Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: KrhbT312EK/jVCrX2O4fIuLccu/Ok63SAfI8tJ/EpWc=
Subject key identifier: 1B:46:84:15:1E:11:8E:01:B0:2D:23:57:DF:93:01:E8:71:38:0A:03
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 01984588A6BC24C40745D6D36B52B1980F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0582
Signing time: Sat 26 Jul 2025 07:00:40 +0000
Manifest this update: Sat 26 Jul 2025 07:00:40 +0000
Manifest next update: Sun 27 Jul 2025 07:00:40 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: 8tgiur4QFQJFN113/v4HLpyW0MRR20ymGHhX9nz4Af8=)
2: JfaHdSfbGbjNcRqTwPPnDuZCz2Q.roa (hash: R/95vyVR+ZB6Kflzj/IijdYMFvW8MCDKNUWdsXG1x5Y=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:a6:bc:24:c4:07:45:d6:d3:6b:52:b1:98:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Jul 26 07:00:40 2025 GMT
Not After : Jul 27 07:00:40 2025 GMT
Subject: CN=1b4684151e118e01b02d2357df9301e871380a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:2a:a0:33:e5:92:f7:3d:7c:f1:1f:76:e9:
f0:db:ba:7e:e3:69:34:9d:31:5b:0a:6d:51:d7:28:
e6:04:2c:ed:d1:94:2e:ed:14:16:e9:6d:5b:42:7b:
3b:8d:ec:d0:0f:cb:88:1e:92:27:9d:79:d2:6e:9a:
89:8b:61:9c:30:74:e0:29:e8:e1:7d:91:15:ae:f4:
3c:30:3b:ce:41:7b:56:93:a0:23:c9:d1:80:64:f1:
76:4e:87:58:69:62:32:75:82:c6:0b:db:8e:c4:61:
80:49:be:51:4d:be:b8:66:07:8f:e2:f2:b5:c8:4f:
ff:1a:60:0b:82:c8:b1:20:18:89:fe:c4:a5:67:28:
75:15:02:59:a2:18:1d:40:ec:ab:ac:ae:41:24:24:
59:7c:1f:5a:8f:de:b8:a7:4a:06:22:ff:e5:4e:07:
74:02:13:4a:4d:39:bc:19:50:8d:89:54:2b:ba:0c:
aa:1f:ba:64:55:5f:df:ca:f7:e8:07:dc:cc:29:64:
d8:cb:f7:db:af:90:d9:f1:27:f2:24:a2:2b:fe:89:
42:ed:42:d5:43:b6:11:2c:fc:d2:a7:22:b3:2d:51:
00:45:10:1d:c3:05:08:23:9b:fb:e9:f1:4d:05:7e:
4e:41:3c:95:65:d0:7c:00:fa:9e:d8:c4:44:8b:c7:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:84:15:1E:11:8E:01:B0:2D:23:57:DF:93:01:E8:71:38:0A:03
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b5:f2:9b:20:e3:f3:7f:e6:a6:1f:85:5b:29:aa:e7:6e:73:
23:51:0c:8a:73:70:20:42:23:ec:14:b7:19:a7:e8:fd:3b:23:
4e:6f:19:66:51:25:af:03:d8:a4:99:b0:e2:1c:53:45:91:96:
ea:cd:4c:14:9c:56:c4:93:dd:4d:27:18:fa:65:94:54:7e:ac:
94:c8:62:40:55:cb:c9:84:d6:c8:46:56:f6:eb:0b:c2:f0:37:
86:74:a9:f9:95:12:62:50:e2:29:3a:42:34:dc:e4:e0:2a:6a:
ea:b8:f0:f5:fa:ca:15:bf:ec:37:25:dd:e9:b2:10:ac:ed:d3:
e5:98:e4:3c:99:6e:3a:ed:75:0a:bc:1f:08:d3:5d:af:b8:47:
4e:c3:b7:99:53:d6:e6:13:e7:32:66:d6:c9:94:48:36:75:c3:
d6:ab:f7:d2:9a:b8:49:4f:b4:d4:9d:1a:fc:01:f2:5c:8e:08:
c8:e1:2a:0b:89:a4:20:41:4d:42:59:32:58:ee:37:ff:46:31:
00:16:7d:84:6b:c0:7e:33:2a:0d:31:02:06:e2:35:bb:95:a5:
62:dc:b7:4f:ff:6e:10:ca:2e:fe:cb:df:77:4e:2f:a4:e4:e5:
fc:3a:52:1c:73:59:db:53:db:09:d6:85:e0:32:36:df:ef:b8:
b1:52:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:37 2025 by rpki-client