Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: wjaonLJ9GKNGTFEh/oPneCy+oqSweKJUd9Tx/arREtM=
Subject key identifier: 77:72:A7:2F:BD:32:D2:2F:46:4A:9A:61:62:F9:3B:83:FA:6E:D7:6D
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 0198481B9545E1D5F679F39DA979FA25B731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 19:00:23 +0000
Manifest this update: Sat 26 Jul 2025 19:00:23 +0000
Manifest next update: Sun 27 Jul 2025 19:00:23 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: JAgEFaZ2PF7bXSUFHDy4xrexXC/p5uwi9jSQnD9Mh7c=)
2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:95:45:e1:d5:f6:79:f3:9d:a9:79:fa:25:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Jul 26 19:00:23 2025 GMT
Not After : Jul 27 19:00:23 2025 GMT
Subject: CN=7772a72fbd32d22f464a9a6162f93b83fa6ed76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:1c:80:1a:25:96:32:04:74:c0:d6:7c:dd:
a9:4f:34:a1:21:9e:6d:78:56:9f:82:19:54:ca:ea:
f1:f4:df:53:f9:5a:6c:2d:ca:3e:9f:73:f9:39:9c:
2b:8f:b9:6d:4a:b9:d9:ff:11:fd:71:aa:c2:86:b7:
38:99:61:62:1f:b7:5f:05:31:0b:99:80:14:80:88:
b6:97:da:8d:df:52:a9:43:d4:f5:c1:30:1a:d6:5e:
da:64:35:a8:d9:6e:3f:90:4b:34:82:75:60:c8:1b:
8e:27:61:d8:8f:c4:6f:1c:b7:95:2d:93:78:85:16:
de:a5:8c:a3:ee:bc:38:80:b6:d7:d7:46:01:33:0c:
98:db:3b:8d:22:f1:95:4f:5f:04:f6:d1:a1:75:b2:
ce:8e:9a:f8:0f:83:20:4e:ae:54:88:a7:1a:f7:a8:
8b:3b:f7:ef:cc:d4:d5:6d:b2:0d:b4:fe:43:2f:9e:
23:f9:58:84:86:fb:1c:62:c4:11:04:5c:80:f8:7a:
71:28:a8:85:b9:67:9f:7e:c0:56:08:66:5a:ec:19:
54:7b:f3:0d:73:78:2d:81:a0:55:c5:cf:39:59:b9:
12:51:78:5f:2f:38:cd:ff:c0:ea:a7:93:ae:01:72:
5f:3f:74:1d:4e:bc:08:9d:41:ec:93:97:00:3a:51:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:A7:2F:BD:32:D2:2F:46:4A:9A:61:62:F9:3B:83:FA:6E:D7:6D
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c4:ca:b4:ab:c8:7e:f1:dd:ca:21:8c:ae:ef:91:eb:a0:17:
8e:a1:15:5b:1c:1d:3b:0a:c8:00:3a:4f:35:73:a9:85:2a:02:
fd:f8:f5:ce:5a:3a:89:4d:f7:4a:cc:9f:de:d3:ef:e0:0f:92:
20:63:c8:3b:27:49:66:04:85:a2:a9:03:03:f0:ad:c1:8e:ff:
fe:16:05:e2:83:b5:13:8b:ed:e8:98:80:4e:87:d1:b9:f9:e2:
d5:61:b2:30:91:91:e1:19:52:af:7a:06:0d:ec:de:8e:42:17:
98:5a:5a:a2:42:1d:f4:04:5c:9c:c6:5f:fe:df:80:2a:a6:39:
00:6b:1a:ac:08:2b:3c:3f:a9:19:66:c8:54:ba:a8:9c:cf:15:
8e:93:49:57:a6:ef:79:1a:ae:d0:67:a0:06:12:84:1d:ac:b0:
03:bb:1a:5c:ff:bb:da:d6:31:17:12:c2:41:97:2e:bf:45:ba:
5f:58:ff:86:67:e6:55:56:2a:49:2e:e0:9d:9b:d7:18:b1:b8:
dd:5d:e3:5d:b0:6e:96:a1:09:4e:15:5e:a4:c3:84:69:e6:52:
3b:20:56:ab:a6:22:79:75:05:61:37:24:3b:9f:ce:81:cf:6d:
9b:60:5a:ab:7b:33:f4:b3:3c:fe:77:c1:87:84:28:c3:6d:88:
81:7c:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:45 2025 by rpki-client