Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: WjwpuBI4/WQ1Ty5561WiAxol4I3ea4F2XuUq9dUQBiI=
Subject key identifier: 81:F5:D1:15:5F:4C:27:FE:04:C7:5B:A0:1F:B3:E8:45:98:F5:A8:7F
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 019848C0EBDA4ECC2C4DB9DB6BDB225B6F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0AA8
Signing time: Sat 26 Jul 2025 22:00:59 +0000
Manifest this update: Sat 26 Jul 2025 22:00:59 +0000
Manifest next update: Sun 27 Jul 2025 22:00:59 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 1ZKtPMOv6JHimOKs+aNc6ULPMjYyPFbEc2LXjFqroNA=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:eb:da:4e:cc:2c:4d:b9:db:6b:db:22:5b:6f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jul 26 22:00:59 2025 GMT
Not After : Jul 27 22:00:59 2025 GMT
Subject: CN=81f5d1155f4c27fe04c75ba01fb3e84598f5a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ab:9f:c0:08:75:f0:ca:2d:2c:0f:06:9a:a2:
41:81:c9:11:a8:5b:ed:2e:af:73:9a:73:f7:e4:39:
66:61:5e:12:98:db:6f:90:5a:ba:9e:9e:0d:e6:37:
1a:b0:be:d6:9f:5a:63:10:f4:1e:75:f3:d1:92:de:
45:ab:2e:f6:61:76:c6:6a:8b:bf:c2:32:6c:b9:9b:
2e:4d:93:b9:01:03:0d:20:b5:55:cd:c5:50:c2:53:
93:6d:c8:31:9f:c4:a0:59:4e:f4:54:9b:4a:b7:bf:
42:f5:83:94:88:38:70:c5:7d:10:b4:53:37:2e:c4:
92:7a:a2:f6:bb:23:8a:f6:1f:af:0e:2f:6e:f4:f7:
ea:55:63:72:f2:17:be:52:e3:4e:e7:09:4e:1b:ea:
c2:16:b5:25:a2:fc:65:4a:4a:44:79:84:35:f0:5b:
98:3a:e5:76:c1:69:04:a5:3a:a1:b8:8a:8f:bc:a1:
9b:c8:cd:23:ff:1c:1e:fd:a9:29:61:97:32:ed:0e:
9c:79:12:dc:54:f2:7e:68:bb:52:79:fa:c6:9d:64:
45:35:46:b7:cc:f9:0e:6c:4b:5f:51:2e:a3:d1:4d:
42:43:b8:da:85:10:78:16:ea:68:f4:c0:21:9b:24:
1a:cd:45:ce:bd:df:fb:9c:7f:80:b0:b8:91:13:73:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:D1:15:5F:4C:27:FE:04:C7:5B:A0:1F:B3:E8:45:98:F5:A8:7F
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8c:be:6d:63:d8:f5:08:71:82:a1:41:2e:1c:0c:ee:3a:e8:
c9:f2:b3:fd:7f:bf:5d:3b:d9:93:49:3d:aa:ff:b7:c1:d9:80:
5f:93:2a:ec:a7:f7:29:cf:d1:8e:4d:c1:8a:1c:bb:30:3c:b4:
49:02:51:36:b5:b2:d3:85:0b:f7:d3:47:c5:4a:ce:22:cf:2c:
aa:82:fa:31:eb:34:90:12:e4:c5:c1:17:11:c4:44:64:61:c8:
fc:0c:8c:d6:cc:d3:ff:f9:ea:59:0e:b6:da:36:f9:05:2a:12:
4d:e4:a6:1f:7f:a5:cf:0f:e5:e7:cd:c7:1d:7a:c4:dc:3c:fa:
08:7c:d0:e2:f7:eb:d5:3f:9e:19:0c:26:1c:33:c5:7c:ef:bf:
68:ad:11:59:6e:4b:99:2b:33:28:5c:5d:bc:f0:31:3b:7d:3e:
7e:54:3c:36:a0:59:50:12:ee:6b:4a:9f:02:94:8d:aa:31:51:
2f:d0:36:a0:ad:60:81:3c:b8:1e:a5:91:b3:b1:92:9f:40:11:
49:4b:3c:88:cd:c1:28:34:a9:d8:38:94:d4:24:00:48:41:76:
d9:4d:f4:d7:1a:8e:ea:fa:54:b8:56:45:b8:84:5a:47:26:ce:
15:be:49:2b:df:30:58:ad:f3:78:5b:1a:b1:97:3b:fb:1f:68:
fc:a9:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:12 2025 by rpki-client