Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: Mb89SBmXblyjSGmMUeHXJddnu4NZCX38V9/H2GtHV1A=
Subject key identifier: E9:F2:36:DB:73:5C:0C:3A:66:B8:18:1A:6D:01:17:FA:0C:50:1D:EB
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 019855DF5562BF15F64BF35F1490A47D08A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 11:09:16 +0000
Manifest this update: Tue 29 Jul 2025 11:09:16 +0000
Manifest next update: Wed 30 Jul 2025 11:09:16 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: tJ6E6qmGnExpJ4o6O9yEzNJ+EI4eFkc7Da0VZzbDLHI=)
2: 4yhoCs9M-fjQaMlDWlUpC1ERe-g.roa (hash: t+8njXgDpdo9kegDaGKO6tPmuatvzfS0I/p9sqY0v4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:55:62:bf:15:f6:4b:f3:5f:14:90:a4:7d:08:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Jul 29 11:09:16 2025 GMT
Not After : Jul 30 11:09:16 2025 GMT
Subject: CN=e9f236db735c0c3a66b8181a6d0117fa0c501deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:44:9b:46:9d:fd:aa:15:b9:1d:7d:8c:9c:
4f:b2:b0:05:96:13:93:c1:d4:dd:5a:6d:cd:0e:30:
ff:86:c2:61:b9:18:42:29:a8:6c:3c:43:a5:a5:29:
88:e8:bf:10:49:78:d3:62:82:9e:da:0b:49:ca:1c:
56:2d:13:89:87:f2:ef:c3:2d:8c:13:d1:37:15:df:
cc:f1:a1:f6:72:fa:4e:17:38:74:7d:30:d3:af:05:
97:cd:29:50:7a:42:fb:9e:62:2f:e1:74:73:af:0a:
88:02:5f:77:64:e9:13:50:82:23:55:53:fd:99:a1:
6d:78:77:90:a7:a9:dd:fe:df:90:67:12:3e:de:45:
61:93:ae:31:90:58:ec:3e:d1:aa:98:61:9d:a5:ff:
99:c6:b2:a7:a2:df:5f:63:aa:fb:96:36:c5:35:f0:
c1:f4:1f:7b:39:7e:71:67:11:7a:af:2c:94:ae:e9:
ba:14:6d:c7:14:03:8c:0c:1f:9d:03:ba:be:42:e1:
d9:62:f6:25:be:d9:98:f1:90:3d:6b:88:6c:11:fa:
f9:91:e2:fe:ba:22:c2:06:7f:fa:7e:8e:68:89:31:
11:2f:5b:5f:f4:fe:4a:24:c6:df:ed:fe:e7:fd:61:
a7:7b:e3:72:86:1d:3c:bf:7c:77:06:79:12:56:84:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:36:DB:73:5C:0C:3A:66:B8:18:1A:6D:01:17:FA:0C:50:1D:EB
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:89:c6:d0:76:c7:27:d3:72:7e:46:7d:07:09:30:79:bc:
cb:2a:64:a7:97:38:0d:2c:7f:54:ba:56:d6:13:7e:45:fb:75:
30:1b:54:7c:cb:09:d9:bb:6c:0d:fa:50:0c:0c:7b:62:67:8b:
34:53:f7:63:48:bf:71:2c:61:3b:c7:4d:51:43:23:63:4a:59:
59:0a:c8:dd:86:77:8d:6e:47:84:aa:d7:90:71:b1:e6:95:18:
73:06:be:92:1f:04:49:34:44:2e:f7:44:4a:24:bf:35:f8:39:
30:84:4e:85:37:a8:ab:5a:9d:b0:f6:8f:c1:4e:18:1d:e4:7c:
ed:6a:c7:01:d6:93:7f:de:8c:51:4d:12:ec:b7:47:d8:77:2f:
2c:1c:f0:81:2c:eb:76:74:dd:d2:4e:8b:21:d7:e4:62:14:2d:
88:a3:4c:8c:ef:b0:19:f4:e4:bb:04:2d:58:01:d0:0f:c6:5e:
64:f8:7c:44:a9:64:46:c7:10:c2:3c:72:ed:14:45:e9:43:71:
d3:ea:15:ed:ed:04:ae:d8:b7:27:1b:ff:95:6b:cf:43:29:70:
c5:5b:26:63:15:7f:e8:7a:38:49:72:c4:33:57:fa:e8:95:2f:
92:bb:f0:f9:9d:1d:fa:40:98:7a:96:f3:b0:28:12:f4:7f:62:
b4:fb:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:22:36 2025 by rpki-client