Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: UvdU2mycyQiaKwQbP/K+6MaPPi9T4ew6ziJr2pK1H1s=
Subject key identifier: 5B:90:F7:23:46:68:5B:F1:17:36:3E:35:13:C6:4F:5E:6C:87:28:AD
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 01986513EECECD4EF22D581132AFD56FF202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1617
Signing time: Fri 01 Aug 2025 10:01:01 +0000
Manifest this update: Fri 01 Aug 2025 10:01:01 +0000
Manifest next update: Sat 02 Aug 2025 10:01:01 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: rBtj8/R5l1DFgRYmX2GJg0KBjvpjpQmMD+6iTKcc9iY=)
2: ULHC_eqps-Zhve3ylast8DZ7_B0.roa (hash: rS2DzXzv6b1NgQdmnOKMIDSPXpweT7iIgimqwwzrLDM=)
3: VuGkSohHUfq_yXd_IRur3wQhe6Y.roa (hash: BWYBYUzZHQt0NYFkHSXMP74Q5d+hL0sst0bi6Iqm6QQ=)
4: mqcBsZguJ4u7DQyG9frvwf0EmHo.roa (hash: 0n6BWPSoOW6nqo6SiNgRiIzfLmFx0RVI3omPqv7vWao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:13:ee:ce:cd:4e:f2:2d:58:11:32:af:d5:6f:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Aug 1 10:01:01 2025 GMT
Not After : Aug 2 10:01:01 2025 GMT
Subject: CN=5b90f72346685bf117363e3513c64f5e6c8728ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:aa:ca:68:f5:42:d8:59:7a:ed:a8:c7:73:
f3:fb:88:8b:d1:18:e7:9d:ff:a8:5e:34:9f:2a:af:
0c:7e:06:b2:3a:9f:9a:c2:9c:e5:c0:bf:47:d8:5d:
a4:39:3b:01:8a:e7:af:a9:3a:5b:e0:99:a5:64:38:
10:00:75:fc:3a:a7:31:15:bb:18:f3:61:45:93:10:
ab:52:25:ce:b0:44:88:d2:17:b5:27:4a:45:90:57:
22:99:ae:02:3f:cc:cf:05:91:0d:03:ca:b7:3b:d2:
97:1a:a4:ee:e9:e3:d5:38:3c:60:b9:99:b7:e0:14:
f4:12:a8:f3:e7:37:57:f2:a8:73:0a:d8:16:ee:7e:
e6:aa:52:29:bc:c7:2d:6c:60:93:84:fb:b3:dd:82:
9d:45:47:fb:03:f8:2a:5f:45:e4:6d:a9:55:11:9a:
50:4a:a6:d5:24:c6:0b:7d:22:ed:ee:1a:a1:eb:ee:
5b:86:da:5d:67:7d:5c:5f:3b:80:68:a5:60:74:93:
78:c6:71:a8:f8:4b:17:d5:30:73:71:a8:97:c3:aa:
fc:2e:ca:67:a9:df:a4:5e:62:e4:99:e5:e7:42:cd:
fc:93:3a:43:71:b2:8f:e1:d0:29:de:a2:79:97:2a:
b9:f3:f4:30:53:39:77:4d:75:0b:13:25:da:5b:ce:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:F7:23:46:68:5B:F1:17:36:3E:35:13:C6:4F:5E:6C:87:28:AD
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:51:1b:36:e3:48:d7:39:d0:49:fc:3c:eb:e4:d6:d2:f7:
3e:2c:20:41:e9:c3:96:71:5c:c6:fb:7c:ad:9a:14:68:6e:8d:
01:cb:f3:9c:0e:cc:6e:59:c9:54:8a:c7:c6:37:60:b6:55:23:
4e:6b:bf:22:87:64:4a:3e:ec:f8:ea:e9:63:73:d0:31:b7:44:
a8:b8:47:96:1a:d9:36:8f:3d:af:e9:76:7c:2c:3b:ba:66:df:
f6:1e:9c:e6:47:c6:b6:78:c3:6d:1e:12:82:84:94:a0:cf:ab:
6d:ff:87:1a:fb:b3:56:f1:88:4c:6b:2e:c4:5c:e5:8f:14:9c:
10:a8:86:31:46:cc:75:12:80:d7:f0:f7:ce:69:ab:92:fc:7e:
42:2e:bd:26:1d:00:7a:e6:7d:a7:8c:e1:e3:6b:3d:0d:0b:5b:
90:6b:b0:da:ff:92:30:6b:24:25:fd:23:e0:ca:bb:91:da:0b:
52:6f:28:b3:1f:62:ea:7d:72:81:29:12:2c:59:f2:71:fb:57:
53:00:ee:6c:1b:e0:8d:c6:d4:37:a2:27:43:d5:d5:b6:1e:5f:
67:1d:33:ad:cd:f1:93:82:fe:14:37:56:19:7f:60:d6:2a:f1:
40:94:3e:2a:c4:ed:b0:fa:51:4c:ca:fa:08:27:94:cb:13:79:
78:83:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:55 2025 by rpki-client