Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: gm8dnirngr9lukeNgLVO6kDAtvaS9nhjJHcDw3RvCgA=
Subject key identifier: 3B:98:DA:D8:4D:7A:C0:2D:8D:DB:58:3B:3B:BE:D7:25:C3:12:AF:90
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 0198D472CB68D29D473BBB6A1E1315C9127E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 01:02:29 +0000
Manifest this update: Sat 23 Aug 2025 01:02:29 +0000
Manifest next update: Sun 24 Aug 2025 01:02:29 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: 2FvbWxx13ss+xZVeY1T+OksTZVXtc5Uc2UPqTCN2U+s=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:cb:68:d2:9d:47:3b:bb:6a:1e:13:15:c9:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Aug 23 01:02:29 2025 GMT
Not After : Aug 24 01:02:29 2025 GMT
Subject: CN=3b98dad84d7ac02d8ddb583b3bbed725c312af90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:d6:d5:25:bd:84:fd:d1:05:92:31:ba:75:
50:6c:e3:8b:a9:54:70:c7:8c:f4:85:ef:15:61:23:
7b:0e:d0:cf:0c:22:c3:41:f7:a0:4c:b0:b6:33:8c:
a2:83:fe:27:77:f8:55:05:8c:ab:a0:25:8f:c9:52:
07:27:10:03:d4:0d:63:39:86:0b:ab:f6:b7:39:2a:
06:6f:5a:d8:37:1f:df:8d:d6:aa:6d:e3:af:cb:6f:
00:36:1f:ab:ea:71:b9:60:59:50:03:b9:ad:93:c6:
bc:41:1c:19:14:fb:bc:86:1a:f0:f0:4d:0c:d6:3a:
fd:dd:6d:93:dd:f7:ad:9a:6b:63:31:f8:54:01:f2:
e2:d2:19:1b:bf:84:94:ea:de:b2:05:e2:92:d3:66:
6f:66:d1:eb:0e:cb:c2:17:56:46:8f:16:b1:07:6e:
42:1f:20:25:b6:e0:bf:41:8d:b3:19:8b:5f:7a:a6:
c3:1d:1e:4a:7a:c3:94:94:9a:cc:9f:05:81:60:08:
da:3a:6d:84:86:54:1f:e5:21:db:4f:1e:1e:cf:7e:
ec:d8:09:43:98:dc:1f:73:cf:eb:cd:7e:15:0c:14:
6a:26:8a:e9:80:a4:e9:93:cd:10:8e:8e:b9:a0:a1:
79:3f:0f:70:c2:8f:d8:5c:d3:08:19:61:71:fb:f4:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:DA:D8:4D:7A:C0:2D:8D:DB:58:3B:3B:BE:D7:25:C3:12:AF:90
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:6e:48:ac:16:ef:88:e9:fd:ef:99:04:14:39:a9:c0:df:
81:07:80:2b:19:d0:f9:cb:98:14:bc:07:d1:50:bb:11:73:0e:
4d:a5:11:99:ad:b8:50:2e:ab:f5:ac:75:6d:2e:ad:8d:ff:ca:
81:6d:37:8f:49:e6:50:c2:16:42:b9:dc:99:12:4b:43:84:43:
2b:16:47:c7:5f:ec:91:ca:2a:ef:49:8f:07:0c:9e:f6:a0:a2:
31:ab:90:0b:47:b4:f9:f9:2f:61:42:75:7f:78:12:3c:85:24:
0b:02:66:5f:cb:6d:43:25:9a:3d:3d:b1:02:bd:92:6c:29:4c:
4f:68:29:19:7f:7f:1b:5d:81:e2:05:e4:66:32:e6:f2:46:65:
f3:7b:00:42:d2:39:73:50:f5:6c:e4:9e:8e:70:ab:5a:0c:c7:
01:35:c3:29:8e:cf:89:93:66:45:9c:6f:6c:38:07:05:fc:b0:
b2:c3:8a:ce:bb:41:ce:e1:2c:c3:55:d6:ed:a0:c4:d5:be:03:
73:94:2b:a1:e0:8e:81:90:f3:c2:c9:db:be:9a:4b:96:f4:76:
b0:68:7b:72:60:e3:56:a2:0a:0d:da:b3:58:94:e9:b1:ba:9f:
c4:b1:e1:b5:8c:ea:38:95:26:e2:75:11:43:44:4d:97:0a:48:
fd:91:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:54 2025 by rpki-client