Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: 8QEUhl8zAgIf+0fxhoS6bo2UWGWmJQRRvHtASDykV3g=
Subject key identifier: 4F:BF:9A:A1:9A:87:7A:DE:05:A7:C5:37:CD:76:2A:A9:EB:96:08:67
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 0198D583C6844A16C11F08EB425289A1F91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: k0V3xN6irkydl6IDpmwU2JHkWfWGwvhn5199b+30eJU=)
2: tb7zy4gQAH_RQZ4Nz-3NFx59Mbo.roa (hash: oJpg/mpoL0grHs9Xu1Kgy7pPSav+AYmr/wpKbCpQ/O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c6:84:4a:16:c1:1f:08:eb:42:52:89:a1:f9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=4fbf9aa19a877ade05a7c537cd762aa9eb960867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:8e:d5:97:6b:06:a9:02:62:01:df:e1:ac:
04:6e:f3:f0:59:cc:4a:dd:17:06:0c:d3:54:15:ef:
a5:35:80:9b:9d:12:06:e5:d0:bd:d6:8c:37:00:f7:
5c:db:f1:2a:01:94:23:8e:f0:29:06:23:89:36:41:
06:45:ad:12:de:55:82:04:30:48:2a:0b:18:cd:a9:
3d:32:d8:fa:e3:f0:f8:39:fe:c6:6f:41:ae:6f:98:
39:0f:67:95:7b:92:c9:51:10:c7:52:7b:dc:75:83:
af:88:79:89:1b:c3:36:cd:71:92:70:a4:be:d0:86:
fe:ed:90:6f:cf:1d:ea:b2:f6:e2:a0:9d:cf:1e:2c:
da:a5:6f:aa:1d:29:f2:87:b8:2d:c9:79:b0:0a:9d:
eb:f7:fb:de:84:72:51:9c:7d:9e:72:2a:6b:68:4c:
82:04:4f:23:07:0f:c7:c1:3b:55:69:56:5e:71:dc:
dc:61:04:20:75:1d:05:76:12:bb:d4:60:9a:05:9f:
45:59:5d:9e:55:03:07:1c:60:0c:39:54:c0:48:8f:
85:8d:e9:ee:05:dc:cc:f2:45:cd:fe:fb:a0:af:53:
7a:1a:3d:94:4e:1d:ae:4b:36:a7:54:c7:86:ea:2f:
cd:38:37:50:ba:31:52:4e:39:4b:a3:99:02:60:94:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:9A:A1:9A:87:7A:DE:05:A7:C5:37:CD:76:2A:A9:EB:96:08:67
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a0:d1:9b:ba:e1:b8:ae:a2:a4:61:e1:47:41:a6:53:fe:14:
41:bb:3f:3a:e1:ba:4d:4d:c8:d5:92:06:f9:12:87:9e:55:a8:
de:34:d8:b8:ee:ce:94:a8:cb:65:c2:88:c0:1a:89:d5:b1:85:
91:84:33:c3:9a:ee:99:55:93:e9:7c:b4:28:fa:9b:32:b5:c9:
53:5f:90:15:54:c2:3d:84:da:36:21:c2:f8:c9:b4:4f:c7:a7:
2b:d1:c5:1d:bf:9c:6e:13:3c:28:ac:0c:c9:d9:fa:2d:93:03:
e2:72:d8:d2:ae:01:66:d9:62:f4:45:53:08:f6:1e:cb:c4:0d:
d0:be:65:1b:4e:5e:6c:9c:02:8b:e0:4c:4b:9b:93:8f:90:a1:
9b:ba:ee:b8:2d:6d:0b:00:1b:1a:5b:47:78:08:49:8a:c0:23:
9b:3a:a8:f7:aa:87:9b:1c:17:91:79:8b:5e:f1:e4:d8:e9:3a:
84:c0:f9:ed:71:73:bb:2e:33:d7:b1:a2:ca:c7:f9:77:45:0f:
54:89:25:d7:96:0f:a3:c4:97:42:d4:1c:17:80:ab:00:88:e8:
c2:69:f7:e5:8a:f5:ca:02:d6:62:e9:34:99:58:7b:a8:1b:d9:
ff:46:0c:70:d8:60:d7:72:0a:9e:48:ea:87:a7:fb:83:a3:32:
ed:35:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:45 2025 by rpki-client