Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: ozG1+ypquB3lgufqAGkrkJuEfQNoAmn6k8/XPjwmvUw=
Subject key identifier: E4:23:1C:3E:09:F7:25:E9:C6:F2:5D:CB:FB:61:15:39:CE:18:13:7B
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019826A43B16C542BD9109CD5AC9D9014CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0C96
Signing time: Sun 20 Jul 2025 07:02:33 +0000
Manifest this update: Sun 20 Jul 2025 07:02:33 +0000
Manifest next update: Mon 21 Jul 2025 07:02:33 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: q9YsdfwwyVaZbeTvbLwo9Wx+NN/BoXWecOU2K3PdPWc=)
2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a4:3b:16:c5:42:bd:91:09:cd:5a:c9:d9:01:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jul 20 07:02:33 2025 GMT
Not After : Jul 21 07:02:33 2025 GMT
Subject: CN=e4231c3e09f725e9c6f25dcbfb611539ce18137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:4e:1d:94:79:3a:fa:e7:bc:5c:5b:f2:21:
73:4c:a9:a0:e3:a2:45:03:e9:c5:84:19:96:12:7c:
7e:28:ca:d6:f0:79:c1:84:98:51:55:2b:cb:47:ad:
cf:7b:b7:43:bc:6e:58:b3:6f:34:ef:e2:42:4a:a8:
e2:79:4c:65:eb:c1:e4:03:19:74:4e:2e:45:e5:d6:
63:da:8f:af:ab:81:01:2c:c8:b8:c6:76:31:76:b8:
32:ed:d1:11:e6:57:69:0c:fc:58:f6:ca:3e:57:c5:
e7:06:d5:d0:c6:67:04:ba:0a:04:9f:15:dc:75:eb:
44:ee:92:d3:74:96:5d:85:2c:95:07:b1:9f:83:b6:
a7:12:af:87:0e:74:0c:16:5e:d2:25:b3:7d:bb:8f:
23:06:67:ce:12:d8:88:50:9e:0a:8e:0e:e5:ad:7a:
45:54:c6:b6:45:95:41:d6:8e:ef:5e:51:dd:b1:de:
fd:8c:70:8f:c7:25:ef:e9:35:c7:b3:aa:d1:87:11:
7c:e7:31:46:0b:d1:ad:19:f7:b3:32:d5:2a:27:33:
a6:8b:4d:1d:7d:83:bb:fb:46:81:7c:05:b0:d1:bb:
21:77:12:2c:c7:ce:c5:8e:8a:00:a3:6b:9c:ff:5f:
f5:8f:7b:86:64:68:5e:e7:c0:a0:89:69:ba:49:f3:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:1C:3E:09:F7:25:E9:C6:F2:5D:CB:FB:61:15:39:CE:18:13:7B
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:57:18:68:b1:40:aa:5c:76:9f:b4:35:c4:2e:3c:15:2c:8c:
2f:ba:d4:9a:b9:3e:29:65:96:4e:e7:af:19:d2:01:eb:e9:09:
1a:3a:0a:3e:e4:54:6b:40:96:75:68:ec:96:e3:5a:4c:b1:2c:
21:92:a1:3c:53:4a:48:6d:39:36:01:2a:84:a2:86:96:de:71:
e7:d5:6f:0e:d7:54:8c:a3:37:dd:de:60:47:79:b3:a0:48:94:
83:2c:f7:de:0a:51:91:0d:0e:d8:72:4a:25:76:55:46:ed:c2:
6a:c4:ab:f0:65:31:18:0b:73:20:8a:d5:aa:cd:1f:67:5e:de:
f1:06:4f:2c:dd:f9:b3:15:32:81:fe:d7:b5:83:ed:7b:4a:5b:
36:21:a5:dc:6a:18:d4:7e:f7:d6:33:e6:9c:2f:97:52:0e:1f:
fd:f2:41:ad:1c:f2:1a:a5:8a:53:20:7a:a6:5f:40:67:0a:7a:
38:49:f0:8c:29:03:59:c4:96:6d:95:65:51:52:68:48:93:c2:
02:b5:5a:2c:88:fd:49:77:05:81:1b:36:0c:7c:3b:06:12:65:
cf:48:6d:84:04:84:b6:b3:c9:4d:02:06:9b:5b:ba:49:a7:6c:
44:be:21:e7:20:a3:52:30:bf:66:a4:a5:a2:a4:ac:4d:f0:2a:
7e:ac:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:35 2025 by rpki-client