Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: 2a9dmB1/gQGJ3H61NTB7aAqjePZuwB+WgRud5PF8Cbg=
Subject key identifier: 58:EB:32:5B:00:3A:C4:74:19:98:E6:B9:A2:03:9A:2D:16:D8:4D:B1
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 0198D515EC4F8DF6238008235DBA4BCF7951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0D8E
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: 95yWyBiFvcNQ9RmV0GCK9iMMUWugkroaBzgOupbStus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ec:4f:8d:f6:23:80:08:23:5d:ba:4b:cf:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=58eb325b003ac4741998e6b9a2039a2d16d84db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:57:48:ef:b8:a6:14:a0:ca:77:04:dd:3d:
cd:62:94:73:dc:ca:44:0e:39:f0:7d:20:4d:6b:75:
1c:8d:d9:a3:b4:53:76:63:11:4a:da:2d:c7:fa:13:
09:21:c2:fa:5f:8d:2b:2b:9b:78:bb:16:fe:cf:bf:
86:1b:8b:ad:21:42:d4:26:0c:67:62:80:d1:4d:8b:
bb:7f:52:b3:26:10:13:34:e1:05:8b:f4:9a:31:32:
57:9f:09:70:14:54:13:3d:8e:c1:8d:08:04:5e:7f:
4a:f5:db:b1:1b:b1:38:3b:31:bf:6e:ef:45:95:b3:
6c:2c:36:13:90:16:bf:9e:ee:ec:a4:30:29:47:6f:
b7:15:08:c7:7f:22:78:bc:e8:90:44:20:47:78:ab:
bd:97:d2:2d:f2:04:bb:ae:3e:77:8a:28:20:a3:cf:
95:05:d4:40:3f:91:1e:3a:d1:95:13:80:48:94:51:
40:eb:17:51:b0:d3:93:80:d0:24:96:4c:e1:90:9e:
7f:6c:30:1d:da:f9:3e:96:0c:74:f3:b2:53:71:3f:
1e:a5:a9:df:29:0c:0a:0d:13:14:f5:ee:f4:15:f9:
c3:b1:09:9b:b2:7a:95:61:17:38:02:23:c9:20:14:
4c:d4:5d:d4:f9:44:89:18:50:d1:c7:cc:71:74:b1:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:32:5B:00:3A:C4:74:19:98:E6:B9:A2:03:9A:2D:16:D8:4D:B1
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:32:ab:2f:54:03:75:6b:36:d3:44:5c:83:42:48:82:2d:10:
98:fd:db:54:81:36:88:e5:6f:c7:a7:8c:22:a3:15:ec:d4:07:
70:4e:4c:b0:4d:21:22:af:33:c6:8d:91:38:52:f5:ef:a9:f9:
9f:6d:a6:1f:dd:d1:61:65:1d:28:53:d0:96:37:4e:86:1a:c2:
5b:58:8f:25:dc:01:35:cf:60:09:3f:37:7e:5c:55:a4:74:f0:
38:e6:b7:76:fd:6b:ac:de:96:97:d5:8f:11:13:bf:68:cc:92:
77:5f:d0:14:bd:97:b0:f8:a8:e4:03:7a:8a:e7:c2:31:17:f8:
45:30:ac:07:82:17:76:85:50:5c:6d:32:cf:17:5b:b1:e1:2f:
da:9b:fe:08:a7:20:de:4c:b8:73:1e:9b:b0:78:c3:f3:39:0d:
33:c1:31:65:e6:40:4f:de:77:71:b4:17:81:6e:ee:73:6b:fa:
50:8d:32:67:77:77:00:5a:dc:d9:04:03:27:78:d6:30:06:6c:
be:d9:e6:07:c2:8d:98:ba:f3:34:5b:b7:f9:7a:2f:ab:46:fa:
36:3e:16:73:71:63:c5:26:75:b4:86:e1:a7:20:4e:69:d4:63:
fa:65:ef:2a:33:fd:82:a5:82:7f:6d:3f:d0:91:65:7f:c8:12:
35:e9:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:10 2025 by rpki-client