Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
File: 2J8W9XSSQzePgUyUskA010s5J98.mft (raw, json)
Hash identifier: y+7cQmZNahcU9WjTzpBkIfGFLx/y/B1npuyqGXw5lUg=
Subject key identifier: EC:43:54:83:CF:1F:C0:38:17:36:52:D9:01:DC:4B:82:7D:5D:18:9C
Authority key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
Certificate issuer: /CN=d89f16f5749243378f814c94b24034d74b3927df
Certificate serial: 0198556961CD6B1DA4F90E82AD491FE729DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
Manifest number: 02B5
Signing time: Tue 29 Jul 2025 09:00:26 +0000
Manifest this update: Tue 29 Jul 2025 09:00:26 +0000
Manifest next update: Wed 30 Jul 2025 09:00:26 +0000
Files and hashes: 1: 2J8W9XSSQzePgUyUskA010s5J98.crl (hash: XQ8+V262NNxTxctUpUgY6wIwYukqodAbZAiCGGVSjaw=)
2: S9_pIBHq75Wq7oGW-jAli5gxMaE.roa (hash: cpq5fUvjVAhKKLO06wh9HRGgk0x/xpun3Cli9g36l8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:61:cd:6b:1d:a4:f9:0e:82:ad:49:1f:e7:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f16f5749243378f814c94b24034d74b3927df
Validity
Not Before: Jul 29 09:00:26 2025 GMT
Not After : Jul 30 09:00:26 2025 GMT
Subject: CN=ec435483cf1fc038173652d901dc4b827d5d189c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:b7:26:97:29:32:e6:3d:86:57:65:3d:5d:
91:e0:ba:c3:9b:82:9c:8c:65:4d:9f:14:41:43:1b:
37:7f:98:ee:d9:90:1e:73:3f:b4:f0:bc:b6:9b:79:
57:cf:7e:3d:fb:4f:22:37:e8:81:7a:04:ab:e2:fe:
6e:37:af:7f:c0:17:48:0e:11:e5:9a:dc:67:8f:21:
50:ea:ca:a5:8e:74:d5:84:9c:88:5b:92:54:84:e1:
c5:2b:ac:72:43:ca:78:3f:4e:0b:6e:2f:ca:a8:c6:
9e:28:10:3f:6a:09:72:91:37:68:42:e3:9a:f8:c0:
a8:c3:8b:b5:9c:49:69:14:a3:e4:ff:ec:73:3f:a7:
5a:2b:3f:d7:ed:28:c8:7f:69:78:14:69:85:ee:fd:
d4:90:ea:8c:f7:b7:24:68:22:1f:ac:4b:64:aa:b9:
07:43:45:04:1a:ed:91:46:d4:bc:41:13:29:cf:d1:
e8:19:ea:9c:d2:23:b1:86:a4:be:e7:bb:1c:08:32:
fd:9d:7a:a0:a0:f4:8d:69:13:ab:ad:88:67:29:ae:
ec:aa:d3:a9:e2:f2:72:1d:c1:3a:92:f3:2e:b7:cf:
84:bd:55:d3:cf:76:13:cd:1e:f3:08:bc:27:4e:c8:
1e:8f:2a:d8:0d:8e:0e:d4:dc:db:3e:65:7a:10:02:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:54:83:CF:1F:C0:38:17:36:52:D9:01:DC:4B:82:7D:5D:18:9C
X509v3 Authority Key Identifier:
keyid:D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bb:7b:2a:77:f8:1f:11:e7:bd:2e:08:09:68:1d:7d:9c:cd:
82:a4:53:da:74:75:94:58:5f:25:c3:98:6a:e4:43:a7:94:7b:
76:b3:c3:d9:01:27:e3:11:c5:fd:ea:dd:50:52:18:62:1d:6d:
8b:96:e7:39:b6:c9:33:07:b9:90:44:f9:81:5d:4e:b7:80:53:
1c:38:33:07:ee:42:72:1c:b0:9f:97:07:c1:d8:29:8a:25:af:
8f:00:49:47:cc:50:75:4a:65:dc:ee:5c:16:f5:fa:ea:e5:bd:
0d:ce:48:41:dc:78:d9:3b:32:16:35:b1:25:a8:ff:f0:c7:b3:
fd:77:0d:84:a8:63:82:1d:cd:66:c4:15:f7:ea:31:7b:29:03:
f3:8c:04:48:fc:3b:61:9c:d7:3d:87:91:d9:0b:c0:10:ef:fa:
a9:f7:f5:83:94:b3:39:43:80:88:9c:52:05:48:23:06:30:63:
d9:2a:3f:9c:a0:90:24:c4:27:b0:ae:9b:f0:63:70:dd:60:a1:
ca:35:8b:80:07:f7:1a:ac:e9:9b:cf:e7:93:80:d4:89:ab:7c:
9d:03:0a:7f:3f:cf:24:7c:f4:46:de:30:56:37:b4:a6:92:b3:
fa:6a:ec:5b:32:1a:c4:d7:42:1e:79:80:aa:ea:8f:50:5c:79:
62:5b:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:07 2025 by rpki-client