Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: nDctAa1IaXh1jUzXAqJlLJvNeoXBnBFUYC/W9PXwQ+o=
Subject key identifier: 9B:10:73:07:08:EA:22:50:AF:17:BA:7D:74:94:15:00:4B:E9:B3:58
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 019848C07D2C892A3780A0696BE751F829A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 22:00:31 +0000
Manifest this update: Sat 26 Jul 2025 22:00:31 +0000
Manifest next update: Sun 27 Jul 2025 22:00:31 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: HSwG2WVL5EM0kaG7vOux4ieM8s3bgfCODHDrc96nYhE=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:7d:2c:89:2a:37:80:a0:69:6b:e7:51:f8:29:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jul 26 22:00:31 2025 GMT
Not After : Jul 27 22:00:31 2025 GMT
Subject: CN=9b10730708ea2250af17ba7d749415004be9b358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:ab:64:1c:38:22:b7:6f:eb:2e:d0:17:ba:
9e:96:87:0a:f1:9e:20:7a:aa:24:57:d0:ca:55:b6:
df:85:b3:38:4a:3c:44:c3:1a:1f:d2:73:ad:5b:84:
44:e9:39:0d:e9:4f:a2:74:b1:46:40:67:de:4c:a0:
fc:78:18:9a:24:2d:ad:2e:51:ab:57:a5:bb:fe:06:
91:75:7b:e9:a2:de:07:07:79:e9:fe:56:f3:24:f3:
9c:35:52:31:92:ab:e7:84:91:3b:76:c8:13:8f:a3:
b9:53:d4:49:ea:ec:2e:54:b8:ad:19:8c:66:f6:0a:
36:60:a2:2b:91:5f:fe:48:32:64:a0:75:d6:6c:1a:
be:3c:2a:a9:84:e9:3e:cc:7c:2f:f5:d7:94:85:0c:
f4:a3:35:db:c9:63:14:fc:6c:75:bc:97:5f:a9:e6:
ce:53:79:1c:f5:41:2e:36:d9:d0:d4:04:28:1e:5e:
f5:0d:e0:02:de:ec:83:0b:d1:ad:e7:11:cd:9f:d8:
63:fd:12:15:29:43:e6:4f:3c:2e:eb:4b:61:e7:33:
ae:76:43:a2:3c:0a:ed:3b:e4:a5:3f:60:21:7b:b0:
6d:7a:72:8d:28:8b:dc:3c:b3:c1:a2:8e:56:b2:dd:
ee:30:dc:8f:d3:45:2f:d8:b0:dd:23:61:19:4e:fd:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:10:73:07:08:EA:22:50:AF:17:BA:7D:74:94:15:00:4B:E9:B3:58
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8d:63:1b:a1:b3:bd:ee:9e:50:76:b5:83:f2:2d:75:ea:fa:
f0:0e:3c:ff:fd:4d:0f:01:6e:a6:18:ff:e9:7a:99:ec:4e:7f:
c0:bd:47:de:3e:44:36:db:ae:81:7f:b9:53:e5:52:47:b2:03:
2e:21:f1:c8:8a:3f:a2:6b:0b:61:03:23:58:6e:b7:1a:f7:4e:
a6:18:19:4d:a4:d2:fb:38:d4:7d:8f:81:e0:43:ab:2b:9b:84:
81:90:55:e8:41:ce:2e:02:4a:a8:04:5f:b3:4f:09:b0:64:77:
e4:84:ea:16:59:65:6d:9d:d4:5c:d2:fa:72:e9:22:4c:2a:08:
23:05:61:ce:2b:80:94:9f:1d:61:dc:a3:70:7b:18:43:0e:5a:
69:e5:b1:2a:ac:6a:f8:1f:63:7b:17:b2:c6:b0:6f:f8:28:21:
95:0a:ff:ad:3c:36:74:c2:19:06:e2:1f:49:58:a6:4c:3a:5e:
a3:e0:47:b9:cc:8e:9a:0c:4d:73:20:35:07:0f:a9:f0:6a:f8:
3f:bb:71:8d:42:5d:f2:ae:b7:b2:fb:f9:65:7b:b9:12:e5:d2:
02:86:a3:cf:26:54:49:01:f4:d9:dc:76:b7:1f:91:e0:ae:ac:
13:cd:bf:98:a5:c6:8c:61:b7:d9:b5:de:f0:82:c8:31:30:5e:
4a:0a:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:34:28 2025 by rpki-client