Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: WrcLcywRkLEkYxV0Io4sVB9YagDyvBUlulKj+uU8nFY=
Subject key identifier: 9D:07:C5:51:C6:86:8C:BA:98:BC:F2:BA:36:83:2C:0B:EE:DA:29:E0
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 01983E05EAA51E466C8FF4F9208F95E602C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 05AA
Signing time: Thu 24 Jul 2025 20:00:31 +0000
Manifest this update: Thu 24 Jul 2025 20:00:31 +0000
Manifest next update: Fri 25 Jul 2025 20:00:31 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: TeGrEbggWrIQ4GNnJvjeTjvmaL7Sm248SkVTHxdPiDU=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:ea:a5:1e:46:6c:8f:f4:f9:20:8f:95:e6:02:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Jul 24 20:00:31 2025 GMT
Not After : Jul 25 20:00:31 2025 GMT
Subject: CN=9d07c551c6868cba98bcf2ba36832c0beeda29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:bf:da:a0:42:fd:c2:f8:ef:f7:ef:67:7d:
fc:01:37:04:25:13:e4:8b:76:0f:d1:0f:17:06:78:
c4:7b:0e:78:d4:7e:cd:03:c4:b5:13:47:f2:c8:a7:
9e:91:ca:68:b6:39:a9:8b:c7:aa:06:8f:37:46:3e:
a2:ff:85:95:e1:9a:15:c0:21:5b:48:05:56:87:eb:
fe:b4:90:95:d5:d5:55:10:ae:3a:2e:22:9b:9a:10:
65:66:18:86:66:3d:86:10:58:49:7e:8a:3c:e3:f9:
be:77:09:22:ba:65:15:2c:78:d6:26:08:a7:8d:1b:
a9:b7:b8:5d:6d:a0:39:c4:43:45:3b:3f:7e:e7:6e:
e8:ef:79:7c:97:0f:f0:23:ac:4c:dd:60:1b:77:0f:
0e:5e:c2:cd:d7:16:5e:af:f2:95:fe:d9:9e:85:b9:
15:32:9c:ca:64:58:16:1e:38:51:e2:c3:a0:06:31:
5d:75:91:74:35:2a:c3:57:dc:87:b9:81:71:69:fb:
ad:af:a2:67:39:1c:3b:8f:ab:5e:3a:62:95:79:79:
6b:56:15:00:a7:21:bb:8a:d4:fa:12:6a:ca:5e:3f:
30:29:67:f3:60:87:d9:df:34:a9:b0:58:7e:31:9c:
c1:88:00:6b:cb:77:3e:fb:e5:b6:b6:93:57:ba:b0:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:C5:51:C6:86:8C:BA:98:BC:F2:BA:36:83:2C:0B:EE:DA:29:E0
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:5b:a6:b5:87:9e:d4:bd:b5:7a:60:71:27:10:04:51:08:
82:9b:ca:69:f5:72:66:54:0d:ec:70:55:06:e0:89:2d:da:08:
c2:89:b5:be:b0:e7:a0:a3:9d:7d:b3:2b:63:88:f0:32:6c:b4:
49:9d:ca:f9:19:d5:a7:c8:ce:6a:21:dc:75:8a:9e:08:01:2f:
36:8a:21:52:b6:36:25:bb:e2:11:f3:35:0b:0b:fa:ca:44:54:
e5:de:2a:cf:7e:4e:92:f2:c2:5c:53:80:f6:db:b4:3e:d2:47:
cc:b8:75:92:fc:b2:93:5b:ba:6d:f2:70:37:5a:ff:f6:75:22:
bd:89:bb:99:31:c2:35:90:f9:4a:27:e9:75:e8:de:8b:04:2a:
6d:ce:1a:94:06:48:01:78:8f:1d:19:ef:51:80:79:d4:07:53:
bb:7f:fa:30:ab:81:3a:43:83:cf:e2:4e:d2:8d:d1:a0:23:cc:
6d:54:8e:cc:f8:d7:12:79:32:d4:cc:de:ff:12:48:8e:d7:2d:
46:84:e4:c5:46:c7:5f:99:7f:10:9c:8c:22:49:03:d0:c2:a9:
17:2c:a3:86:30:f4:12:95:76:82:87:58:9e:2a:0d:91:fb:00:
e9:05:63:87:eb:a4:a2:9e:c0:34:b3:72:3d:28:88:d2:7c:70:
19:c7:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:02 2025 by rpki-client