Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: n790Cjxo4yLPEgSU7jwh135Wf24FRZoYh7qjrbuZbUI=
Subject key identifier: BC:9A:76:DD:9D:B5:27:D9:EA:27:4F:7F:F0:78:46:A7:92:ED:79:51
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 0198D4729D60EF00A87155DB58874DD2A439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: 0ZP0+7ia9HLISOSfD/BqPUSov544glTkhBCFqeujf+Q=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9d:60:ef:00:a8:71:55:db:58:87:4d:d2:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=bc9a76dd9db527d9ea274f7ff07846a792ed7951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:c9:af:a6:6d:49:f7:60:e9:5c:7e:ba:72:
e8:94:3c:c1:b5:a1:9a:a0:5a:01:01:b5:7a:c3:a5:
01:ac:84:76:74:ed:03:e0:3c:22:95:c3:6f:d2:b2:
e9:f1:5f:13:a8:06:d9:38:76:13:00:d3:d5:5a:92:
d3:a7:64:4f:61:db:ab:00:1c:ca:14:ef:be:ce:3a:
6d:16:7d:7f:5c:86:f6:29:f4:1c:3c:28:83:ec:91:
e2:66:7b:6c:fa:96:57:e2:44:07:8d:3e:e0:bf:db:
aa:db:a9:0c:90:2f:15:0e:7c:10:9d:dd:d0:ef:d5:
ce:36:51:e9:78:4e:d7:70:74:37:27:81:25:3c:ea:
f6:50:4c:74:a2:b2:7a:4c:0b:39:25:af:48:25:89:
d7:02:cb:76:87:98:31:c3:29:ce:84:d2:da:8d:b6:
ea:fc:af:59:98:05:3d:84:24:43:9f:60:72:7d:85:
62:df:f5:0b:36:57:1d:bc:5d:e1:2e:9e:40:b3:7b:
76:39:7d:7d:9c:f3:3e:2b:ff:a2:9f:6e:00:5b:1c:
fe:1a:35:88:56:eb:d6:9c:32:5c:ce:40:f7:dd:cd:
98:6d:21:9c:0d:e2:71:d9:3a:c5:20:d8:b2:bd:37:
6a:09:b0:d1:d1:f7:67:38:db:14:1f:44:6c:58:7d:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:76:DD:9D:B5:27:D9:EA:27:4F:7F:F0:78:46:A7:92:ED:79:51
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3e:68:1c:2d:a1:ae:e5:33:6a:34:fe:c6:df:56:e2:0c:4d:
c6:fb:55:f7:9c:b9:01:7e:00:3a:b7:0b:95:6b:aa:2d:4a:03:
84:00:27:de:96:d9:a7:ca:2c:11:20:6f:8b:88:dd:f2:38:1b:
b4:20:a5:b1:0c:f4:f3:62:3d:d5:15:35:86:d6:f7:60:3f:08:
ef:cf:3b:60:45:8f:1e:54:bb:8c:45:be:ee:e9:a1:9c:36:54:
d4:82:68:cd:72:b8:55:a6:35:90:f1:70:94:8e:50:1d:34:67:
e6:42:b5:94:1b:87:3e:65:a2:12:78:6c:e8:4c:25:0c:83:d8:
21:84:99:af:df:32:fc:8f:a0:b8:b5:5a:05:fd:c8:42:59:4f:
64:f9:d2:81:6c:e9:1b:b9:c8:f5:7f:02:59:02:6c:0b:6e:6f:
ea:3c:66:6a:bb:f2:cb:81:b8:38:b5:81:e5:ba:97:6d:31:7b:
49:11:f9:42:ba:18:ec:b0:d7:92:27:5e:f7:b4:8f:19:72:de:
d9:33:5e:5f:74:68:bf:88:d1:c8:41:bd:c8:5a:b5:53:26:2e:
ae:4b:2f:d4:d3:fa:49:c3:a1:e6:cd:db:af:ba:ca:af:e2:41:
3d:19:0a:07:9c:d6:e9:71:06:73:62:50:85:37:e5:97:df:4f:
dc:f9:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:08 2025 by rpki-client