Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: pNYK63Py7jSJcaAxTn/9W4HB/PuKs51ZM58n2D/Cgow=
Subject key identifier: FC:AB:C9:58:DF:F2:28:F3:A0:87:87:93:24:64:6B:07:03:AC:B7:3C
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019848C0DCA6B3734177E5EC5295CC92D3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:55 +0000
Manifest this update: Sat 26 Jul 2025 22:00:55 +0000
Manifest next update: Sun 27 Jul 2025 22:00:55 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: 1fu74mzhp+XsmClj5ej89V1zvPzsMrGiPRa5dhyPwaE=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:dc:a6:b3:73:41:77:e5:ec:52:95:cc:92:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jul 26 22:00:55 2025 GMT
Not After : Jul 27 22:00:55 2025 GMT
Subject: CN=fcabc958dff228f3a087879324646b0703acb73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:0b:c9:8e:f9:8a:72:58:63:df:04:0b:d1:
85:55:75:f7:64:e6:bf:ea:9d:e3:7a:b0:cf:6e:77:
28:70:78:10:52:86:9b:c4:5b:82:23:29:2d:7b:a0:
d6:d1:2f:28:8a:f7:79:9d:65:c8:05:f3:64:b1:e0:
12:37:dc:6b:b5:ba:2a:79:44:7e:ab:df:b4:0b:78:
1b:e9:97:47:78:ec:31:69:51:bd:5a:b2:e8:f2:74:
77:44:06:93:88:5e:d1:0b:d3:03:31:ed:00:8f:e4:
48:14:69:6d:2b:92:13:12:13:2f:70:10:34:ea:2d:
40:ca:73:a5:88:22:91:be:bc:45:65:db:1b:52:7f:
30:bb:04:2f:c3:21:cf:87:63:4d:50:15:f0:57:51:
0e:e7:43:d6:c8:cb:40:aa:56:f6:06:02:e0:7d:c0:
80:37:21:eb:75:50:00:db:cf:f0:a8:25:04:19:89:
11:0a:14:1b:7e:91:f4:ac:5b:ca:34:99:fc:7a:c1:
b1:ce:dc:d8:da:fe:1c:d3:dd:23:3a:59:9b:a2:a8:
51:50:e5:7d:ce:98:ce:d2:12:5a:ff:ae:4c:d3:10:
21:1c:2d:88:b4:c4:1c:bb:ea:2c:f1:fd:a9:1f:e0:
ff:2b:e9:b1:5e:93:ef:da:71:a3:cb:4d:ae:f1:48:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:C9:58:DF:F2:28:F3:A0:87:87:93:24:64:6B:07:03:AC:B7:3C
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:58:c5:65:bd:ef:8a:a2:0b:65:28:c3:e6:ed:2d:1b:3c:b1:
f2:fb:91:85:d1:c9:44:39:17:cf:75:b0:4d:b3:3e:e6:d6:df:
9c:a1:28:67:c0:04:6e:fd:ff:10:f1:bf:a8:96:68:5f:91:95:
70:8a:33:91:39:20:c2:43:2b:68:cd:b5:de:35:13:0f:4c:52:
51:5a:41:c9:42:93:9a:b9:ae:48:2c:fa:ea:30:21:72:72:d0:
c3:c0:26:75:04:5a:0c:0d:ca:29:93:b7:a7:33:53:97:6e:c5:
7b:2d:97:fe:17:bf:b7:85:33:55:ed:5c:cb:e8:fc:61:fa:2d:
10:17:c2:6a:dd:5d:d2:e1:55:80:60:08:3a:b8:87:c3:41:28:
03:1f:45:52:16:88:89:c4:e6:99:fa:d8:69:4e:77:ce:d5:2f:
56:12:86:75:e8:7f:19:fa:17:4e:43:7e:5a:c6:38:80:f7:08:
6e:39:b9:dd:36:8b:22:5c:ed:1f:73:34:34:ca:f8:ce:7b:de:
35:f3:13:b4:86:26:9e:7c:b3:7b:00:fe:cb:f1:9a:45:b4:7e:
8e:e9:04:61:3c:b2:a8:4d:81:39:26:7f:32:21:35:5d:ec:b9:
5f:fb:fd:fd:30:bd:2c:59:1c:78:76:52:0c:58:39:4b:6f:99:
4a:7d:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:58 2025 by rpki-client