Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: AscuO4HJOo/2sa3AzKR7ZpvgC4E7vJ0mgzdEELg4XDo=
Subject key identifier: 0B:6E:A4:E1:07:9C:66:1F:58:FB:7C:9F:84:61:71:B4:C7:15:1E:52
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 0198D65F4F0A4542C4BFE110FA87BEC51505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0CB5
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: PQWUIOQAcXCmnFSWTVgmzv5Usj2/9aRJxq443qJrVI0=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4f:0a:45:42:c4:bf:e1:10:fa:87:be:c5:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=0b6ea4e1079c661f58fb7c9f846171b4c7151e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:f7:79:e0:15:31:95:4c:23:39:77:6f:8f:
ba:ed:9a:ba:fe:e9:02:6e:c0:c4:e3:0c:85:2a:82:
2b:b3:a0:a0:d0:18:af:23:49:32:c1:b4:cd:3a:69:
c3:70:42:7e:e1:64:33:bb:3d:b9:76:bc:91:40:ff:
ef:a3:48:77:c5:e2:a6:13:a9:32:50:9a:22:fe:bb:
33:3c:0e:2b:bd:39:e0:b7:9b:bd:4b:89:33:50:69:
23:8b:1d:15:20:b9:7e:57:02:bc:ae:6a:34:67:11:
e7:4e:a5:5e:8e:4a:c7:6d:38:3d:ee:38:4e:ef:1f:
65:c6:2a:c2:d0:e5:fc:be:76:a7:67:64:c1:72:d9:
18:aa:3e:0e:d5:6d:3a:89:0c:79:45:de:7a:7a:52:
47:84:96:ad:61:e8:47:e9:51:cc:71:35:49:f1:b4:
da:f9:6f:0e:4e:b9:f8:d7:0e:4d:78:cc:1f:e1:9f:
ac:0c:61:fa:d0:77:6b:f0:df:09:79:d8:92:e4:d0:
45:40:dc:88:71:a0:da:dc:43:7d:49:0f:d4:6d:22:
b2:57:6c:bb:4e:53:05:89:7d:b3:7e:4d:eb:39:e1:
27:03:51:aa:e9:d0:0e:d4:fc:4e:7c:31:3a:fa:27:
70:2e:00:e3:3e:62:fd:70:3f:46:ab:69:0c:05:1a:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6E:A4:E1:07:9C:66:1F:58:FB:7C:9F:84:61:71:B4:C7:15:1E:52
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:11:67:78:df:f0:97:44:cb:b6:60:19:21:80:66:8b:4d:
3d:f6:5e:bd:d3:fe:49:c2:de:9e:34:23:66:4d:6e:70:0c:80:
e6:c4:86:5f:00:33:10:e6:6d:91:8f:ca:8d:9b:13:6a:49:23:
0e:87:24:99:2b:da:05:67:44:68:82:46:f9:5f:e3:e7:96:2a:
0a:d6:80:01:2f:93:57:38:e5:83:68:f3:1c:4e:bf:bd:0c:b3:
87:45:77:25:80:83:55:40:b0:4f:4f:7e:58:db:8c:ed:17:3d:
64:a2:4c:07:77:81:b5:c4:ad:4e:c3:b8:e1:2a:38:99:d9:ea:
c3:f7:5b:23:8c:86:3e:8f:fb:49:22:d0:d5:ac:6d:1f:b9:a7:
f2:76:6b:13:19:85:ae:3f:e4:81:8a:dc:3e:8c:02:53:d7:fe:
7f:61:2f:75:94:ed:bd:8a:7f:eb:cd:ce:93:e4:48:83:77:f5:
73:d6:30:9a:a3:fb:79:48:6c:bf:67:9d:b7:ce:d4:3e:57:f7:
3b:d8:24:e4:2a:ba:23:5a:e9:ab:b5:97:4b:53:5c:d8:f2:99:
96:eb:93:ad:ce:ef:b4:85:a3:6d:0e:36:05:3f:2d:2c:d5:f7:
c0:aa:8a:13:b8:76:34:60:43:a9:75:b6:a2:0a:d8:05:80:9b:
e0:eb:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:50 2025 by rpki-client