Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: GfqeznMOVgfdDAJRuhcR6CC9T6MeGCj8xQaknwICnng=
Subject key identifier: 5C:F1:DB:18:7C:B0:5C:62:37:72:D1:87:4D:E4:A1:7F:25:DD:0C:59
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 0198602447B21974CAED8C85FB5E180619DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 160D
Signing time: Thu 31 Jul 2025 11:00:46 +0000
Manifest this update: Thu 31 Jul 2025 11:00:46 +0000
Manifest next update: Fri 01 Aug 2025 11:00:46 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: fR+maH27dpS+fr6/B8JAiPiZ6B+GWPsHCjlHPVKVCRY=)
2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:24:47:b2:19:74:ca:ed:8c:85:fb:5e:18:06:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Jul 31 11:00:46 2025 GMT
Not After : Aug 1 11:00:46 2025 GMT
Subject: CN=5cf1db187cb05c623772d1874de4a17f25dd0c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:af:e3:e1:d1:89:6a:df:c4:77:c9:71:1c:
69:ef:38:71:93:d9:36:a4:88:a0:17:54:76:08:55:
5f:16:b3:54:d6:2c:7d:cf:c6:af:5a:3e:ac:15:5c:
20:78:e2:e0:ed:45:0c:60:5d:2c:92:2f:b9:86:1c:
fa:0f:e7:82:e8:6b:33:5a:dd:e4:2c:b1:87:59:35:
77:b3:8a:65:db:b2:45:cc:65:89:86:4d:2d:f0:4a:
45:59:5c:8e:85:df:0b:6a:fa:50:32:83:05:e0:1e:
34:d5:ea:f8:59:9b:13:30:67:58:0c:6c:bc:9e:84:
92:10:3f:5e:ae:94:cc:ea:c0:c4:86:71:39:03:93:
aa:31:64:2b:9f:e4:95:d2:74:3c:2a:b1:d0:75:64:
a1:37:35:05:be:e2:6b:fc:05:90:a8:44:af:71:23:
38:a8:ed:b5:67:4e:cf:ce:a5:71:3c:68:ee:17:1d:
8f:b4:6f:f2:82:c6:2d:3b:f0:5d:0c:b9:37:d9:b3:
d1:e3:b0:9d:72:6d:ec:19:fc:06:55:6c:c5:0c:de:
bf:e7:c8:9e:21:25:ec:25:87:50:49:33:27:0a:76:
f5:7d:f6:2e:86:9c:1c:2d:dc:46:4f:5a:a2:8d:06:
e7:34:90:1b:10:59:b5:ce:9d:fd:b5:b0:d2:46:1e:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F1:DB:18:7C:B0:5C:62:37:72:D1:87:4D:E4:A1:7F:25:DD:0C:59
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:a2:d4:ce:6d:65:bc:ba:f9:03:b0:00:3b:53:ac:23:eb:
44:ca:81:1d:6d:5b:81:f1:26:3b:ad:18:8b:d3:01:57:49:4a:
5e:3a:01:d0:9b:d2:1c:4d:ec:c5:ad:58:9d:03:17:c6:8c:3f:
b2:0f:dc:0a:d5:42:e0:60:cd:b7:9f:ce:2f:9e:41:89:07:c8:
43:9e:82:80:c0:d4:cc:2b:f3:2d:67:1d:06:31:62:d7:b7:c6:
00:bd:bc:9d:87:f5:b3:f7:44:88:48:3f:bf:5b:44:59:a0:8d:
47:73:96:8b:5f:28:45:65:7f:55:d3:c6:98:3b:0b:0e:97:ff:
02:e0:42:5e:ff:32:66:12:58:9d:22:c7:9e:1f:59:d3:df:95:
bf:76:91:2d:66:f6:ab:a3:36:fb:88:33:6e:7a:a1:89:ca:57:
6c:e4:a3:6a:50:aa:e9:57:49:5f:90:b8:f5:ad:86:e7:bc:75:
e7:de:be:d0:bc:a3:68:45:e4:de:69:8d:59:95:90:02:66:a6:
a5:c5:0b:3b:3a:cf:ff:dc:fe:e1:30:66:1f:57:36:0d:51:6f:
e8:35:57:65:64:4b:95:25:bd:e1:d8:1a:19:30:e6:10:0e:c7:
bc:9e:b9:7b:af:62:e4:1c:29:15:ae:6e:68:07:c8:df:91:12:
f8:f1:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:46:06 2025 by rpki-client