Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: gWI+virtKac9diWDJm/IZRIzPmbGCF7oK+QrVHEa9AY=
Subject key identifier: 76:2E:82:D0:85:C7:9E:7A:47:53:38:2A:38:2D:F0:6E:38:DD:83:9F
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 0198D65F0CDF162CBEC405236B60C9D4CA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0FEE
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: r79e9jFcHCGCCnVsBZf49mB2MunLPSpyot6pGyNdZCA=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0c:df:16:2c:be:c4:05:23:6b:60:c9:d4:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=762e82d085c79e7a4753382a382df06e38dd839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:9d:04:3b:12:74:c9:e3:9f:da:89:df:af:
b8:11:fc:30:c2:c7:99:f7:0b:db:e1:40:a4:a1:11:
99:ec:43:60:8b:55:c3:dc:ed:90:0e:06:1c:e4:95:
a5:bb:10:f1:d6:e7:90:5c:7f:64:e9:c0:5b:a1:d6:
96:8f:d7:3d:a2:36:79:43:b5:8d:5f:95:ab:b9:5b:
8e:07:71:47:c6:ad:06:98:91:9c:2a:16:80:b3:ad:
00:ca:b3:1b:73:d5:54:ac:4c:ed:2d:8f:54:fb:66:
6b:e1:34:6b:3c:67:c9:c9:cb:cd:fa:c5:03:cc:8e:
59:17:ff:51:5d:79:11:98:97:a7:2e:2c:86:c3:e4:
9f:68:9c:ab:82:66:db:6b:1d:38:97:41:92:06:22:
18:ad:9d:af:c7:42:de:5a:71:df:f4:b2:ee:40:28:
ae:52:4c:4a:39:b4:72:57:dc:2b:09:da:6a:fe:76:
1e:07:a6:fe:81:13:86:42:2f:86:8b:50:0d:13:cb:
c7:96:35:29:a8:45:f6:04:7c:94:59:c6:39:bc:8c:
fc:ee:55:0a:eb:12:42:62:78:59:6e:bf:be:16:2e:
86:57:bd:ed:00:1c:32:25:60:9f:d4:9f:90:75:de:
2a:ac:fe:40:18:5d:41:4b:6a:5d:a5:6c:82:bd:f1:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:82:D0:85:C7:9E:7A:47:53:38:2A:38:2D:F0:6E:38:DD:83:9F
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:48:9d:b1:b7:b2:35:0f:74:23:0e:9e:b1:c2:fa:3f:f0:
b6:5d:bf:0b:b6:1a:7b:49:66:c3:fc:43:1d:9e:2f:3c:8e:14:
52:60:b6:4b:da:b4:96:70:37:43:34:d4:29:5f:8f:0a:8a:1e:
25:8e:de:01:86:fc:af:73:eb:74:6b:69:93:ae:74:3d:6d:0f:
11:7b:00:f5:8d:81:e6:9d:e9:33:6f:d6:72:50:1f:86:e0:c0:
d6:77:93:86:9f:cf:c7:79:4d:4b:7b:e7:fb:94:1f:e2:65:3c:
9f:6a:51:08:13:b4:78:e7:90:cf:5f:d9:e7:d0:b5:9b:cd:2d:
4a:ec:b3:7c:bd:02:cd:18:b3:8d:bc:31:28:ac:c0:03:13:c8:
41:03:9c:a4:7b:38:2f:ad:39:24:11:25:ce:db:b4:c8:5b:86:
08:17:78:73:9c:c0:26:b6:b0:ec:65:48:7d:39:2e:db:bf:ef:
17:aa:e8:0c:3b:4d:b1:2b:66:81:85:38:c5:80:2e:f4:79:95:
36:a9:cd:4a:44:67:89:47:39:09:4a:16:d7:18:9b:05:4c:eb:
a5:b8:06:b6:ef:1e:b6:ac:0e:e5:99:72:15:d0:1c:b3:fa:d8:
fe:71:b9:88:1d:df:69:df:0b:fa:51:a1:e0:34:d3:f0:7b:65:
f1:c6:0f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:40 2025 by rpki-client