Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: QAzqUmZFyqYaaTex15rwhE9al/4dyX2XGIFywVwmUCw=
Subject key identifier: 4A:01:ED:B9:EA:01:67:60:AF:07:F9:C3:B1:67:A4:0C:00:CA:8E:E3
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 0198D4A79BC022AC09B1D99E7D3B1DE91CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: w4IhwJVnSvTEGIHjqThkHl6PQ7VckDJUNkPMCHcVvuY=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9b:c0:22:ac:09:b1:d9:9e:7d:3b:1d:e9:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=4a01edb9ea016760af07f9c3b167a40c00ca8ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:47:7c:29:73:9f:b5:65:1d:d7:ce:39:2a:
03:02:c0:c7:e7:c0:d5:b5:3a:8f:bb:e4:e3:fa:0b:
00:be:61:76:82:d6:6d:69:36:31:d8:5d:de:e5:e5:
e5:71:7c:69:b7:db:bf:a0:56:f2:a6:2f:e0:47:71:
d2:e2:08:5c:f3:5a:f3:c1:8a:5e:95:e1:3d:13:71:
df:8d:39:0a:3b:d9:05:ca:f6:74:b3:73:5a:05:ed:
70:c8:4c:eb:c2:40:13:ec:e8:79:85:91:d3:fe:34:
46:50:b6:c2:81:8c:cc:1c:f9:6c:42:a0:0a:fb:de:
d4:cb:9d:46:df:e9:72:3d:4c:53:ad:87:dd:28:30:
f1:27:36:83:48:68:fc:14:55:a0:36:87:df:0a:62:
56:0e:b5:09:52:dd:2a:13:35:d3:c1:44:15:92:4a:
58:12:b2:c4:f0:a1:ac:73:87:48:04:f8:36:4d:9b:
89:b7:9b:7e:a6:6e:8c:38:12:a7:ab:44:17:35:cc:
6e:92:49:cb:51:7a:34:e7:66:05:bc:3c:7a:71:8b:
f5:d3:49:4d:62:eb:6e:85:5f:a2:8c:52:4c:f3:66:
9f:47:18:98:1b:26:c0:f0:26:62:a9:86:c4:77:56:
a0:3a:db:eb:56:50:e6:f9:ae:cf:b0:6b:5b:a4:08:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:01:ED:B9:EA:01:67:60:AF:07:F9:C3:B1:67:A4:0C:00:CA:8E:E3
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:cc:37:c0:34:c1:11:7b:83:d2:f7:90:de:b2:9b:51:6b:
3b:8a:42:63:98:3f:6f:a3:04:7b:b5:3c:5d:9a:a1:96:9f:ca:
b9:b3:70:a2:08:79:de:b8:5c:4d:e4:62:cd:88:19:23:3f:74:
15:6d:98:c8:2d:b3:7c:6f:8c:56:2d:1c:24:52:8b:9b:eb:be:
03:c6:a6:e9:54:a6:38:06:95:d6:6e:ea:4c:9d:19:25:ba:1c:
2d:0b:76:34:0b:15:02:b3:52:a8:ec:3f:31:de:d3:2b:8e:d6:
92:f4:f1:cf:8f:a5:ff:58:33:d6:4f:58:13:f1:a3:0d:a4:8a:
84:5f:fd:74:a2:c6:f1:ac:67:62:79:4d:37:82:e8:62:d7:b8:
2c:be:8b:fe:e3:a6:ce:32:cb:91:e7:ef:89:85:fc:8b:51:15:
51:c6:54:33:05:f7:57:5d:ac:c6:82:ce:41:04:a2:e5:11:ca:
b7:7c:14:5f:37:a0:83:0b:ae:28:32:18:55:1c:3d:20:30:bd:
93:cf:0a:5f:9a:3c:68:24:3c:1c:01:71:d4:64:bf:af:c5:9b:
7e:05:06:13:ba:22:fe:a3:5e:61:1b:c2:b8:78:96:4e:32:e4:
91:80:c1:16:ae:09:7a:ad:62:36:dc:ff:13:a7:39:42:82:6e:
77:ed:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:52 2025 by rpki-client