Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier: k+tUf7TnCus5ZJxuihapP+KyP57opxV5rmCIIiKm2KI=
Subject key identifier: B6:A8:7C:DB:92:0C:E6:53:BE:C9:D3:12:44:8F:EF:07:97:2C:16:79
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 0198469AFCA77E8BDDF263B368A37D295D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number: 0699
Signing time: Sat 26 Jul 2025 12:00:18 +0000
Manifest this update: Sat 26 Jul 2025 12:00:18 +0000
Manifest next update: Sun 27 Jul 2025 12:00:18 +0000
Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: 0bJutlOf6enkGwxR17lF05GoEayhDC1jzAsNzdRD5iY=)
2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:fc:a7:7e:8b:dd:f2:63:b3:68:a3:7d:29:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: Jul 26 12:00:18 2025 GMT
Not After : Jul 27 12:00:18 2025 GMT
Subject: CN=b6a87cdb920ce653bec9d312448fef07972c1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:e9:9b:26:1d:00:0c:29:42:5c:5f:64:0e:
f9:f3:33:17:62:3b:b4:7f:9f:12:f3:4d:14:91:4b:
74:85:6e:3a:0f:34:08:d1:59:86:ba:d2:4f:81:c8:
a7:41:7f:c9:74:b1:a7:8d:57:fe:a8:c7:a0:a9:92:
03:fc:51:45:dc:bf:75:4a:b2:a3:ba:de:a9:f2:f1:
c9:ad:1b:10:0d:05:6f:ba:61:20:84:1d:0f:3b:c7:
52:29:12:04:06:7e:89:ff:dd:75:5a:5c:2a:58:61:
6f:84:f1:3d:36:ce:af:78:38:d2:6d:44:95:25:5b:
e5:9a:b5:3c:77:34:2b:77:0a:55:26:7d:6b:c7:8c:
10:5a:fb:4a:07:4a:76:4d:96:6f:b8:d9:e9:e7:1f:
e8:a7:d6:53:13:a0:06:46:2b:2a:5a:e0:f0:2e:50:
d3:9b:3f:06:10:f8:a4:ab:0a:91:a0:60:9e:cc:a1:
54:e6:5c:e6:ca:c1:02:fb:cc:0d:51:92:3c:9e:73:
1c:ad:34:f4:45:b2:4d:b7:7e:3b:99:b7:7f:b5:b0:
17:1c:b6:61:bd:5e:e2:f7:b6:f6:f0:0c:7f:f1:ee:
17:13:de:51:74:40:6e:2d:6d:c3:ad:21:f4:2d:f1:
39:f0:67:7e:cd:52:30:3d:c0:c3:44:50:dd:f7:55:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:7C:DB:92:0C:E6:53:BE:C9:D3:12:44:8F:EF:07:97:2C:16:79
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:15:41:91:a1:71:d7:0d:ff:9a:37:de:69:8b:b3:28:13:24:
fa:01:2c:8c:fb:b6:81:f2:43:11:17:cb:40:26:6b:8c:89:09:
6b:6e:b2:da:79:84:ee:78:cc:58:c6:47:65:81:36:c2:0b:ce:
98:f4:fb:1f:14:1a:af:cf:2f:e2:01:65:b5:16:1b:09:4e:41:
bc:f5:00:ca:fe:47:94:d1:99:d2:48:69:b7:5a:f4:ea:d3:43:
1b:c5:0b:88:65:14:14:1a:5e:32:25:94:1d:cf:97:2d:e4:44:
b9:2c:b9:49:c5:b9:32:b0:23:7c:8e:bd:12:48:13:fa:80:de:
7a:2d:e3:d6:ec:49:bd:16:b4:10:e8:a9:1d:6d:a6:ba:a9:7b:
d9:b8:b4:ca:c3:99:70:ec:af:ff:86:52:07:7f:6b:57:b6:77:
e0:c9:f9:d2:b4:55:0b:a6:55:28:6e:e0:7d:57:c0:3b:08:a7:
88:94:ff:fd:5f:03:80:30:55:7f:f6:be:69:b8:25:cc:43:b0:
22:a0:63:9d:ee:0b:0e:0c:a9:2d:74:e8:bf:99:5d:3a:1c:c2:
e2:d9:3c:04:cc:08:e7:e7:28:d5:33:f1:0a:9e:cb:37:3e:1d:
94:91:77:67:e4:7b:d1:6a:8f:7e:f5:fd:26:f1:e1:90:af:c0:
9c:73:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:06:53 2025 by rpki-client