Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: vv4VTDkL/IKpuJC5qlfSqeiyTrBz/dcEU62m0eBE8Pg=
Subject key identifier: 17:18:E5:5B:46:17:CF:43:8C:1A:A0:86:07:A5:4A:37:A7:78:8A:08
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 0198410724A41C59101F2E3D18B15E28FE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 10:00:43 +0000
Manifest this update: Fri 25 Jul 2025 10:00:43 +0000
Manifest next update: Sat 26 Jul 2025 10:00:43 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: wKIS+2nAwnnUuss4KU6Svt/inPZ6JUFSXIzBiouEkBs=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:07:24:a4:1c:59:10:1f:2e:3d:18:b1:5e:28:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Jul 25 10:00:43 2025 GMT
Not After : Jul 26 10:00:43 2025 GMT
Subject: CN=1718e55b4617cf438c1aa08607a54a37a7788a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:71:89:07:7d:18:ba:a1:60:87:98:54:3d:
c9:a0:57:9f:b3:2f:a4:02:2e:e2:f4:69:a7:16:19:
a9:b3:d8:9a:5c:c9:e9:93:0f:0f:b8:6f:33:0d:73:
6d:d4:91:5c:7d:1e:33:e8:08:11:3b:b6:6f:84:11:
d1:d5:6e:ba:56:de:17:c1:ac:52:0d:76:8f:78:25:
01:70:5f:e0:06:2d:c8:97:51:0c:df:28:3b:c1:de:
83:3e:db:d2:f1:3a:d3:5a:bb:48:d5:36:89:9e:f4:
f5:85:21:6d:6f:68:56:71:14:3c:15:44:c7:e4:28:
c6:2b:1f:5f:6d:f6:52:7e:bc:e5:e2:b5:6e:60:4b:
3b:34:f3:82:13:04:c9:2a:68:0b:15:bd:69:73:0d:
68:04:6d:48:00:77:2f:69:af:9f:9e:f8:b0:36:1d:
1d:76:f2:21:f3:c4:42:fa:19:82:c1:e3:7e:bf:99:
43:aa:34:5a:27:ed:0c:6c:89:2c:be:dd:1b:46:70:
0f:47:2c:6e:d6:ac:fa:65:5a:4a:82:7e:3d:bd:d4:
40:39:e1:98:98:8b:6f:9c:64:36:c0:73:71:e3:04:
e5:32:b9:cf:e0:0e:0c:6f:79:bb:04:da:38:de:97:
a3:e6:9f:20:1a:b4:cb:14:92:cf:eb:4c:66:a3:9f:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:E5:5B:46:17:CF:43:8C:1A:A0:86:07:A5:4A:37:A7:78:8A:08
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b6:30:93:74:20:f6:d8:2b:13:61:7f:6f:94:44:56:50:5f:
37:2a:a5:cb:89:3b:5e:1e:7e:77:47:24:dc:1e:2b:43:72:58:
b8:b5:46:8d:0d:a2:0a:51:fe:3e:1a:62:96:d6:a4:2e:99:42:
89:d0:1a:41:ff:68:5a:b9:93:cd:0d:b0:9e:50:2d:5c:45:3e:
39:11:a2:c0:8d:e3:96:3c:a1:31:92:8e:ee:b2:78:c7:0d:2b:
1a:8e:20:d3:1b:df:2e:08:4e:45:42:0d:f4:14:a4:a6:c7:9c:
9a:9d:ec:3e:a4:42:41:07:03:ca:92:2d:d9:e1:ca:65:d7:5b:
48:74:fe:53:5c:b6:51:50:77:80:2b:9f:66:42:95:29:c0:9c:
e3:f2:00:48:b4:17:b8:b7:c6:b8:63:40:1f:11:c1:68:49:1e:
9b:ef:f6:16:96:4d:76:ef:64:5d:81:f2:8a:c9:c1:46:d7:76:
74:6e:1d:3d:13:ff:6b:60:d0:c9:30:cb:b9:1d:0e:25:cb:d2:
74:25:a7:e7:65:a2:be:b8:17:0e:f3:84:77:13:fe:9e:e1:d9:
87:47:df:36:5e:93:b5:0c:36:96:5b:b9:d2:da:95:ed:4d:b5:
de:58:bb:29:b8:fd:26:c8:e2:4d:bf:94:3b:98:19:40:22:15:
3d:5d:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:21:12 2025 by rpki-client