Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier: Yxvk5lYK1AZLT9EZadZtyMkjOBCxQEAeafkmTlXVRWo=
Subject key identifier: F5:B8:5E:88:C2:5C:43:33:AF:4B:06:98:1C:A3:34:A8:53:98:34:2D
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial: 0198D5F17553DEB31941FAABF40CBE57AAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number: DC
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: +l6We325loN+SZz+IP8H4RnqA3a9MTg1Oxl5jWpm8pQ=)
2: HyAFlnKRYn8v4ck7CUrvJ74oqJw.roa (hash: Cz97E2NkgnmgiZA3PdXbnScz0dyzdjSpjkDb9HLlBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:75:53:de:b3:19:41:fa:ab:f4:0c:be:57:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=f5b85e88c25c4333af4b06981ca334a85398342d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:dc:9e:d2:26:eb:91:6c:0a:1f:48:7b:4d:
59:ce:85:c1:bf:01:48:43:ff:1f:5c:5f:b8:eb:ad:
85:28:ee:22:9d:81:e4:68:8d:2a:1b:bc:5c:21:99:
cc:72:93:a6:53:79:ca:13:df:72:c1:14:26:38:1a:
d7:a5:5e:de:b8:42:50:6c:97:b8:84:6c:4e:72:33:
5c:33:65:07:ae:6f:99:8e:2e:ba:f9:78:e2:ba:fd:
aa:9b:ad:0b:a8:eb:69:40:58:59:59:79:31:54:73:
68:b8:fe:3b:dd:7b:ef:71:9d:90:51:38:09:45:64:
7a:38:14:0d:4f:bd:9a:f2:8a:19:68:32:c3:7c:40:
08:84:d2:df:44:39:ea:8c:ee:a1:59:24:61:5e:77:
bf:ac:8f:8a:a9:ee:2c:0a:16:b5:8e:ea:22:33:d2:
2f:fd:13:5d:bd:f6:3f:b6:ad:b0:3f:7c:d6:a2:bb:
6f:87:6d:04:98:38:62:84:6e:f9:9a:9a:3e:8d:72:
dc:20:bb:ab:ed:e8:3f:6c:c8:4d:23:62:f2:2e:ec:
e3:e0:25:58:91:36:56:9e:ef:f5:48:7f:67:b0:12:
c4:02:0b:32:5e:8d:37:6a:c5:47:ec:6e:5f:e1:e5:
2c:66:7a:bb:14:41:25:77:6d:df:b6:40:09:cd:a5:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:5E:88:C2:5C:43:33:AF:4B:06:98:1C:A3:34:A8:53:98:34:2D
X509v3 Authority Key Identifier:
keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:31:15:c0:30:99:06:27:1c:57:a6:9b:ea:2d:02:96:3f:
9c:2f:8e:c4:f1:e2:bb:1e:a8:c7:22:c9:8d:8b:b0:a4:37:de:
b0:b7:6e:f8:b6:5d:e5:43:64:dd:5d:c7:87:3b:88:c7:67:04:
04:11:f3:11:25:2f:96:e0:4c:f7:a3:46:28:ac:f7:2f:96:58:
17:e0:97:75:e2:47:96:ae:53:8b:f1:f7:c0:e7:90:c9:31:5c:
52:65:fb:ec:e7:d4:a4:02:7b:be:88:2d:02:b1:1a:e7:2f:1a:
0c:1d:2f:22:f3:54:cf:d8:84:c5:c4:80:ef:ca:20:f2:4f:07:
78:2f:12:e0:91:26:89:3a:47:fa:83:b2:d1:93:d2:bc:ba:e0:
66:9d:1e:f6:1b:47:25:55:d9:78:20:bd:b1:4b:11:c7:f0:fa:
f4:1b:5b:5e:42:7e:90:aa:a4:e9:a2:68:08:67:0f:31:b6:ce:
fe:ad:81:7e:1d:35:c7:6b:ea:f8:51:2f:f0:12:e9:64:bc:d3:
62:7c:b0:97:4b:d3:92:52:97:dd:32:56:12:c2:98:dd:93:7e:
d3:f5:5d:12:b2:4d:50:0e:77:c4:08:2a:6b:ba:0a:fe:f8:e2:
a7:d8:ad:0a:71:d5:3f:e0:fb:7f:c8:22:6b:34:04:3f:c9:0d:
53:6a:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:14 2025 by rpki-client