Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: BAsGKeClAz5bND/0ZiCkoId7HtDsihZ42UhwEiXXv5c=
Subject key identifier: AE:AC:7D:81:43:88:C4:2A:2D:17:A0:62:A2:78:F0:9D:71:D8:20:0A
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 0198D6298F22F27C5BBE782AEF089687E21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 5tzD4qV4bM9K2NjG+tE0IhAfA9Kw/qcekdP3JKqfEjQ=)
3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
6: S-JnIhmXL5e2DsjQFgno_k2Vz8E.roa (hash: /YQsaxBTg9/GiAQu4cI2KHBUoCqKcZjkOS7l2+NOeWg=)
7: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
8: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8f:22:f2:7c:5b:be:78:2a:ef:08:96:87:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=aeac7d814388c42a2d17a062a278f09d71d8200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:96:24:f7:68:65:d9:30:c9:91:57:0e:b5:
6a:8b:ba:ad:e2:96:b4:6b:fc:fe:51:8e:7a:15:16:
a7:28:e9:db:ff:30:b7:3b:fd:a8:8e:81:04:6b:e3:
28:e5:b5:90:21:fb:61:b9:e6:78:fd:39:6e:eb:e3:
da:ab:af:41:11:4f:b0:e3:3d:d1:99:59:fa:ce:bc:
0d:62:db:17:57:26:40:a9:eb:de:9a:40:da:31:b5:
c3:de:3d:40:04:95:ce:ac:12:24:6e:0a:37:c5:80:
bd:41:38:74:63:2f:ed:a6:4d:aa:bc:88:4b:4f:e4:
cf:2c:5a:ba:e5:60:2e:f7:d4:cc:cc:c4:60:de:50:
f9:ee:a6:6e:57:42:9a:75:b9:8b:f6:25:d4:2e:a4:
64:73:6c:88:f6:57:67:69:49:96:4f:c3:76:5a:db:
8a:40:d1:5a:5d:44:03:8f:23:e8:5a:98:ec:8f:13:
b1:2a:ce:83:93:dd:33:cf:17:f5:95:0a:93:c4:1a:
ca:c4:a0:23:f4:d7:ac:5b:9f:5e:83:b0:0e:81:84:
4c:c4:57:df:d4:e9:e2:ea:fa:85:e5:8a:e1:f5:41:
14:11:57:66:65:a6:69:d8:67:ba:da:fc:03:9e:aa:
ce:bc:08:60:cb:3f:74:bd:32:8c:2b:d2:80:50:7d:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:7D:81:43:88:C4:2A:2D:17:A0:62:A2:78:F0:9D:71:D8:20:0A
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fa:68:60:5e:29:2e:d7:3a:52:96:15:78:23:d7:9b:c0:cd:
6c:1a:9f:2d:cd:b4:87:b3:c9:90:e8:98:a6:4c:c2:d7:89:f8:
bf:46:5b:88:2f:a6:81:02:87:92:c9:16:8d:e7:1f:45:82:74:
02:95:0e:d7:8c:2f:5f:a4:53:73:fe:f7:67:a6:01:7f:2c:dd:
d0:62:43:73:11:db:47:89:3d:74:b1:7b:f5:ec:9e:7c:aa:81:
96:16:ef:0f:d8:9a:14:af:69:a1:52:2e:3c:b7:af:21:61:a1:
54:28:7b:a3:a9:a0:68:54:76:ef:e8:cf:06:70:c5:de:95:36:
9b:86:85:6d:9a:54:35:87:47:38:27:77:00:01:e0:7b:77:3c:
eb:c9:32:51:7d:fb:2d:7a:68:fd:97:97:e0:3b:2f:40:d4:a2:
40:7e:c4:1e:05:22:37:30:d7:00:9e:b3:91:ae:60:65:b1:9e:
84:c8:94:68:06:44:43:59:06:9d:4c:58:0a:44:14:4c:ee:ff:
95:5a:e3:33:3e:5c:52:ab:a7:a6:04:65:fc:74:11:26:a9:88:
66:8b:2c:2e:9a:ad:17:d4:4d:f0:4f:ea:ec:52:2b:30:a6:7f:
27:d0:6e:b2:f4:76:d7:cd:08:03:c8:ec:4e:07:ee:c8:4e:ba:
bd:ad:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:38 2025 by rpki-client