Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: Y88+FZqZmeohUOKzgwSmF7iuc8AzIUwdqNSb7rCCGW8=
Subject key identifier: 2F:AB:52:13:DE:84:71:F8:F8:01:80:D1:3F:F7:16:66:F5:4B:42:D1
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 01982FDCE011BF3EA75C3243B1769172B3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0A5E
Signing time: Tue 22 Jul 2025 02:01:01 +0000
Manifest this update: Tue 22 Jul 2025 02:01:01 +0000
Manifest next update: Wed 23 Jul 2025 02:01:01 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: tWO2HtKY1grsPLjzv6PfPby6Utr8NWOMsiUKMJARRFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:dc:e0:11:bf:3e:a7:5c:32:43:b1:76:91:72:b3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jul 22 02:01:01 2025 GMT
Not After : Jul 23 02:01:01 2025 GMT
Subject: CN=2fab5213de8471f8f80180d13ff71666f54b42d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:b5:a0:29:d0:2e:10:22:7e:fc:2e:79:b4:
13:be:69:d5:ef:c8:67:3a:09:f0:18:07:ed:83:29:
cb:2e:50:c2:79:73:40:07:5f:cd:fd:1c:c1:e8:6e:
2e:6e:ad:5e:80:1f:66:e0:42:cd:92:76:df:02:2c:
61:90:35:77:c6:36:67:28:35:f7:bc:b3:e7:b7:01:
5d:73:40:fb:59:04:6c:05:63:2d:f2:cf:24:9c:eb:
80:0b:91:5c:fd:ae:4a:2a:ad:97:ab:53:32:d5:1a:
59:be:ae:97:ab:fc:63:c9:8c:5f:c7:23:f8:00:33:
79:51:a0:e0:a1:46:7e:fc:b8:24:84:a5:90:c9:8d:
7f:45:ae:06:9b:42:2c:4a:e5:34:69:a5:e8:79:fe:
2d:61:dd:e5:12:01:b6:5a:e0:6d:ce:0e:50:98:6a:
a0:70:28:41:c9:3a:69:85:24:c5:88:ff:88:89:30:
4e:0e:ce:79:25:54:d1:6b:6c:2d:01:bd:29:16:4e:
2d:f3:af:87:f2:eb:9f:ce:80:ee:20:ea:a8:dc:1f:
eb:aa:3c:b6:eb:a3:14:87:d6:f4:80:53:a9:d8:d7:
b6:0d:90:f5:01:a2:ee:19:15:89:1e:d9:8b:1f:c5:
13:83:94:6f:ca:e9:e1:3e:79:28:a5:2c:35:66:be:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:52:13:DE:84:71:F8:F8:01:80:D1:3F:F7:16:66:F5:4B:42:D1
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:10:5d:b4:f1:9b:fb:ca:36:7f:3c:e1:c9:43:31:d2:f1:e6:
82:5b:c2:f9:20:79:4c:61:7b:f2:84:d0:c0:a3:81:7f:cc:f7:
57:71:54:41:0d:59:07:6a:24:0d:80:ed:29:be:c5:0a:78:7c:
2d:7b:85:68:48:8b:a6:61:29:bb:a8:8c:9c:2f:df:55:cb:1d:
73:06:81:fd:8b:7e:65:46:45:d8:0d:b5:c9:ec:31:97:05:af:
1c:e2:7d:a3:5a:04:2a:82:46:d9:a8:5d:26:98:7b:03:e8:de:
16:e0:79:af:4d:fb:72:32:37:92:16:18:79:d0:76:fc:09:96:
51:52:17:09:df:96:a1:96:c8:1e:86:b6:a0:e1:d3:0e:73:5b:
3b:70:2c:5a:77:37:b2:b7:75:e1:6c:da:75:ff:c2:58:46:0f:
03:25:88:f2:49:cd:b1:50:b9:59:d8:25:b6:c1:6d:0d:42:e7:
b4:43:41:04:de:a0:61:06:54:fb:eb:ed:3d:ae:63:f2:65:bb:
42:98:f2:75:9c:82:b4:ec:ad:fd:c2:bf:c4:a5:8e:39:79:e1:
ca:18:e0:b3:c3:7d:2e:4a:51:93:9a:5a:d9:cf:aa:e5:b7:7e:
66:61:3b:4e:21:d6:11:d0:a3:2d:4a:da:03:35:ed:0c:4b:6e:
46:51:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:00 2025 by rpki-client