Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: fLcUCgEnFfWQ71TkU3o5/pU8JHTa8hCwJ/kmG1bhMV8=
Subject key identifier: 91:94:60:C9:A7:21:FD:7D:97:47:3A:79:F0:07:13:D7:52:E5:B5:BF
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 01984777C4DC915E272A32B8FD7BEF7F5AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 11F3
Signing time: Sat 26 Jul 2025 16:01:28 +0000
Manifest this update: Sat 26 Jul 2025 16:01:28 +0000
Manifest next update: Sun 27 Jul 2025 16:01:28 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: 2e+2hpCo6YCjajpQePpRdQENhHwZN0ZBhYyVSRM7FNk=)
2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:c4:dc:91:5e:27:2a:32:b8:fd:7b:ef:7f:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Jul 26 16:01:28 2025 GMT
Not After : Jul 27 16:01:28 2025 GMT
Subject: CN=919460c9a721fd7d97473a79f00713d752e5b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:e3:a2:02:6b:ba:b7:7d:7e:6e:46:48:e5:
b9:77:22:12:f7:b1:38:0b:e1:ad:19:ea:82:4a:bc:
c6:06:dc:3c:ec:57:6d:5b:e3:32:53:c6:e6:46:e5:
87:db:21:83:93:e1:84:3c:43:67:29:1e:6a:73:10:
f2:39:78:ab:c7:46:75:28:4c:60:f5:f9:36:c1:17:
ac:7a:78:07:2e:38:c1:ea:45:44:9a:d9:59:ea:e2:
50:1e:ba:8c:0b:72:6e:14:9c:76:48:78:4c:30:90:
03:24:07:6f:26:1a:90:2a:1f:29:ca:dc:e8:e0:53:
a3:39:db:78:48:ff:c0:b7:c6:d4:e0:9f:77:a0:df:
fc:6b:2e:19:e7:b5:1a:0b:57:77:7c:71:e4:9e:46:
07:37:19:7c:9d:3c:ee:31:e1:b8:42:f9:68:f8:9c:
cc:09:08:c4:e5:1f:d6:75:1e:87:56:98:d8:fc:a6:
e5:26:08:7d:ed:03:56:d5:f7:b6:54:e2:9a:2e:37:
a5:e2:c7:5d:59:93:82:08:dc:5e:7a:be:73:6a:39:
32:c5:f1:94:b5:f9:f6:f0:91:e3:f6:58:2e:9d:ef:
03:d3:47:3c:b1:e5:03:24:3f:a7:e8:e8:ef:71:46:
49:e4:e9:eb:ad:f5:a9:71:80:1e:d2:d2:06:20:fc:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:60:C9:A7:21:FD:7D:97:47:3A:79:F0:07:13:D7:52:E5:B5:BF
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1b:6c:7c:f9:7e:5e:2a:e6:68:ac:9a:dc:68:eb:30:61:3e:
2f:60:c7:d5:fc:08:d6:ba:3b:f2:26:7f:fc:3a:1a:1c:b8:30:
64:6b:0c:8f:23:3b:5e:70:f3:f2:26:33:d7:1c:cd:dc:8b:d0:
ee:56:ed:dd:f2:06:53:5b:8d:d6:17:40:4d:cd:02:ac:a3:e8:
3b:c7:85:57:c2:65:4e:6e:ff:83:50:4b:ac:d0:f5:7d:73:e1:
cb:30:47:c9:7e:93:9e:a3:34:55:9a:62:e9:f1:44:d9:ef:df:
ef:22:ba:21:ad:2e:dc:14:01:4b:9e:7c:ed:2f:b3:bd:df:5b:
2c:8c:cc:fd:95:90:09:bf:28:3f:35:7a:4a:b4:62:ea:51:37:
58:1f:1a:cc:87:d5:77:6a:4d:19:17:61:09:26:8a:9c:11:cd:
06:dc:bc:28:a8:c4:e4:ad:19:58:94:ce:83:2c:dd:86:20:b9:
1e:32:5e:b1:50:87:40:88:58:84:fe:a1:df:2e:84:7e:a3:13:
fc:d6:fb:4e:13:55:c6:88:2b:d8:d7:a3:86:f8:05:93:eb:c9:
dd:0d:d8:e3:16:26:a3:f8:61:05:c6:45:a6:75:09:a6:c0:72:
d6:3d:60:99:08:9f:97:2e:12:55:5f:00:b2:ea:35:69:49:b8:
a9:2f:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:03:46 2025 by rpki-client