Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: tQ+2WVIIep6evN2gv1E+Syx+ykfUZ0dJFqO2xzaLZac=
Subject key identifier: 1C:97:71:2C:D5:71:FF:C1:5F:E6:87:B9:6F:EA:4E:7B:1F:C5:CD:05
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 01984777E7287E6749F473FB3A18517C8CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0706
Signing time: Sat 26 Jul 2025 16:01:36 +0000
Manifest this update: Sat 26 Jul 2025 16:01:36 +0000
Manifest next update: Sun 27 Jul 2025 16:01:36 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: nlYIyOTzOIv7LwNKbA6BbMyElb86r1+8wEg7QzpKW9s=)
2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:e7:28:7e:67:49:f4:73:fb:3a:18:51:7c:8c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Jul 26 16:01:36 2025 GMT
Not After : Jul 27 16:01:36 2025 GMT
Subject: CN=1c97712cd571ffc15fe687b96fea4e7b1fc5cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:34:d2:20:11:3a:7b:4b:8f:4f:82:29:73:18:
bb:0e:7e:08:a4:c3:f5:30:37:d2:70:bf:c2:c8:7d:
25:d8:07:35:b7:7d:81:ee:77:cc:d1:6f:8f:01:c3:
4b:de:50:ac:bb:f1:ab:3e:df:5f:5e:76:b5:8c:0a:
05:87:05:34:22:89:14:03:ab:01:48:46:18:b7:3a:
64:e4:6c:d0:1d:db:a0:d3:bb:6d:f8:67:aa:30:26:
dc:29:7b:71:a0:da:2a:47:73:34:c7:44:97:01:e7:
b2:b8:db:1a:2d:be:c3:1a:41:fe:26:1e:db:28:3e:
16:75:1f:9b:6b:2f:08:95:b9:71:01:b1:d3:f4:e4:
ba:20:47:1c:a7:68:7c:57:4e:e3:8c:81:b3:57:40:
41:67:4c:81:2f:88:bd:a1:60:dc:98:2c:63:ef:ed:
54:f5:48:9c:29:b5:2e:8f:48:f2:b2:04:47:12:c4:
22:59:79:5c:d9:6a:d8:34:1e:f1:c4:89:75:fa:14:
4b:12:69:dc:74:7d:e1:30:e3:aa:04:f3:aa:52:a4:
c5:1a:e6:fb:02:db:13:ab:2f:e8:e3:c4:7d:5e:87:
8a:4e:89:ae:ba:dd:4a:47:9b:e0:d8:38:83:2f:88:
cd:5c:87:e7:52:8d:d7:6e:8e:f6:a7:9f:79:e6:a5:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:71:2C:D5:71:FF:C1:5F:E6:87:B9:6F:EA:4E:7B:1F:C5:CD:05
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c8:cb:1a:08:1e:63:ec:67:cd:42:2d:4b:f8:32:dc:b3:96:
bc:09:d9:e4:1d:91:43:02:44:fa:8d:63:a7:ce:af:d6:70:ad:
98:19:11:3b:9d:5e:e9:80:ad:39:38:f9:5f:17:56:70:d5:73:
a3:79:33:78:1d:ec:9e:91:c7:82:ce:67:46:d8:98:5a:e7:34:
eb:10:f7:ee:7d:7f:41:47:75:e3:15:63:40:01:ef:b1:5e:42:
bb:81:ad:44:e6:0d:74:37:2d:44:c8:99:2f:6a:ee:85:fc:31:
37:dd:a2:cc:b1:be:05:e6:c9:15:53:a5:25:99:80:d6:05:af:
f2:4b:ce:87:63:80:cd:19:b4:a9:95:90:f7:4f:24:e0:83:75:
dc:17:12:4f:41:a0:c0:2a:bf:21:cd:7e:0a:24:94:2e:07:df:
67:bf:05:21:d3:b1:cc:a8:0f:be:45:ad:a7:7b:2f:f4:a3:3b:
d2:16:e5:49:bc:32:02:51:f7:b4:02:9a:5e:eb:88:d3:f2:4f:
34:7a:ed:71:8d:7f:be:cb:10:6b:92:94:d3:bd:16:00:f0:e9:
20:d2:78:6c:5f:f4:da:f7:00:c3:60:5c:d7:f8:21:6c:62:09:
85:cc:33:17:a2:5d:e4:fe:e2:2f:47:c4:a2:0b:3e:27:df:c2:
3f:a3:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:12:37 2025 by rpki-client