Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: cIHHnQE0ZenZXm3IJYHloHBemM3TwpKc0ZKzhwgph6A=
Subject key identifier: 33:FE:6A:3C:24:4B:4C:5B:07:15:77:F4:04:AA:83:E4:13:5C:07:68
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019826D970C8905253645CC36206B432E0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 15F0
Signing time: Sun 20 Jul 2025 08:00:41 +0000
Manifest this update: Sun 20 Jul 2025 08:00:41 +0000
Manifest next update: Mon 21 Jul 2025 08:00:41 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: VNjJgIjcgRxE5IvOBhfudnGL5lr29VYxK1Oc1zVF/+E=)
2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:70:c8:90:52:53:64:5c:c3:62:06:b4:32:e0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Jul 20 08:00:41 2025 GMT
Not After : Jul 21 08:00:41 2025 GMT
Subject: CN=33fe6a3c244b4c5b071577f404aa83e4135c0768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:0c:a9:32:11:36:d3:6a:4d:89:c7:8f:c3:
12:fe:a5:95:09:f3:0a:94:9b:e1:0e:d1:26:5d:10:
f1:03:12:de:7a:f7:72:33:b2:51:f8:f9:bb:e8:a2:
47:ad:d5:68:9e:4e:80:fb:ed:e4:02:0b:68:c5:64:
d4:96:92:5d:5c:ec:41:cc:74:09:e6:55:89:53:f0:
df:66:65:4c:9b:0d:9b:c6:a2:00:46:49:9e:54:73:
01:dc:6e:d1:e3:42:17:a6:83:55:32:02:3d:ba:e6:
95:aa:1b:c4:0e:87:a1:1a:9e:88:b1:c4:a4:4d:fa:
c4:39:7b:cb:84:df:fa:59:23:8d:99:a9:8f:73:f4:
d8:12:67:7e:4a:59:bc:ba:0a:31:e8:8b:96:80:35:
61:e4:3a:79:07:9a:2d:2d:59:14:6e:ef:1b:f7:2a:
25:44:07:51:8f:03:2c:26:19:4b:e6:32:3b:12:bf:
73:e7:c2:6e:a5:74:3d:e3:f2:d8:f2:65:85:51:c9:
b3:55:e3:3a:22:8f:28:e7:6a:e4:81:19:29:29:34:
b4:b9:39:36:7c:3d:37:58:13:28:5a:fe:5e:17:a1:
bb:4c:28:1b:70:cb:83:2c:1d:0e:7e:f3:5a:c2:18:
38:5b:0f:45:3c:c9:3d:e0:0a:90:38:7b:ec:31:c6:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:6A:3C:24:4B:4C:5B:07:15:77:F4:04:AA:83:E4:13:5C:07:68
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:5c:28:ea:ed:04:ec:2e:21:65:46:36:94:27:e8:7e:d8:
70:2b:38:63:2c:a0:d6:e1:07:03:47:c1:b2:2f:9f:79:6b:3f:
c0:18:70:c3:f0:ea:22:d3:d3:76:16:13:df:58:1b:24:45:f3:
85:9f:d2:ee:c2:69:60:68:af:f1:54:f3:bf:53:b4:c8:c4:9f:
01:43:f6:62:8f:b4:f9:6f:09:0c:ef:7c:b2:a8:30:e8:ec:92:
a6:f4:cb:92:6c:ea:82:21:43:cb:e4:a4:85:f1:ec:9d:79:49:
f3:9a:65:35:29:48:f3:5d:96:b9:34:34:eb:45:db:ac:45:69:
f1:4c:d1:eb:06:15:89:ac:d7:b0:b9:93:b1:dd:ed:83:4e:e8:
3a:97:68:71:60:60:11:3b:3e:94:cf:ec:06:92:90:6e:ea:ff:
5d:4b:95:f7:b7:b4:db:05:4d:90:bf:b9:39:e6:d7:c4:01:85:
d9:ae:24:71:71:b2:b7:e9:38:09:90:75:d6:e6:26:7a:39:01:
6a:72:2d:79:0e:33:ae:d3:37:dd:93:42:40:cc:b3:62:92:98:
5b:a1:ce:3e:d5:26:d2:51:8b:d9:03:c4:53:b9:bf:b2:2a:ce:
b7:3c:a0:c3:76:e3:3a:df:7e:21:ce:c6:30:45:32:5e:8f:22:
2a:b1:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:00:10 2025 by rpki-client