Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: F76OswI3mTLZI3nJ6eGAcWfgow3Ja64czScdRQ3LE9k=
Subject key identifier: BA:95:96:20:FD:69:43:52:BA:0D:6E:A7:D8:95:07:9B:92:7D:34:0C
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019841ACD81CDBAF00CA5EA0B3B3CB9A9EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 026B
Signing time: Fri 25 Jul 2025 13:01:43 +0000
Manifest this update: Fri 25 Jul 2025 13:01:43 +0000
Manifest next update: Sat 26 Jul 2025 13:01:43 +0000
Files and hashes: 1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: cCAGLHq5LTXXu+89hBfg5ExjyVi+Fl9jB/dEK2xV/PE=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:d8:1c:db:af:00:ca:5e:a0:b3:b3:cb:9a:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Jul 25 13:01:43 2025 GMT
Not After : Jul 26 13:01:43 2025 GMT
Subject: CN=ba959620fd694352ba0d6ea7d895079b927d340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:0f:46:55:8f:76:cf:0f:76:0a:b0:bc:ed:
da:47:66:6d:50:b6:5b:ca:b5:6f:4c:28:c4:45:3c:
57:6f:ef:db:2f:18:a1:5a:1c:67:2b:f1:f3:50:b8:
93:66:b4:25:20:24:a3:3e:de:cc:40:f5:72:26:79:
3c:5e:37:72:9a:6b:49:ec:ee:79:d1:78:a2:e2:bc:
31:8e:44:87:74:ff:3e:ac:bd:e6:b2:61:c6:21:83:
f5:af:89:bf:b9:89:e6:ea:66:87:79:aa:b3:ea:83:
f9:38:ab:77:6e:e1:cd:1a:0c:ba:17:61:ac:aa:c5:
2a:91:58:30:f8:3f:c9:23:f4:c5:2e:20:45:b1:d1:
f9:d5:fa:a9:d7:41:1f:86:0f:51:d6:ca:2c:90:e2:
cb:58:43:09:39:fe:8a:3c:1d:07:1a:88:b3:52:7f:
48:d3:c3:76:d4:0b:d9:97:17:b9:e8:30:b2:98:41:
5e:18:9a:6d:ba:52:bd:e3:98:ad:8a:30:1b:41:62:
61:9a:5b:21:6b:5e:44:78:5a:43:1e:72:9e:7d:d5:
e4:30:90:1d:c3:d2:23:b3:08:2f:f8:2c:db:4a:66:
a4:e8:db:40:62:df:b9:4f:8b:36:fb:1a:6e:bf:6b:
df:88:b1:8f:f6:c1:32:58:c3:5e:ae:a7:57:87:21:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:96:20:FD:69:43:52:BA:0D:6E:A7:D8:95:07:9B:92:7D:34:0C
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:93:2b:9b:ab:85:63:ab:17:bb:d8:0c:c4:18:d2:24:96:e3:
15:bf:0b:d9:a8:c5:e8:8f:d1:fe:0c:69:2c:9c:f4:ed:fa:02:
72:a7:d6:bb:7a:61:08:1b:d7:1e:75:c6:8d:f7:c6:94:73:78:
85:2b:ae:0f:0a:3a:ef:e7:46:f4:06:7d:2d:16:23:ff:0b:23:
ce:6c:bd:3d:83:49:52:94:2d:6c:02:46:b8:ef:fa:b6:8e:eb:
57:78:60:bd:86:c4:90:91:52:bb:4c:ab:5b:3d:c1:d6:fc:ac:
ed:21:90:e1:e0:39:17:36:1f:65:27:3f:1e:e9:2a:a5:b0:2c:
6e:5e:fa:80:20:6c:a8:fc:c6:67:e3:a5:59:af:76:5a:73:64:
b9:2b:e7:fb:95:98:bc:88:3f:6f:de:ce:85:4f:3c:06:f1:29:
b8:c5:e2:c3:52:85:30:c3:0c:58:88:02:50:4c:1a:79:6c:87:
ba:f2:45:4d:91:d5:9a:c2:76:c9:be:5e:c9:7f:0c:3c:da:49:
8c:20:c8:77:0c:6e:1d:54:44:6b:65:ef:a1:f7:bc:24:5e:10:
47:2e:ee:59:10:af:6e:35:81:f5:4a:ff:c1:ab:89:93:e6:84:
bd:74:69:8c:56:67:59:2e:a2:8a:10:e8:b1:28:41:d9:3a:3d:
6f:a2:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:20:34 2025 by rpki-client