Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: 1cMgUsT6mDoBdTirwoUIxX/w3Jh/xuIk6BqoKpZwbJQ=
Subject key identifier: 04:26:A0:43:21:5B:F9:82:C3:F1:E1:7E:08:17:5E:98:9D:3D:29:5C
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019848531C97ECD6FD982649CB7DAB4F1DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0BDF
Signing time: Sat 26 Jul 2025 20:01:03 +0000
Manifest this update: Sat 26 Jul 2025 20:01:03 +0000
Manifest next update: Sun 27 Jul 2025 20:01:03 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 6//MkzV89PDbLlnJMJERgLl3b7jR+ncJkGXcpGf/3Ek=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1c:97:ec:d6:fd:98:26:49:cb:7d:ab:4f:1d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jul 26 20:01:03 2025 GMT
Not After : Jul 27 20:01:03 2025 GMT
Subject: CN=0426a043215bf982c3f1e17e08175e989d3d295c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:28:a1:dd:42:05:e8:72:d9:99:7b:e3:a2:
3d:40:d8:63:a5:2f:30:ff:6d:11:ec:e1:b4:3c:17:
a1:fc:c8:ed:8c:96:26:73:aa:b6:b9:63:34:1e:4b:
22:51:39:a5:c9:e2:73:3c:5e:fb:28:53:8c:e3:c7:
95:fb:46:58:42:bc:be:4b:a8:3d:8c:ce:d2:99:28:
99:e6:c1:4b:17:bc:9d:3d:26:0e:c8:6e:d7:7a:c4:
ad:bb:bf:a4:3d:f8:99:ec:59:a7:b7:3a:49:22:be:
d1:41:82:d2:dc:e9:63:7d:8c:d3:36:46:99:3d:3b:
53:67:b5:f6:5a:b7:bc:02:36:ce:d4:e5:9d:87:3f:
52:2e:29:7a:2d:aa:2a:50:8c:fc:4d:3a:ae:69:32:
79:d3:51:47:6f:5f:dd:b3:03:1d:54:8d:4a:32:24:
b5:06:2b:d2:3f:fb:a7:1d:49:ab:89:87:fd:49:98:
e1:ac:bf:b4:86:ef:c1:68:37:c5:9e:bf:ba:3c:6d:
a9:42:c5:db:7c:a7:ef:17:3f:f5:da:90:80:c7:12:
df:8b:a1:7e:4c:db:4c:5e:9c:ea:32:d3:1c:8e:60:
4e:11:51:e8:76:1f:35:a5:bb:a6:0d:9e:e5:a2:f2:
56:8e:b2:f9:41:e1:45:10:4b:1b:07:02:dd:2e:4e:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:26:A0:43:21:5B:F9:82:C3:F1:E1:7E:08:17:5E:98:9D:3D:29:5C
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:8c:b9:8e:f0:38:a6:da:bf:09:d1:38:e8:78:f7:c9:b5:
a6:7f:c7:94:50:b6:eb:c8:80:d3:6c:33:1d:09:00:ca:e9:d7:
b1:ac:15:c8:06:c1:c9:29:2b:8a:3c:78:49:9f:a1:85:66:dd:
1a:ff:47:38:df:f5:00:38:67:27:c2:a0:c0:b6:eb:9f:60:c8:
5f:4c:67:ac:65:df:10:34:d7:4b:c7:97:2e:1a:14:5a:f5:21:
a0:c4:7a:7c:8d:fc:30:f1:f2:6b:6e:ee:4c:53:3e:59:ba:9d:
72:3f:fd:da:ae:b4:26:6b:82:3e:0c:a9:9a:f5:2f:0b:c9:da:
ca:20:ac:66:a0:f2:95:6b:0c:c9:41:24:8f:90:d9:81:84:96:
61:2f:c0:09:df:f8:4c:24:ad:4e:3c:51:29:9f:d9:3c:1d:93:
4a:d4:81:60:08:2d:41:4b:06:f7:cf:4e:06:06:7d:2b:97:3f:
d5:18:a5:d1:91:77:ab:4a:be:93:96:75:49:7e:f4:5a:64:c1:
cf:a1:5a:39:5d:96:a3:20:ad:a8:03:11:ba:ea:2c:04:c3:63:
e6:d2:dc:67:fa:59:18:f5:73:7d:eb:18:e1:79:3a:a0:03:53:
45:ad:eb:80:cc:95:de:da:e3:70:28:bd:c2:0d:4c:be:03:af:
c2:9c:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:24:03 2025 by rpki-client