a2:e3:5a:f1:c9:4b:
46:f8:c1:5b:8c:b5:43:ea:fd:7c:fe:05:59:3c:81:
9d:55:56:a9:a8:88:d0:bb:a6:82:99:ba:df:fd:43:
22:34:f4:69:c1:9b:a8:89:38:3f:d0:ef:7f:a7:03:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C9:F8:D7:F4:68:6A:41:23:FE:D6:BB:A9:E3:2F:F9:7E:10:7D:B8
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:06:97:5b:cb:71:a8:0a:06:95:85:ee:63:4a:76:17:17:
bd:5c:16:50:19:ef:d3:c2:e9:bc:94:36:d9:39:b4:35:dc:b0:
d1:c4:b8:c8:8b:81:32:8a:0c:74:83:2f:35:0e:cb:87:88:0d:
66:9f:ec:33:8a:e9:4d:d3:03:74:66:17:78:af:2e:54:a2:5c:
81:a0:43:7d:13:82:ad:ed:bd:4e:d0:4d:4e:45:b2:34:78:f5:
7d:2f:5d:8e:2a:26:4e:a6:6c:3c:be:66:c8:ad:35:48:65:f6:
b3:45:4d:45:44:48:1d:6a:46:b8:e4:49:c1:0a:a5:b5:1d:88:
18:fd:80:56:a0:a2:7c:b3:a4:4b:94:a9:0b:f8:20:47:67:8c:
b2:2a:17:b8:7d:51:a8:b7:90:1a:eb:3f:88:76:f3:d6:6a:ae:
f7:ef:2e:ab:63:bc:40:c8:65:af:ae:81:e8:33:d9:32:d2:23:
47:9b:82:88:b4:a7:db:b1:4e:8f:84:c5:06:c9:07:b3:4c:c3:
5e:db:22:98:09:75:46:e9:7f:d5:b4:eb:1d:74:7c:1c:ca:51:
42:84:cf:f1:1a:c3:7a:28:7c:8e:fd:92:a0:69:c0:8f:3b:cd:
7a:94:9d:5a:f4:54:4f:11:be:8e:8e:d0:d8:ab:d5:67:b9:39:
1a:4e:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:32:20 2025 by rpki-client