Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: 9Fk2YI5SIPzMQgjOh0Q6CSjaZyGvA8dO+1GrIrg4YSc=
Subject key identifier: 1C:A4:5C:BD:ED:D2:EE:C2:3B:D8:29:B1:2B:E6:4B:EE:23:F5:FA:3B
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0198530E0F978D0D1312DA71B5B1513C7E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 22:01:27 +0000
Manifest this update: Mon 28 Jul 2025 22:01:27 +0000
Manifest next update: Tue 29 Jul 2025 22:01:27 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: I1+9dB8l4AM2ZMR/iNVWv38F3I6co5na8UEF61K37+I=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:0f:97:8d:0d:13:12:da:71:b5:b1:51:3c:7e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Jul 28 22:01:27 2025 GMT
Not After : Jul 29 22:01:27 2025 GMT
Subject: CN=1ca45cbdedd2eec23bd829b12be64bee23f5fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:e9:40:f5:4e:35:98:cd:97:1c:21:62:12:
51:36:7e:80:81:11:28:e2:3e:5b:c4:80:db:fa:49:
f1:1b:43:6a:c1:aa:1b:c3:99:8f:41:25:ff:91:3d:
dc:3f:bc:ff:07:f7:c3:53:03:55:a7:9d:3e:df:93:
83:99:13:0d:f0:ab:1b:c7:d6:05:d6:d3:ab:62:e4:
6f:07:da:ec:98:b2:d3:00:f3:fe:da:4d:cc:16:b5:
e8:01:dd:23:83:2b:2a:29:04:c9:9e:52:5c:80:b3:
2a:ef:bf:88:d1:22:71:9d:83:a4:1d:1c:76:be:df:
57:f4:b9:c8:c4:b7:d9:63:34:94:7e:0f:c2:98:d2:
7e:c3:a3:7f:75:50:fd:b7:e4:56:27:92:fc:16:fe:
56:c8:84:27:d7:46:d3:1a:c2:6e:8e:59:02:bc:aa:
b9:6d:37:0b:f4:28:76:7e:01:a8:13:3b:7a:e3:61:
57:56:b9:30:d4:1f:46:96:5e:82:c6:27:19:6f:ac:
e4:ac:0c:41:c1:ad:69:9d:8e:29:a4:e5:a6:e2:55:
c7:92:ea:c8:fb:13:06:d8:1e:55:10:2f:27:1e:2c:
72:02:2a:65:c6:d2:d6:89:c4:59:3f:cf:37:f2:22:
b8:fe:22:99:1b:72:e6:a1:3b:44:db:c2:6e:b6:8d:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A4:5C:BD:ED:D2:EE:C2:3B:D8:29:B1:2B:E6:4B:EE:23:F5:FA:3B
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:f8:6a:7c:5d:ee:92:3d:66:31:b7:61:75:8f:68:c9:70:
79:58:cc:3c:d1:e2:5f:67:d0:31:5a:e9:a0:d3:f8:09:06:34:
00:3a:53:4e:7c:d1:cf:cb:34:fe:57:33:37:55:34:fe:81:9e:
06:5b:f3:79:06:07:3c:44:d2:35:9b:87:d0:33:ff:59:89:44:
18:0e:a4:e4:1e:3c:d0:87:55:04:7b:9e:dc:d2:d0:23:5d:1e:
ef:08:c9:43:0b:a1:77:35:f0:23:cf:fa:1e:25:b6:61:e3:2a:
d7:5f:2a:ff:32:93:5f:50:aa:bf:dc:45:94:39:01:5b:48:22:
68:98:bf:ff:6c:1c:df:9c:fd:0d:ac:62:4a:be:18:f1:23:73:
26:04:ef:92:08:fe:4c:08:65:e9:24:38:35:df:4e:27:65:dd:
4a:8a:b3:6a:fd:ba:e1:ad:36:fc:34:00:32:8e:53:53:a3:bf:
0d:cb:0d:53:e7:fe:32:96:df:84:ee:ce:f4:73:96:0e:93:fb:
2a:3e:9d:d9:8a:2e:c9:9a:43:65:58:14:fd:74:04:ec:b4:1f:
70:ee:6d:c9:6a:c6:e7:07:c0:21:70:76:b9:78:1b:c6:9e:38:
35:86:71:79:a2:63:83:bc:aa:73:b0:b4:a8:da:00:64:94:7d:
11:39:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:47 2025 by rpki-client