Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: X23BegP2GUkcglBs1E5PWf/NNBjMBkaf+KrqYlt/Xco=
Subject key identifier: D5:2E:F9:72:A4:CC:6F:25:AA:F7:7C:56:6A:92:18:76:7F:18:B3:E1
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 01984664121D2CA573C5CB0D40A8E77C0BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 14C8
Signing time: Sat 26 Jul 2025 11:00:20 +0000
Manifest this update: Sat 26 Jul 2025 11:00:20 +0000
Manifest next update: Sun 27 Jul 2025 11:00:20 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: DuUQxfZ+V9kVcsqyQLCptg0Tvv/RTy/JSNgY4JwyMAw=)
2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:12:1d:2c:a5:73:c5:cb:0d:40:a8:e7:7c:0b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Jul 26 11:00:20 2025 GMT
Not After : Jul 27 11:00:20 2025 GMT
Subject: CN=d52ef972a4cc6f25aaf77c566a9218767f18b3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:66:b1:bd:3a:80:63:6b:eb:a3:55:de:3a:
f3:e4:03:29:f9:de:2b:96:63:f6:60:ac:9b:3a:95:
e7:8e:ea:4e:79:97:69:f3:4c:0b:ff:17:07:c4:8c:
21:59:b8:9e:f1:67:ae:b4:7c:5f:74:b5:04:6e:ed:
34:2c:b6:84:79:49:2c:2b:4f:72:30:0e:20:72:8c:
d2:50:5f:17:6a:f4:6a:e7:fe:74:68:bd:af:26:4f:
39:a8:f7:cc:bf:2e:01:c2:33:77:fa:cf:25:0d:f3:
7e:5a:39:03:96:27:cd:8b:c4:40:01:ed:ef:bb:91:
5b:00:9a:2e:f4:e4:f8:38:52:89:73:a9:f9:8f:e3:
7d:6f:ce:28:23:15:49:ec:7e:e4:6d:86:9f:9a:22:
2e:a2:7e:7a:f1:04:3f:62:6a:77:78:fb:ca:bc:5d:
c4:f1:3b:02:bd:a8:7c:9a:8d:b5:c2:98:3c:00:b6:
42:0a:f2:77:4b:39:03:23:4c:71:fb:4f:ed:02:cf:
0e:dc:3a:35:b6:a7:96:d9:c4:d9:18:b2:b0:1b:26:
69:e8:05:c3:22:87:d1:8d:2b:3e:3b:2a:4e:07:32:
c2:e0:02:e1:e5:72:7f:44:7e:16:89:f8:b1:3f:be:
65:31:09:8c:d6:5b:9c:9d:34:eb:dd:ae:21:df:3f:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:F9:72:A4:CC:6F:25:AA:F7:7C:56:6A:92:18:76:7F:18:B3:E1
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9b:f6:be:e2:78:4f:07:ef:fc:d6:2a:d1:5e:f6:c6:85:d0:
43:84:72:85:e4:2a:f5:74:37:22:ba:ae:54:e7:d8:d2:6d:3a:
b4:6c:c6:97:75:6a:6e:1c:39:eb:25:4e:4d:20:3a:45:ec:06:
e6:11:d4:46:68:10:9a:a0:fd:df:1b:55:10:8f:ba:82:51:2a:
9e:d6:aa:23:40:44:49:6e:54:34:1e:d6:11:4f:fc:37:f4:a5:
cd:94:f7:66:b2:52:23:61:c3:0d:2c:44:f1:fb:7a:6c:dc:e5:
df:68:fc:73:04:12:1f:a9:0c:b9:73:d7:a9:85:11:f5:2d:4f:
d8:53:97:aa:20:28:08:cd:50:dd:b5:99:59:33:b3:b3:c4:ac:
80:a8:bd:30:8c:5e:6e:72:94:68:6c:35:da:38:10:79:ba:c8:
05:11:f4:61:f8:1f:ba:25:0e:e2:a3:85:a1:59:f3:2a:db:77:
7d:c6:58:e2:3a:64:ea:c5:98:4e:27:68:c1:02:88:a4:6e:15:
e0:32:4a:79:d4:12:83:e2:1c:ad:b3:47:d7:fa:a2:bd:2d:55:
d6:a6:0a:95:f9:9a:b4:21:ef:54:58:28:6a:64:e7:c5:e1:d9:
a0:c8:80:0e:be:1f:ad:7d:cf:3f:65:42:f9:da:8a:17:1e:a0:
73:15:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:03:34 2025 by rpki-client