Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: ip1cmQti4jSprlnMDng96RT7ec//XlCYibCLmOevfFE=
Subject key identifier: FD:67:A3:35:89:DF:56:11:10:AE:D2:A2:F5:98:7F:5A:45:F8:65:C0
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 0198D5837A82CF565F8065E55723E0CD506D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0F1C
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: zP3xV+oWzoK8OxWUY7CUDRZ8m87hh0M4ToHMY8H+zO8=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7a:82:cf:56:5f:80:65:e5:57:23:e0:cd:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=fd67a33589df561110aed2a2f5987f5a45f865c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:49:92:f7:62:23:df:b7:eb:75:f9:32:ea:
e6:29:02:5a:0a:ea:e3:c3:79:06:db:cc:c0:6e:8f:
d8:73:ff:8e:86:c7:5e:83:6f:2d:8c:6b:30:45:3a:
26:03:37:a8:12:0b:9a:c1:5c:56:4a:a1:25:59:5a:
cc:a2:34:02:56:be:43:78:61:90:5e:2d:10:50:3f:
40:86:16:49:e1:fc:bd:93:c1:97:b0:ae:b2:db:2f:
eb:2c:09:8a:c0:fb:c0:59:53:3a:61:8f:d9:ba:aa:
7b:00:25:c1:28:cc:02:dd:85:25:32:9f:80:44:c5:
00:c4:2a:14:47:a2:3f:1f:ef:e4:66:ec:65:42:84:
c1:53:98:3e:aa:ba:8c:e0:12:5c:de:b0:c2:58:2d:
5c:8f:7c:e1:90:8a:72:d9:1a:db:a0:f4:28:87:1c:
2f:33:76:2a:02:54:51:08:9d:e6:2b:db:3c:9c:a2:
27:d1:3f:18:d5:ca:79:62:e1:9d:b5:35:9c:40:02:
c7:80:d8:e4:4e:c0:5f:33:fc:2f:69:f1:25:28:76:
0f:65:e2:4a:fc:2e:39:3b:a3:dd:6d:fb:c8:e5:42:
93:79:d4:09:fa:99:b3:ac:85:3a:22:86:10:f1:1f:
28:fa:6d:ec:02:1c:61:de:e3:a7:61:45:04:c6:b6:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:67:A3:35:89:DF:56:11:10:AE:D2:A2:F5:98:7F:5A:45:F8:65:C0
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:10:d4:19:18:1a:53:fe:39:ac:f6:a8:82:be:82:85:27:3c:
82:c8:eb:dc:f7:7f:eb:ed:f5:29:f7:94:3c:a9:48:e3:1b:2d:
f0:ba:2e:04:81:1e:1a:ca:8b:39:7b:66:b5:2a:20:16:6f:b7:
bf:0e:1c:04:41:5b:43:84:6d:27:98:0a:ff:5a:2b:9e:35:f8:
70:95:33:a5:68:dc:39:81:11:ff:07:bb:08:86:8e:70:a1:89:
9c:dd:4f:6c:62:5c:4a:7d:dc:16:38:fa:f3:bd:1b:1c:c6:cd:
82:90:53:df:d9:a7:57:8f:67:39:de:e4:42:d5:bf:9b:63:0b:
f8:bd:03:01:5e:88:98:f4:49:9a:f7:f5:3c:59:52:6a:91:97:
bc:eb:0d:7f:79:1c:13:60:a3:90:c1:55:50:46:75:b1:75:8e:
23:68:78:e4:ee:40:7c:7c:51:e8:ea:f4:44:f9:77:30:04:f5:
82:7a:55:fa:0c:39:3a:94:b6:16:e4:77:c7:65:75:f7:66:38:
70:32:3d:1d:29:9e:56:b7:a1:0f:73:dc:f9:06:c9:29:1d:e6:
4d:dc:d2:65:64:59:a3:63:e4:84:aa:02:1f:c4:0b:c1:82:e4:
be:43:88:d6:9d:4d:6e:00:43:13:f3:1e:41:c9:5a:1d:85:21:
56:42:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:59 2025 by rpki-client