Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: kRKwAdOxRBNeCpTiAPC4RcreIzGHtFsEjtp8ZR6draE=
Subject key identifier: 99:40:70:82:7A:D4:4B:5F:99:B2:DF:39:6A:18:B1:CB:CF:90:4A:9C
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 01984A77AF3099FBADC994FE4E18E2BD2BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0C8F
Signing time: Sun 27 Jul 2025 06:00:14 +0000
Manifest this update: Sun 27 Jul 2025 06:00:14 +0000
Manifest next update: Mon 28 Jul 2025 06:00:14 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 6bfUjGlj1Jx5L/tg3BwBYp/GANfIUkXT8+XN8gvz0Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:af:30:99:fb:ad:c9:94:fe:4e:18:e2:bd:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jul 27 06:00:14 2025 GMT
Not After : Jul 28 06:00:14 2025 GMT
Subject: CN=994070827ad44b5f99b2df396a18b1cbcf904a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:7d:a4:c2:5b:d1:05:b8:4e:69:df:7f:67:
79:ab:5b:5a:12:79:af:38:31:c1:06:c3:fb:d3:bb:
28:0c:fd:99:ee:5a:26:bc:1e:b2:de:e1:7a:88:cb:
36:85:60:d1:f7:8d:e3:9c:f3:03:1b:5d:63:a7:2c:
10:fb:00:59:c4:f5:e7:5b:5e:c0:6e:58:16:da:39:
8d:ea:84:58:16:20:56:06:a8:af:b9:0e:e8:d1:21:
73:e9:53:6d:bf:6f:f2:dc:04:14:65:a5:de:4f:92:
bf:a4:b9:fe:8e:da:fe:72:72:2d:d2:29:e1:b9:08:
c7:3f:36:15:34:23:d4:c6:a7:f7:74:27:d3:6f:44:
e4:58:97:70:26:56:b0:e0:f0:20:8a:60:c7:b0:1b:
cb:88:a6:69:b3:0c:fc:34:9c:a3:19:5a:0f:5a:2e:
3f:ea:5d:fa:c3:4e:01:b3:12:76:b1:4a:6d:ef:ff:
b9:e3:f7:c6:62:79:d7:05:94:de:e3:81:3b:d2:e9:
87:e7:49:9b:b2:5d:8f:53:1c:05:98:6d:be:0f:3e:
31:91:2b:50:2b:c4:cf:bb:23:a3:46:39:00:a3:5e:
45:b3:ef:93:b2:4a:25:f2:92:d5:7a:2e:ae:54:a0:
3f:1a:e3:1e:9a:2d:55:e9:44:c7:81:87:39:0a:4f:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:70:82:7A:D4:4B:5F:99:B2:DF:39:6A:18:B1:CB:CF:90:4A:9C
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:43:2d:79:10:2c:be:9e:69:49:0f:ed:68:0f:e6:13:9b:
89:53:2d:6e:a8:aa:ac:0b:26:68:1c:22:a8:f4:cc:76:18:ee:
7e:8a:8f:53:cc:e2:03:b8:d0:9a:df:9f:25:fa:26:17:1b:86:
16:af:99:bd:13:5b:9e:76:12:fb:01:08:27:61:ec:e6:dd:89:
e4:d3:d5:0c:7d:9f:1f:5e:53:1f:38:b1:d6:b6:90:c4:47:bc:
80:d0:2c:35:e7:41:2d:96:bd:76:e0:3a:91:48:d6:9c:33:17:
42:f0:35:45:9b:9c:a1:15:d8:dc:d4:0a:0e:69:5d:2a:18:f0:
4a:0b:12:15:b8:e0:bf:29:93:6f:08:94:e2:e5:23:da:5b:a0:
3c:00:74:e6:5a:d0:f3:71:b0:a7:c3:3a:e2:76:6b:f1:d1:e5:
88:62:dd:12:f3:a1:71:9c:19:f3:af:e2:d4:f2:65:4b:b8:b0:
18:25:50:f6:9c:8c:1f:8e:88:86:1e:f5:35:58:5f:d4:d6:ca:
f8:00:75:15:23:e7:d0:6e:08:94:5f:9f:35:8c:2f:ca:ab:87:
3b:ec:cd:76:34:49:9e:d7:2f:6e:b6:33:45:2c:94:68:54:da:
51:17:9f:53:a0:84:62:c8:59:72:40:38:80:52:6e:8b:ed:52:
f9:99:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:43:04 2025 by rpki-client