
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
File: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft (raw, json)
Hash identifier: VJBtPtVGzTZqyEqUmdLu1lA5qM6/IggToFaQgdvTJK8=
Subject key identifier: D5:AF:4B:76:43:A5:65:B5:AC:D0:00:DB:41:AC:10:B2:FF:A9:C3:67
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 019848F70C653EC9CD0191169AA8C10372D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
Manifest number: C8
Signing time: Sat 26 Jul 2025 23:00:06 +0000
Manifest this update: Sat 26 Jul 2025 23:00:06 +0000
Manifest next update: Sun 27 Jul 2025 23:00:06 +0000
Files and hashes: 1: 2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl (hash: RpWraDe57bZIQkRZZ338y8+em8c4p+ZgcbJMGUOS694=)
2: _Mx3tryLoUr9840pDWBBH9wAMYM.roa (hash: 1wblbboXkRfG1niU72RZH+g04kmYi2u633wBSi0v2qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:0c:65:3e:c9:cd:01:91:16:9a:a8:c1:03:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Jul 26 23:00:06 2025 GMT
Not After : Jul 27 23:00:06 2025 GMT
Subject: CN=d5af4b7643a565b5acd000db41ac10b2ffa9c367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:d0:1c:bc:99:0e:ee:c8:b5:6f:dc:f5:2e:
34:8e:4a:be:f4:06:7b:cd:f9:71:5f:66:86:ea:fb:
5f:54:47:a8:50:c4:6f:65:3f:8e:94:26:10:0b:54:
d0:96:07:f7:7f:25:37:35:22:e2:0f:cc:20:de:50:
08:5b:31:5e:0b:6f:61:1a:4a:80:69:6e:7f:af:87:
71:56:af:5b:ae:7d:46:35:de:46:82:de:7a:48:78:
1a:93:75:8b:0e:cf:d7:c2:d3:74:f8:d5:3a:0a:89:
3a:b0:a2:d3:9c:ea:83:b1:c7:94:65:e1:63:77:c3:
3d:f5:94:22:30:d2:13:c3:b7:99:aa:c4:12:3c:74:
d6:a8:23:99:72:64:69:ce:3a:e6:45:5a:9c:e4:99:
a1:f8:18:30:cc:c8:cb:7e:71:f6:d3:5c:fe:00:3c:
d4:e1:aa:6c:59:93:eb:0b:a8:1a:a5:e7:aa:0f:3c:
16:9e:cd:76:c4:90:b3:44:f6:a2:69:d2:67:b3:72:
66:2e:ee:5a:03:d7:dc:69:67:23:7c:a9:ea:fd:9b:
e0:2d:9c:d3:47:dd:ee:74:1b:c4:65:88:29:4c:23:
b6:38:4c:46:aa:c3:72:b2:ed:bc:4a:d5:24:a6:03:
e1:68:27:d1:23:98:ac:2f:2f:b1:48:34:f1:dd:cc:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:4B:76:43:A5:65:B5:AC:D0:00:DB:41:AC:10:B2:FF:A9:C3:67
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:13:a2:1f:56:aa:c2:b7:fe:64:6d:75:c2:8a:51:4e:47:
27:4e:d4:11:6b:cf:40:49:c6:4a:1a:45:69:43:ad:98:44:d4:
75:40:6e:4a:c5:d5:22:e1:b5:36:e1:70:37:0f:0a:93:15:34:
ea:03:19:36:5f:cf:b4:86:59:01:f8:fa:13:72:2e:d3:14:ac:
26:51:3d:92:85:74:75:40:e9:37:8e:e0:28:84:f9:87:78:0f:
54:82:fe:ba:ba:72:74:8a:2b:c7:11:2b:ec:3a:30:ce:60:85:
b4:a5:75:85:ae:e9:4c:66:bd:ba:42:56:29:81:e2:7b:a0:f3:
b6:b7:47:ed:b8:e0:a4:fb:44:bd:d7:73:40:c3:1e:6d:64:eb:
a7:52:f7:af:62:71:23:45:d4:96:90:ea:ee:86:cf:b5:b4:5d:
0e:7a:a3:a8:99:dc:cd:b1:04:40:fe:b1:a0:16:fc:6a:b3:44:
65:59:57:ca:8f:51:84:e0:7c:b5:d6:7b:fe:15:35:62:ea:80:
78:fa:34:df:f2:26:8c:99:a4:a0:3c:74:be:4e:47:e2:3c:18:
89:7d:16:9a:9e:60:aa:c4:67:3b:78:8b:c0:16:14:04:fd:39:
ee:87:c8:aa:9a:32:79:d4:cf:f8:31:c6:a6:5e:ca:b6:d6:d7:
e4:cf:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:23 2025 by rpki-client