Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: Vhdm6OKlweCjf2PjBppFf/R9LFcxDcU39/9+FXNu+Fg=
Subject key identifier: AE:65:0D:85:D1:78:C2:38:E5:08:67:7E:AE:F7:EA:26:18:AA:DB:F5
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 01984475B051283EFAB10D2DB276A6C251D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0209
Signing time: Sat 26 Jul 2025 02:00:20 +0000
Manifest this update: Sat 26 Jul 2025 02:00:20 +0000
Manifest next update: Sun 27 Jul 2025 02:00:20 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: wltwSqWB4oPgG7xuVf6ARl6g0/B8uxNNJLdRpKqXffY=)
2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:b0:51:28:3e:fa:b1:0d:2d:b2:76:a6:c2:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Jul 26 02:00:20 2025 GMT
Not After : Jul 27 02:00:20 2025 GMT
Subject: CN=ae650d85d178c238e508677eaef7ea2618aadbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:d5:b8:e3:d2:c3:2b:32:6a:ea:09:d6:a7:
0b:1f:3e:e8:71:c5:6f:ac:c1:cc:3c:f8:22:54:ae:
ab:ff:e5:8a:9a:71:52:d7:1d:97:ed:ac:d2:5b:0a:
ae:8d:21:f5:b4:9f:69:1c:29:86:72:de:a5:c5:7d:
31:c0:f8:d8:a3:ed:6f:08:82:ad:c8:29:6d:61:58:
28:e7:17:7f:70:b0:32:61:65:b6:38:9d:15:ca:aa:
e2:9e:55:0d:c6:d7:b6:cb:fd:e4:a8:44:1d:cd:58:
55:4d:15:b2:76:01:e5:97:e0:87:6f:28:13:49:03:
ad:4a:a1:20:6a:40:10:ad:bc:7a:fe:1d:5d:d3:dd:
35:8f:65:c5:b3:19:03:18:ee:91:e8:a5:f7:8d:db:
c7:34:db:68:49:67:e6:b8:b5:3e:74:91:9a:b5:87:
cc:20:f7:bc:59:c4:4d:eb:1b:01:34:12:7b:5c:48:
90:68:53:15:ab:bd:a1:c2:18:d4:f3:0f:6f:ab:3c:
1e:17:4c:7a:d0:93:b5:15:53:2d:7f:d3:88:ab:2b:
a6:16:5a:b7:eb:0a:e8:12:7c:d6:e3:ef:8e:8f:ae:
95:e1:92:e6:fb:a6:9a:d0:f8:9e:10:f7:14:ab:bd:
f4:b7:6b:61:c7:f0:bb:fa:0e:6c:83:95:fe:2b:5a:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:0D:85:D1:78:C2:38:E5:08:67:7E:AE:F7:EA:26:18:AA:DB:F5
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d2:35:7a:58:a4:f5:cc:de:40:88:e3:6b:2a:3e:c8:8e:0a:
f8:86:90:56:16:68:b0:26:a8:63:a0:2d:59:6d:07:cd:93:f1:
c3:8b:63:07:d2:29:8f:d1:45:cd:b5:d1:33:c7:64:9c:fc:0c:
31:bc:c1:cf:9a:b4:b1:4c:40:12:a1:df:93:a7:ea:f9:37:d4:
ef:56:a9:cf:3d:77:19:49:20:f7:db:0d:86:38:b1:23:ca:94:
78:25:d9:8c:b9:1e:fe:d8:d4:bf:f2:86:4b:62:63:e1:14:ed:
19:6c:c8:82:f9:12:0f:44:c2:d2:2e:27:81:b8:49:40:64:53:
f9:62:b2:43:67:bd:03:1f:17:d7:7d:bb:64:4b:74:67:db:df:
21:78:75:b3:1c:f9:62:ab:2d:b9:fe:1c:0b:c6:a2:d5:b7:03:
17:da:a1:31:39:16:d0:b7:9c:43:d9:9b:98:88:e2:f2:09:f5:
02:df:95:0c:5a:0c:9c:fb:f4:d7:13:9e:2e:6f:20:cd:6b:1a:
79:97:fe:26:76:e7:b2:84:46:f1:e7:ef:35:78:92:17:91:1f:
53:41:19:68:65:38:c1:0b:04:f1:55:f6:05:98:50:0f:92:84:
a7:35:44:a1:ea:55:6e:c5:c5:2b:90:7b:5d:d2:cd:a4:94:27:
b6:37:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:10:52 2025 by rpki-client