Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: HEpfmODm38pR4fjKD4SthApbDsS3E0TztsRas+NcNmQ=
Subject key identifier: 52:00:91:C9:27:FB:D0:05:6E:FD:EE:AD:2F:68:AC:1F:52:4C:DA:21
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 019849D390E201D40F02FB2F671A4441B19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 155B
Signing time: Sun 27 Jul 2025 03:00:58 +0000
Manifest this update: Sun 27 Jul 2025 03:00:58 +0000
Manifest next update: Mon 28 Jul 2025 03:00:58 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: FxUMaNwoMs2bCg2yqiHDLxEVMSibEPKWj7zQ0H3AV7Y=)
2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:90:e2:01:d4:0f:02:fb:2f:67:1a:44:41:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Jul 27 03:00:58 2025 GMT
Not After : Jul 28 03:00:58 2025 GMT
Subject: CN=520091c927fbd0056efdeead2f68ac1f524cda21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:62:02:d4:45:31:74:2d:3e:0f:e5:39:a1:
11:5d:57:b0:bb:77:83:05:20:72:43:d3:6f:9c:c6:
67:95:95:f5:ec:fc:99:3e:78:92:bd:35:04:fb:b6:
c3:b3:0c:61:7a:77:e6:f5:54:12:a3:5c:93:8a:7a:
c1:8e:2d:73:af:9c:75:29:a3:01:3b:01:d4:3b:2d:
1a:c3:10:81:1c:5b:ed:df:39:03:39:46:a1:ef:46:
b7:48:4b:70:23:54:6a:60:80:8f:39:3e:41:aa:7b:
31:22:1a:5f:a0:31:a4:31:90:cc:d2:fb:c5:6e:0a:
dc:4d:c0:c7:a6:59:72:57:5a:95:b0:ee:f0:49:26:
74:cb:37:83:92:fd:62:84:00:c4:ff:b6:26:37:c7:
7d:f3:1e:d0:78:fc:e4:88:38:b2:7b:ef:04:3e:98:
de:a5:fc:d4:a1:c1:d9:3d:f4:7a:b9:59:dd:3d:d9:
0e:0b:be:79:49:20:f8:d7:aa:87:7f:e2:94:12:fd:
91:be:08:08:6d:e2:ea:a8:e3:83:17:a0:d2:6c:b5:
38:94:54:6a:3a:5d:39:ce:2e:4a:a3:00:5c:6b:85:
33:34:a4:54:0c:94:51:16:e7:1a:8a:be:83:f3:6f:
8e:47:a8:12:84:62:10:db:95:32:b0:86:a8:17:e2:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:00:91:C9:27:FB:D0:05:6E:FD:EE:AD:2F:68:AC:1F:52:4C:DA:21
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:b1:0d:09:d1:3d:05:29:d9:a1:84:ec:08:9b:db:f6:4c:
00:79:b0:6c:5f:75:a8:70:45:ba:41:d3:d8:27:f4:aa:c7:47:
c0:af:73:32:b4:32:21:a8:6f:3b:73:bb:f3:79:c2:11:f0:7e:
09:1b:ac:b2:ab:df:23:11:29:ba:7d:68:d3:10:48:cb:9d:b9:
57:24:c1:be:98:08:d4:80:5d:f8:65:af:37:45:a1:7b:10:44:
07:e9:5f:e7:2a:4d:20:ca:7d:08:93:57:90:c2:58:da:ef:b3:
3e:e5:93:70:94:97:b9:95:c2:88:80:0c:25:77:3d:31:81:1d:
f3:21:2f:bb:ba:df:37:3f:a5:55:a9:40:42:4e:9f:98:80:71:
3c:25:88:b3:36:b8:be:03:cf:e7:6a:b7:cf:0d:b0:e4:f0:a1:
3d:71:8e:1c:5a:de:f1:42:57:c0:79:8e:fb:ee:90:f2:bd:e2:
59:e8:bf:5d:e5:30:c4:55:16:e8:95:c5:70:c6:8a:07:9f:46:
b1:88:09:1d:8d:0d:79:00:69:da:f3:e6:5b:d0:35:9d:98:e6:
a1:31:53:f9:fb:25:30:d1:f7:b0:f4:61:e5:11:8c:c9:63:e9:
90:ae:e2:9c:75:ed:1c:3e:5a:03:a3:36:8d:79:b7:37:59:e3:
66:df:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:51 2025 by rpki-client