Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier: mS1eX10TZj3RrvfBpyggwC6c3WIEDY1oJvjpX5vwocs=
Subject key identifier: 89:78:61:4E:0C:3A:37:23:3E:B2:E7:FD:1E:DD:D5:3E:B5:C4:5B:80
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 01983314E80822CFCA18ABB0D72BEED32F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number: 0351
Signing time: Tue 22 Jul 2025 17:01:04 +0000
Manifest this update: Tue 22 Jul 2025 17:01:04 +0000
Manifest next update: Wed 23 Jul 2025 17:01:04 +0000
Files and hashes: 1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: QylY0t+PLVSZlT7o3owO9/GJW+2yv6a7U5ix2ZK2VK0=)
2: As7V6ZE1xBs1gl2SXAEbNIUHC00.roa (hash: kQVt6PxymkEnwafOS16jS1OEQiU/aYHOchiiJ14/rGk=)
3: PIhsP1al3YizxN861NowDoYoHI0.roa (hash: R9+qOpDwEb0Q5efJFh94SK/9P5J9FFbPDMd4Z1g9adY=)
4: RVfWb6AeQUrXaw0eh9r6r19sjZE.roa (hash: v4r/LVDf839QcMU4tAbsB+argaU/EH+WPkLUSna1SOM=)
5: T195uzhcxLzu10eyYWudFCGivFA.roa (hash: qzUIoK7cQxzw4ahmYyu2KSE8akPb2eWd34lvfRiJKwg=)
6: WLuKYa43v4uLoTtBwSGJKLjUaW8.roa (hash: Fla1bcGk5oIM2PQQTeiavoL8NWNQFQ/epjWD6RXMXlw=)
7: h2By371OCvj77wNVdyQcqgznsSg.roa (hash: soUA/0DY5+xPnyfK/0AF2K5yBnM6iGB14VNuRKlaQjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:14:e8:08:22:cf:ca:18:ab:b0:d7:2b:ee:d3:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Jul 22 17:01:04 2025 GMT
Not After : Jul 23 17:01:04 2025 GMT
Subject: CN=8978614e0c3a37233eb2e7fd1eddd53eb5c45b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:8f:9b:59:56:a7:f2:35:aa:e1:7e:d6:ec:
5a:64:ec:d6:35:69:a8:b9:87:cf:18:e1:09:e8:6d:
68:f8:ff:09:6d:1d:c4:5e:16:0c:83:a3:80:f5:be:
e4:ef:06:9b:0b:8c:51:f0:30:34:fd:de:8c:0f:41:
ef:22:d4:ac:4e:9c:d4:86:c4:06:b4:b3:cb:df:c8:
bb:4e:a1:d2:10:10:47:03:6b:59:97:b1:9c:19:b9:
e5:ff:85:30:16:06:4a:d6:73:45:62:cf:d7:d1:2d:
fc:3b:13:aa:ee:25:29:90:9a:b9:31:5e:c3:2f:44:
fe:33:0a:4e:06:96:1c:70:af:0d:6c:b1:e3:70:45:
e3:bd:6a:1e:eb:ea:d6:48:8f:16:d8:79:62:78:07:
84:0f:55:69:4d:d8:48:45:fe:60:61:98:7a:d1:b1:
15:ed:a0:f7:dd:a8:a9:25:fc:80:5a:27:91:44:6e:
c9:13:59:9a:f1:0c:0f:cc:18:72:8f:58:19:86:9f:
d2:c3:08:45:c9:bf:17:4f:ac:91:47:23:eb:f7:c6:
d2:56:4f:e1:a4:57:b6:65:a6:e8:c4:9f:2c:0a:c8:
a3:ac:76:98:9b:ca:96:2f:66:54:51:fb:a2:08:62:
d2:b4:eb:b6:3a:09:8b:d3:27:c3:ef:33:98:d0:98:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:61:4E:0C:3A:37:23:3E:B2:E7:FD:1E:DD:D5:3E:B5:C4:5B:80
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:38:53:11:0a:e0:38:60:b8:80:f1:1f:1f:c0:ee:79:0e:08:
41:a8:22:ab:a2:7e:d8:a4:6a:35:18:99:aa:a8:64:79:53:93:
66:c1:62:bd:66:9e:54:38:d5:d0:c3:33:49:3e:8c:21:36:a6:
54:1f:bd:d5:c3:57:d5:cf:b0:0c:ca:86:72:7d:91:8b:9c:4d:
cf:58:8a:96:12:42:c5:36:bb:4b:e3:f4:d4:46:b0:09:23:a4:
4e:19:35:67:28:e6:6f:08:ca:cc:2f:28:ed:e9:32:3d:f3:09:
89:b2:e7:38:51:47:84:0b:4d:bc:f8:7f:9e:82:05:5c:8a:77:
59:90:a0:b9:58:76:5f:fb:0f:9b:13:c1:bc:19:d7:df:33:25:
a8:5b:55:35:99:94:af:28:74:9f:fa:18:f1:27:25:6c:90:06:
94:23:2b:54:96:aa:b0:3a:41:50:fb:4a:da:16:58:68:fb:6f:
86:b3:a0:39:cd:de:50:68:20:92:d8:db:80:de:89:80:7b:cb:
3c:f2:71:4e:1f:0d:0c:61:a7:6b:17:46:11:9e:49:76:07:fd:
41:2f:1e:d6:c5:82:7a:bd:e0:2d:88:cc:02:97:23:20:c6:8d:
7a:c7:a4:2c:98:33:a3:b4:ec:1b:68:23:14:5f:65:eb:ac:b6:
24:5b:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:34:13 2025 by rpki-client