Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: 1+zUjkS/KmvhUSHDzwQDn1gav+JZka5n1mXa/XKTA9U=
Subject key identifier: 3C:C5:53:CF:C8:A4:5C:75:9A:F2:38:C7:6F:1C:CC:C1:E7:7F:B8:7D
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 0198D4E00825DB9646380769733F850BFF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: Jql735L8eIpBafcEKYvC7Bpu8H0LZRTCV7PF7gJBtFI=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:08:25:db:96:46:38:07:69:73:3f:85:0b:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=3cc553cfc8a45c759af238c76f1cccc1e77fb87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:a6:6d:40:7a:d8:28:db:4e:25:15:1e:7a:
64:52:18:c7:9b:14:06:19:8f:9c:9f:ae:2f:cb:71:
6c:e3:65:6c:8f:a6:12:c7:11:e3:bc:0c:fc:50:0f:
15:6e:90:0d:dd:1d:b5:89:f9:6c:e8:ca:54:31:88:
af:69:75:e4:2b:16:ad:20:9b:60:09:18:de:94:07:
a0:8a:d0:dd:a4:f3:17:27:a7:f6:72:e4:70:75:e3:
64:eb:f2:73:c6:bc:40:f5:09:5d:d4:e0:84:04:82:
9c:cd:09:9a:ba:78:bd:4e:11:6b:6c:82:23:01:a6:
b2:7f:f7:4a:33:62:3c:63:08:fb:f3:df:a9:41:1e:
e3:21:bb:09:24:43:aa:42:a2:4b:01:68:79:42:9b:
04:f3:44:e2:d1:4f:06:b9:a2:bf:d5:89:63:e3:74:
f0:53:c4:a5:9a:91:49:e1:1e:4a:69:d8:54:f4:a1:
cb:04:d3:a8:ba:35:b3:31:f1:89:20:97:c9:0f:66:
df:87:d2:39:b7:6a:df:3e:9f:3f:8c:6d:65:76:81:
92:7c:c5:68:47:6e:e8:31:b1:f1:54:f5:a0:65:14:
eb:53:d1:f7:79:76:19:b2:71:d1:96:7f:7a:ea:c0:
f5:9b:d7:dd:0f:75:33:23:8f:12:77:5b:de:5e:40:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:53:CF:C8:A4:5C:75:9A:F2:38:C7:6F:1C:CC:C1:E7:7F:B8:7D
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:c3:ee:32:60:cb:2f:43:66:3a:54:a5:a6:d8:7f:15:b6:
25:83:03:57:fb:c8:35:a7:48:c9:81:62:04:ec:9f:3a:06:5b:
39:a2:71:4a:92:80:44:f2:d0:b2:51:9d:30:8f:07:3d:3e:f3:
75:2d:11:ad:0b:4f:e6:e8:1d:13:dc:3a:52:ab:99:87:a1:13:
a0:61:01:91:8e:5e:b9:c4:e8:89:c2:2a:be:09:74:3f:49:3d:
63:eb:30:72:79:87:9f:b1:51:3c:cc:01:70:c6:74:6a:fa:40:
ae:3e:76:43:e1:b2:9f:4d:a8:09:5a:03:93:a1:de:e5:e7:b8:
ac:0b:96:eb:b8:d5:07:d9:66:22:12:fe:e0:ed:b2:b4:0b:52:
85:5b:e3:44:5b:c8:4a:55:87:5a:c7:50:9e:f6:fd:9c:55:37:
5a:fe:e9:8d:37:bd:fd:91:0c:a6:73:e3:a9:83:0c:bf:c8:d1:
9b:14:d5:96:52:76:5a:13:41:aa:0d:5b:bd:bd:59:76:94:14:
34:82:df:bc:e5:22:11:5b:92:1c:48:d7:ac:80:c1:e6:d4:e7:
dc:78:16:31:f1:9f:ad:32:9a:1b:f3:f7:e9:95:c3:88:33:ac:
6f:06:27:01:af:70:55:c2:f1:d4:88:7a:6a:28:2f:fe:69:8c:
03:27:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:55 2025 by rpki-client