Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: pRjpg41KMQeF9xBtgRD//sSEMQoG2D1mPOES/6Jy4kE=
Subject key identifier: E0:EE:EB:8D:48:AD:CD:8D:0C:00:4B:34:19:27:42:C7:8E:D1:26:62
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0198548D760DD5AA2414B3FE3B1E41BA7DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 140D
Signing time: Tue 29 Jul 2025 05:00:13 +0000
Manifest this update: Tue 29 Jul 2025 05:00:13 +0000
Manifest next update: Wed 30 Jul 2025 05:00:13 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: Bh6vrOpLfWGe+F0ORYcbzz2/YS2Qc6Xqc3EQF9/oIgU=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:76:0d:d5:aa:24:14:b3:fe:3b:1e:41:ba:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jul 29 05:00:13 2025 GMT
Not After : Jul 30 05:00:13 2025 GMT
Subject: CN=e0eeeb8d48adcd8d0c004b34192742c78ed12662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:a9:04:03:71:97:67:aa:2a:e4:13:69:16:
93:a8:76:dc:fe:99:88:83:09:93:ba:d2:70:9f:03:
62:56:f8:92:56:be:bb:1e:2b:18:b8:32:94:1d:f7:
21:02:19:08:7f:e0:e3:5f:e2:e8:79:1c:7f:1a:f7:
a2:60:85:68:5d:d0:25:9e:ab:dc:c1:57:21:a5:30:
31:56:8f:56:b5:56:41:d6:4a:b2:79:e3:f2:2f:67:
a1:94:e7:1b:b7:4e:f3:34:9e:1b:e6:c9:4f:69:b5:
38:86:22:62:c6:e0:54:73:01:57:c3:46:81:3a:0e:
68:3d:1e:11:e0:26:70:e3:8e:05:0f:ef:6c:3b:9a:
8d:55:1a:e0:2b:49:6e:de:ee:18:e3:12:3e:59:c1:
67:3c:23:92:6d:7e:59:96:5a:c5:d5:04:3c:03:f0:
f9:26:84:25:29:c9:af:57:fe:9c:9c:59:f5:46:9a:
9a:86:87:0f:0b:88:27:02:5d:b7:17:3e:81:2a:50:
4e:1d:4b:19:ed:84:98:00:bd:4e:b1:6e:92:7b:57:
02:80:98:02:20:56:5b:03:22:ac:19:61:bf:64:e7:
68:4b:c1:d7:96:d7:6f:a3:01:e7:71:d9:9b:4f:bc:
46:22:87:13:21:d7:ac:66:86:c6:59:60:f7:9b:e9:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:EB:8D:48:AD:CD:8D:0C:00:4B:34:19:27:42:C7:8E:D1:26:62
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:c0:a6:d6:29:d5:53:56:9f:12:08:f7:6d:41:51:c9:43:
e6:32:9c:d7:1d:51:f1:44:d7:34:2c:3c:08:08:b1:45:22:ca:
5b:9a:32:44:6e:94:67:e3:20:70:c3:52:2d:3d:ab:20:8a:41:
ba:fc:15:13:d4:81:9c:ea:3b:5b:10:69:87:c0:8a:66:1e:ec:
59:c8:df:16:09:d4:39:f9:d0:22:1e:ee:c1:1e:37:6b:81:db:
b7:a5:38:ad:ef:23:a1:e6:39:e7:10:b1:43:18:81:60:88:22:
8b:89:fe:e6:57:97:19:b7:3b:68:c2:7c:f3:a3:c6:7d:5b:02:
52:53:3b:f8:1a:d7:56:68:16:b9:5b:d8:a2:dd:aa:27:c6:43:
81:1f:b9:70:56:45:d8:83:10:31:3d:be:e0:62:fc:dd:be:fc:
9c:a9:71:19:87:c9:d9:84:55:bc:a4:16:21:6e:73:1b:75:ae:
32:7d:a9:12:81:b9:1c:7a:87:3d:6c:ce:d7:71:0f:7a:b8:b3:
97:6a:04:3f:a3:91:c8:73:85:e2:96:94:f0:8d:6f:eb:7f:1b:
5a:9e:b5:3e:c7:d0:6a:26:29:2f:d7:70:7a:e9:58:45:f6:ed:
e2:6a:b0:b5:6c:1e:2c:2d:a6:3d:2d:33:e8:4e:cb:91:f9:82:
0a:98:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:14:50 2025 by rpki-client