Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: dXEi1PMQMVd7EcOfXNRa8RvgLKh8+scby2YGA2xGfuA=
Subject key identifier: 31:EB:28:E1:F3:A3:C2:AC:FC:FC:B7:42:11:98:0A:E9:71:DE:5C:99
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019848896F948CA31A5C0303DDC31144D4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1611
Signing time: Sat 26 Jul 2025 21:00:23 +0000
Manifest this update: Sat 26 Jul 2025 21:00:23 +0000
Manifest next update: Sun 27 Jul 2025 21:00:23 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: xPyHVsQWhhABe2Em9W3X65u8q1S+kCXJpW3M1DJ2wLM=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:6f:94:8c:a3:1a:5c:03:03:dd:c3:11:44:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jul 26 21:00:23 2025 GMT
Not After : Jul 27 21:00:23 2025 GMT
Subject: CN=31eb28e1f3a3c2acfcfcb74211980ae971de5c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:36:b5:5d:cc:56:96:70:1a:05:b4:e4:c1:
cd:3e:2d:20:da:f4:68:da:7a:41:4b:d0:73:a1:77:
8d:8d:e0:29:48:c7:03:70:e4:16:8c:d1:db:19:16:
bf:71:06:5c:52:89:87:d6:b9:e1:9e:91:50:c3:af:
4a:31:1a:f2:d6:6a:72:aa:d2:d0:6a:d7:b5:05:4e:
d8:1c:fe:d9:19:84:ea:a0:e4:1e:0c:97:f8:8e:8c:
6a:18:a0:87:d8:02:2b:d6:f6:ed:f4:7d:b3:53:52:
f8:5a:7e:c2:ca:de:2e:7f:87:49:bf:9f:0a:2e:9e:
aa:3a:58:0d:12:7f:88:6b:b0:cc:a8:27:68:13:21:
c7:0d:33:c3:d5:cc:85:98:35:35:ca:2f:01:87:73:
f0:d1:66:c0:1d:32:2d:54:10:03:50:18:11:73:7d:
ed:e3:62:55:8f:32:4d:00:5c:50:69:11:5e:c4:c1:
64:19:b8:6a:ac:98:60:22:45:db:52:14:d2:55:9b:
69:ea:8c:6c:3e:88:d5:0b:b5:e6:c1:60:2d:41:91:
84:e6:14:e0:f0:bb:ff:27:1f:a9:d6:fb:b6:99:3b:
56:fa:31:83:cc:d8:54:89:5e:ad:75:ad:25:56:ed:
ef:8d:47:e8:92:32:ec:dd:2e:37:4f:02:3a:1d:2f:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EB:28:E1:F3:A3:C2:AC:FC:FC:B7:42:11:98:0A:E9:71:DE:5C:99
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:e0:73:c8:0e:9f:66:2b:7f:da:2e:a3:04:57:ca:93:48:
4c:7a:2a:bf:f9:ef:bf:f7:9c:b9:5e:18:7c:d9:07:dd:7e:a6:
c9:c9:37:f9:c6:1b:e4:00:fe:4b:a5:42:c5:a2:e9:ef:e5:cb:
b0:0b:bb:ab:26:0f:b0:c6:6a:38:27:6f:5f:1c:2f:91:16:3a:
c3:23:bf:de:dc:6e:d1:6c:7d:f3:68:99:ea:33:cf:50:1a:2e:
0d:02:1c:f1:22:0e:3a:09:46:fd:b6:97:16:76:b8:99:ed:9d:
4c:29:c8:65:fd:13:db:ce:d4:cf:16:c2:d5:fb:e6:bd:1e:20:
f3:5c:12:87:ec:33:b0:0c:ea:b8:90:a2:bf:d4:79:c6:dc:39:
6f:f6:14:6f:d8:1b:55:95:dc:a3:57:44:95:07:78:99:ab:96:
4e:2e:ed:3b:24:99:ef:74:90:99:9b:dc:d8:ba:80:b6:e8:4f:
c0:70:62:25:f1:53:fe:41:05:7e:31:7b:8c:a7:50:5c:29:08:
9f:2d:68:4d:8f:d0:22:09:45:76:18:e7:c0:05:53:0a:05:90:
c3:3f:9d:ae:45:d8:af:b3:f0:48:08:e4:79:5e:97:ef:74:29:
8c:d5:4a:ac:b7:91:cd:c3:8b:95:bd:a0:d6:dc:59:85:0d:70:
f8:35:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:45 2025 by rpki-client