Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: 1U0N3SsA6kh3KD7XjiPAL9GsALSsKsSQVpUHgUH+/Zc=
Subject key identifier: 59:0A:D7:D1:81:0D:F6:AF:36:6F:38:C4:9D:5E:D8:AE:E3:82:43:4D
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 0198D8F2E0618827D8553B87C8C636773455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0A14
Signing time: Sat 23 Aug 2025 22:00:52 +0000
Manifest this update: Sat 23 Aug 2025 22:00:52 +0000
Manifest next update: Sun 24 Aug 2025 22:00:52 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: htn1DloOGRhlicbD3/21NNydh1tZeT+2Mh+f2Uu7H6U=)
2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:e0:61:88:27:d8:55:3b:87:c8:c6:36:77:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Aug 23 22:00:52 2025 GMT
Not After : Aug 24 22:00:52 2025 GMT
Subject: CN=590ad7d1810df6af366f38c49d5ed8aee382434d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:00:1c:13:b3:18:2f:c8:7f:4c:bd:23:bd:
b7:40:d1:21:51:62:0a:2e:90:98:85:30:93:90:2a:
32:5b:99:2d:04:23:ec:aa:f4:05:f0:1f:c8:df:2e:
ab:86:60:8b:4e:90:4a:77:64:06:28:99:3a:5b:fc:
ff:5f:46:a2:e2:84:9e:6d:c8:5b:99:a1:15:5a:c8:
99:0d:c7:ee:6a:48:55:80:77:da:65:23:d4:87:0a:
2f:72:8c:72:c4:d4:e1:2e:bb:6f:9f:6a:09:00:ad:
67:7c:29:81:4a:b7:c7:5e:57:0f:d2:24:52:45:50:
8b:76:60:72:59:a9:f0:d6:d2:53:00:4b:9c:6a:02:
3e:fd:23:13:dc:c5:f5:91:1d:59:1e:50:d6:10:80:
4a:ac:49:a6:35:62:c4:e1:1b:d2:b1:dc:42:cf:01:
50:fb:05:52:80:58:1d:42:20:27:c8:3e:36:a1:da:
6a:c6:8e:ff:65:28:07:89:5f:e2:a2:90:b8:92:59:
7c:81:68:53:3a:1a:29:48:ae:45:47:17:98:74:52:
ed:a6:d5:15:bc:fd:b2:eb:53:86:78:ac:a2:b9:09:
db:fd:8b:d4:54:f4:8b:5a:3c:46:65:26:cc:1e:55:
1a:55:c0:8a:56:af:fb:25:8d:6f:96:90:31:21:0f:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0A:D7:D1:81:0D:F6:AF:36:6F:38:C4:9D:5E:D8:AE:E3:82:43:4D
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:41:93:27:d2:dc:e5:1e:dd:95:29:f6:64:f8:10:f2:23:ea:
10:7a:05:de:2e:9a:66:6d:33:d0:eb:9a:df:97:29:58:d1:3d:
8f:52:83:23:e4:c3:e0:e0:20:c0:93:19:8a:1b:85:44:ad:e6:
97:29:ca:ae:5a:8f:c6:4c:2e:9f:dd:b7:77:43:6e:31:de:25:
8e:de:7e:4b:21:b0:ae:8f:fe:5e:81:ef:8a:75:63:2c:27:71:
6e:fc:56:b5:62:c6:e8:20:ca:50:d9:e3:9c:b6:5e:ed:c3:5f:
bf:0e:81:39:2e:80:98:73:fe:84:96:48:41:7c:73:25:04:21:
13:d1:bf:b6:17:81:44:e4:e1:fa:9a:95:1a:b0:42:bc:23:17:
65:d5:73:20:ad:fc:00:97:ea:75:d2:ae:76:73:c5:3e:0e:cb:
40:a0:0b:58:ab:22:bc:b3:fd:14:ff:1e:a5:a5:fe:ce:4d:4f:
18:16:bd:29:05:e1:29:ce:0b:8d:00:8b:01:5e:3f:86:73:b6:
d4:f6:0e:21:55:8e:6a:42:c2:1f:06:04:a8:32:2d:d3:00:10:
53:cb:de:32:d0:c9:46:70:17:f9:ea:44:6c:6f:e7:04:b2:ef:
15:ca:f1:0c:56:05:8b:1d:93:8d:2b:8b:36:98:ab:43:94:1a:
2b:14:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:06:17 2025 by rpki-client