Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: /K4/2EsoGJ8Br3ZXRGpq/r8yCEGFIX4ZSsbQomzl2zg=
Subject key identifier: F9:37:29:0D:36:AD:3C:D7:DF:96:BC:EB:EA:10:B5:11:35:15:E6:0D
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 0198D4A7A3639132F8AA6545AEDCF1CD63BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 087D
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: oobmKfq3BKRSRwfNrqZjUBp92A4QMfA7AgHvj4yBtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a3:63:91:32:f8:aa:65:45:ae:dc:f1:cd:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=f937290d36ad3cd7df96bcebea10b5113515e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:cc:a6:6e:57:c7:21:2e:5a:91:f8:28:2f:
50:b8:cd:c3:c3:ca:fb:b6:58:a7:48:55:f3:28:96:
0f:f8:48:f6:5e:c3:11:45:4b:62:bd:fb:a5:1c:88:
81:98:00:90:f0:9e:84:0e:52:9d:b8:1e:f1:5b:cf:
a6:69:b5:eb:fc:49:93:91:fc:6f:5f:d2:59:7a:e2:
49:fe:97:c4:31:6b:05:b8:b7:e9:d6:bc:47:e7:1a:
3a:59:10:e9:d1:3a:4e:15:57:39:db:63:02:28:8c:
71:87:72:3c:1c:eb:12:99:8b:de:5a:98:de:13:42:
5c:51:ee:e1:d5:08:ba:4e:7b:ce:15:58:83:a3:05:
d4:7d:99:26:70:17:75:60:7f:7e:c5:38:4f:2e:a1:
9c:86:f4:90:39:64:3f:bd:62:83:01:4f:d1:5d:42:
30:6d:55:f8:8d:78:45:b6:de:26:69:e3:08:b2:9b:
bc:a9:ee:d6:8e:95:d4:d3:62:25:62:c8:b3:19:c3:
fc:0a:ee:e7:76:3a:f2:6b:08:e2:40:61:43:9d:f0:
3f:8b:29:57:51:10:99:27:82:08:00:c7:f8:12:d9:
2c:c0:f6:87:7d:c2:a6:98:3e:67:61:7d:6a:29:16:
cb:d4:92:de:e6:03:6d:37:db:2e:5b:69:71:51:f0:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:29:0D:36:AD:3C:D7:DF:96:BC:EB:EA:10:B5:11:35:15:E6:0D
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5d:09:57:b4:60:54:d8:ee:a5:7e:b9:02:30:dd:12:e8:20:
2d:31:e9:a3:05:55:9b:e5:45:99:e2:82:77:15:4c:4f:29:bf:
02:ff:a5:cb:09:0f:85:64:19:f0:4e:ef:4e:55:a1:37:6c:98:
0a:63:ed:bf:1e:9b:36:36:0e:bb:8e:7b:02:1d:37:bb:83:d7:
cc:2d:44:01:d6:f5:41:67:f3:39:a8:d3:e2:ff:d8:d4:07:d4:
b1:32:21:cd:fe:f3:35:d6:9b:e7:17:9b:51:51:c7:a1:bc:e9:
21:13:e2:17:f9:60:cf:6d:b0:b6:50:56:53:b1:5a:06:6f:96:
49:2c:39:fb:56:33:af:a9:c5:34:b8:67:9c:e6:5a:6d:39:e2:
9c:ec:cb:29:c6:8f:0b:90:46:47:f1:36:d4:8e:09:1d:80:1c:
b0:3d:89:be:6b:80:39:da:49:84:e3:c1:09:36:7a:2d:7f:e6:
fc:b3:19:85:f7:a7:56:bd:16:cf:d9:43:37:d2:6e:6c:fd:90:
18:9b:ef:33:17:2e:fb:c6:52:6c:07:db:46:34:40:20:71:3c:
ea:0b:3c:1b:3e:40:6f:8f:bd:51:48:10:34:10:cd:44:14:da:
9d:cb:10:21:af:1c:7c:69:62:21:59:0a:21:cd:67:24:60:31:
73:05:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:18 2025 by rpki-client