Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: 8WkLvvHfv6z9D5cc6QiQb0lunLug42nd9TsT1yW10jQ=
Subject key identifier: 77:D9:4B:DE:3C:20:B5:FB:2B:FF:1C:2B:87:45:96:12:A6:34:8F:2A
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019847E53243E2913EFFA3827420E34F2AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 075F
Signing time: Sat 26 Jul 2025 18:00:59 +0000
Manifest this update: Sat 26 Jul 2025 18:00:59 +0000
Manifest next update: Sun 27 Jul 2025 18:00:59 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: 9qUFjObmN5JpfPTUm7F26mhCm4uintV2iING+VBji5E=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:32:43:e2:91:3e:ff:a3:82:74:20:e3:4f:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jul 26 18:00:59 2025 GMT
Not After : Jul 27 18:00:59 2025 GMT
Subject: CN=77d94bde3c20b5fb2bff1c2b87459612a6348f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:46:14:2d:f5:a4:db:93:68:df:5d:c8:14:
83:b9:3a:7c:dc:66:08:7c:e9:3a:cd:c3:4e:38:60:
32:7a:8f:77:2e:66:38:cc:f1:04:7c:d6:b0:28:00:
9d:e0:ab:27:61:2b:93:80:f5:bb:0a:ca:7c:4f:10:
e5:b0:df:36:b6:18:7c:81:05:04:49:f7:1f:2a:71:
f1:a0:23:05:9e:0d:66:65:7e:1d:a5:e2:78:65:44:
40:84:ab:9a:a5:95:34:11:02:ce:56:ff:46:d9:f7:
e1:8d:97:3b:0d:4a:cd:ea:62:b5:00:95:4c:ac:1e:
8a:b4:26:f3:c2:b3:a8:42:97:43:ec:06:7a:e1:b3:
be:9d:46:1a:d5:f8:f9:47:36:64:10:1c:ea:5e:39:
18:8d:67:17:24:c5:8d:68:43:ee:98:84:0e:76:4a:
3e:51:4a:5c:01:c7:ff:98:10:64:f7:fd:fe:4f:74:
77:56:8d:11:a7:63:66:35:bb:15:a0:fd:0a:10:92:
04:b2:35:d0:56:7d:7d:22:8c:39:1e:b6:c3:e2:b8:
fe:8a:bf:76:0c:90:90:02:3f:40:45:be:52:40:70:
f3:09:d2:55:94:d8:20:a6:dd:9a:b0:4f:40:76:c8:
64:62:eb:09:62:63:9d:ee:e2:e0:db:89:71:d8:c8:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:4B:DE:3C:20:B5:FB:2B:FF:1C:2B:87:45:96:12:A6:34:8F:2A
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:29:cb:6d:91:e9:b1:92:36:ba:bc:4d:de:15:9c:e4:36:
9c:b4:d8:63:92:e5:e3:86:18:60:b1:38:b5:bb:4a:b8:df:20:
db:2a:90:d5:5c:5e:9a:c9:45:77:a4:94:97:34:70:15:4e:a3:
f7:97:a4:52:24:b7:22:0c:c7:9e:8e:58:d1:90:d8:74:ef:e4:
0a:9c:a4:cc:ad:ea:a4:1f:da:f1:6f:0b:6d:3e:88:b0:19:c7:
0a:20:64:94:ed:85:6b:8d:70:fb:e8:ff:60:46:0a:55:35:9b:
e4:ab:90:38:a6:49:c0:f2:49:ca:d2:d0:d9:86:78:c6:e2:7d:
06:74:cd:ae:a7:e5:f1:61:0e:13:3f:39:7c:b7:ed:f1:e8:3c:
01:28:26:2e:c2:f2:a4:20:7b:46:35:66:31:75:ee:ec:1e:ac:
21:93:57:a7:43:ae:8c:87:21:97:ef:b1:24:a9:0a:f5:37:3b:
0c:1d:28:f6:eb:cb:69:26:90:1e:8a:22:f0:a4:f3:35:02:e0:
ef:e6:89:43:46:bf:a4:e1:b9:95:8f:05:14:b1:a5:56:55:5b:
7a:77:32:06:c5:18:66:01:ed:62:4e:28:2c:7d:de:f5:ae:b3:
60:fa:4c:db:76:ff:7b:c4:54:3f:84:be:dc:92:54:f2:5e:59:
0c:00:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:52 2025 by rpki-client