Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: ouILVmloP+uW2PxHcYHB7BaA6zScT0DfEdP0me0jD7Q=
Subject key identifier: E6:DA:FD:4E:AB:80:DB:AB:C1:44:A1:43:ED:3F:45:8C:12:B6:08:E3
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 01985CB70867A798D2244B29EDE97312020F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 0FA8
Signing time: Wed 30 Jul 2025 19:02:35 +0000
Manifest this update: Wed 30 Jul 2025 19:02:35 +0000
Manifest next update: Thu 31 Jul 2025 19:02:35 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: l25iGeAsbwE6viukUVbnUr1AgbH2EUxfURZnPBrqXN0=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b7:08:67:a7:98:d2:24:4b:29:ed:e9:73:12:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Jul 30 19:02:35 2025 GMT
Not After : Jul 31 19:02:35 2025 GMT
Subject: CN=e6dafd4eab80dbabc144a143ed3f458c12b608e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:17:5a:75:13:4b:58:3b:3a:f9:d3:d0:38:
55:36:26:53:f1:b3:14:8e:c7:37:b7:a6:32:18:5a:
81:d0:49:55:79:00:79:2c:ba:cc:fc:2f:3d:26:4a:
0b:7e:c2:66:4f:f1:a3:cb:34:8c:06:61:ae:f3:d9:
23:ad:26:36:f4:03:18:ba:f7:fc:ef:e4:f5:7c:fb:
c4:00:5d:d3:1e:d5:3a:a4:3d:04:40:23:4a:31:63:
b6:d8:f2:1c:f5:a1:72:95:b1:49:5f:d7:76:11:a1:
f3:97:6f:d5:44:97:3e:cd:2c:9f:b0:7b:f4:16:2f:
0b:2c:a6:9b:46:cf:50:0a:29:75:85:d0:45:9d:54:
d8:87:e5:9d:96:9f:85:dd:19:57:4f:44:e8:47:a4:
55:a9:c1:49:6a:61:c9:fe:ab:8e:22:d4:b2:70:5d:
6d:13:53:a9:85:05:0b:37:fd:00:60:23:7a:23:de:
70:84:2c:28:e8:f0:8c:64:55:d6:7c:f5:da:0b:4f:
f3:3d:59:5e:48:22:cd:fb:0c:54:a5:33:7a:25:6e:
31:cb:9c:95:b0:bb:74:21:94:44:07:95:2b:3a:fe:
a7:27:64:a4:3d:a6:57:80:c3:fd:b1:d4:d1:21:89:
a4:dd:e9:2d:8e:46:cd:d6:bf:f1:12:fe:5d:9f:80:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:FD:4E:AB:80:DB:AB:C1:44:A1:43:ED:3F:45:8C:12:B6:08:E3
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4a:23:f0:b2:ec:7a:40:94:e1:34:93:73:73:95:b0:07:72:
59:aa:8b:2a:fb:b8:82:a6:ce:aa:6d:9b:ad:dc:ca:e1:68:08:
b6:41:d9:b0:40:75:20:8f:27:eb:97:be:81:f5:30:8c:60:6c:
f5:34:ee:8e:fd:25:46:ab:8d:af:e7:6f:49:88:b2:d7:d7:95:
b8:13:af:e6:a7:99:7a:81:2e:d6:35:d6:b5:0e:41:eb:52:90:
a6:fc:b1:42:ae:ec:84:99:3a:3c:c4:56:18:38:c4:26:1e:8f:
9a:64:a5:82:7c:e9:36:60:a6:87:96:13:3a:b4:d9:8c:22:3b:
01:aa:69:fd:bb:c9:4d:15:2e:66:2e:06:a5:1e:39:01:25:56:
20:c5:d4:9f:a4:3c:27:60:60:05:c3:1f:8d:81:21:fa:01:e3:
e9:c0:f7:8d:44:88:5b:78:96:8a:59:e2:49:eb:4f:06:8d:7a:
a6:68:f6:ff:26:06:6a:be:49:48:be:0e:b5:de:4c:17:8f:3b:
ea:f6:cb:f3:dd:99:ea:05:5e:0d:8e:2d:06:c0:2b:0f:0f:bf:
f6:f2:57:b5:96:29:9a:f9:82:7d:bc:29:05:d9:b0:e5:8b:5b:
20:a8:1c:6b:ff:bb:9d:9b:9d:55:d0:d1:df:a4:4a:27:49:c8:
b4:f8:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:28:15 2025 by rpki-client