Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: qKYdu4mkC0M2EYPuj0zvhitr0EFokTVyl/BUCPHEmRA=
Subject key identifier: F4:A6:6C:74:06:CB:08:41:B2:E2:74:99:10:36:60:1D:DB:2E:32:7B
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0198D54E5439C50A84CE4D06E46FBC75BEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 113A
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: 10ug9bobzBSP81Cqjsjqmc2YXAQs87zY/s9GAu30L7M=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:54:39:c5:0a:84:ce:4d:06:e4:6f:bc:75:be:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=f4a66c7406cb0841b2e274991036601ddb2e327b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:42:eb:84:19:1b:0b:8f:f1:d8:b6:37:a9:
28:a1:43:c4:f2:69:7a:61:d3:c6:5a:6b:90:be:9b:
4b:e4:cb:63:71:23:5e:0f:84:82:ab:cb:67:31:a7:
6c:e6:39:d3:30:bb:ac:c9:78:66:a1:8c:c7:53:26:
db:57:c7:2d:c0:eb:a1:f8:9a:4f:ac:a5:1c:9c:26:
a0:58:30:2c:b6:6a:33:9d:9a:aa:a8:26:46:e2:96:
f3:e8:6c:e2:92:fc:97:b0:f6:c4:ce:3c:68:bb:f5:
eb:6a:69:99:ab:8d:72:b0:fe:e2:e5:f6:66:57:3e:
4f:60:c6:37:1b:11:9b:f1:0f:b6:82:5b:f9:32:d5:
3f:68:6c:2a:2f:51:79:8e:0a:1b:ec:df:ec:e8:29:
03:1f:30:3d:24:42:fd:61:6a:e2:89:50:01:94:8c:
fd:0e:e3:61:e1:fe:1e:41:ed:81:0d:d3:f7:b2:e5:
e7:11:38:56:9d:e8:30:fb:18:c8:ca:d3:aa:9b:f0:
e6:e8:94:26:55:a0:6e:f1:cc:6f:ff:bb:3f:17:e2:
d7:b6:54:b3:11:cc:55:f5:4f:b1:b0:1c:fb:d3:e2:
fb:9f:8d:b2:08:ab:2b:70:ee:99:5c:61:9d:cc:92:
b9:c8:4b:1f:f9:1f:d5:be:c8:50:a4:f8:e2:c9:8e:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:6C:74:06:CB:08:41:B2:E2:74:99:10:36:60:1D:DB:2E:32:7B
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9c:ab:74:90:15:22:69:af:ee:f7:02:1e:31:7f:25:9c:33:
52:bf:39:07:e1:35:ad:0d:78:f4:0f:b5:1a:f8:cc:41:52:53:
f7:c8:f7:b0:34:18:f6:03:28:23:af:f0:f7:53:0d:00:13:38:
8a:81:4a:b9:b1:85:eb:17:cc:23:d3:84:68:f5:86:f2:5c:7a:
9e:76:d1:26:f1:c6:49:b0:64:7b:1a:c5:04:12:b1:00:45:a0:
36:9f:13:60:9b:f8:83:ad:9f:62:68:2c:89:f1:7d:3c:81:4a:
93:b0:3d:1b:e2:e4:b2:96:e2:b6:0a:a0:18:b0:17:4c:5b:e3:
f4:fa:cc:92:2e:a0:8e:f3:b7:18:9a:60:9b:8d:de:e1:f1:95:
de:46:c6:d3:c0:15:f2:72:14:d9:25:ff:1b:82:30:7a:ec:1d:
83:03:a9:9b:4c:4b:85:5b:b3:8a:97:52:ab:eb:a5:8d:1a:3b:
d5:fb:6d:c6:04:75:44:0f:94:cf:d7:04:05:3c:db:3a:a8:4b:
1a:ce:e0:ed:2c:50:3a:c1:8d:fc:e7:78:2b:c6:5f:02:4b:65:
ce:31:3d:28:b1:2a:7a:97:60:f3:bb:2c:7a:18:c8:07:03:c7:
bb:4d:fe:35:ab:cd:03:d8:83:eb:5b:1f:9b:e5:d2:71:69:41:
20:2d:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:25 2025 by rpki-client