Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: s0235XCEzGcqiduETK12A17hRPhfMbWWlEwtoOfN7ls=
Subject key identifier: C0:65:AF:F2:B0:A4:9F:E2:18:AE:53:20:22:B7:08:F3:EA:29:B8:77
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01982FDCEA8F58FA6D5D60830826DB48440D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 01D7
Signing time: Tue 22 Jul 2025 02:01:03 +0000
Manifest this update: Tue 22 Jul 2025 02:01:03 +0000
Manifest next update: Wed 23 Jul 2025 02:01:03 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: ECuXp6JlhssIISpek9UqrToeTnzt3vhbMYLf/H9b8io=)
3: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:dc:ea:8f:58:fa:6d:5d:60:83:08:26:db:48:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 22 02:01:03 2025 GMT
Not After : Jul 23 02:01:03 2025 GMT
Subject: CN=c065aff2b0a49fe218ae532022b708f3ea29b877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:40:a8:fc:d0:7e:75:ba:55:34:bd:6d:16:
d6:1c:0c:a7:90:b4:55:60:58:a3:83:b6:67:71:5b:
f9:25:af:0a:2c:9b:b5:69:0d:0f:f9:33:43:f9:be:
cd:3c:2c:e6:aa:93:d1:70:d4:2c:31:80:23:cb:54:
4a:5c:d5:1e:c4:e1:bd:02:42:41:96:2d:c3:2d:82:
c8:2f:01:0d:98:9b:f1:f4:86:a8:ea:cc:13:04:df:
99:0d:8d:6f:86:b6:b2:2d:4d:d1:fe:24:45:fb:0c:
38:17:20:e7:7d:f4:6b:d3:93:4d:bd:23:97:06:a4:
37:c0:98:2f:16:18:fe:d2:5c:14:0d:43:ae:59:5b:
67:fd:a2:53:1f:ac:46:2e:6f:db:1f:48:56:d1:00:
b7:42:df:31:67:46:6a:72:b2:ad:4b:e0:5b:50:f5:
55:9a:7c:42:46:0c:dc:1f:d0:1b:30:9e:69:c3:c8:
93:2e:88:5b:e3:cf:02:70:7e:72:76:64:d1:cb:a5:
96:91:06:b7:27:80:5b:95:90:eb:47:0d:3b:c4:d0:
24:33:5f:c0:4e:c7:9c:a2:5e:88:8d:c8:0c:03:13:
e4:be:76:70:51:c8:36:49:2c:c4:20:f4:30:1a:33:
ed:59:77:a6:63:11:4f:aa:45:cf:e4:eb:bf:b4:68:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:AF:F2:B0:A4:9F:E2:18:AE:53:20:22:B7:08:F3:EA:29:B8:77
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4f:e2:15:08:b3:91:02:3c:36:5d:cb:a0:a1:e0:ff:f6:d0:
a0:62:14:5c:7a:43:55:98:f0:20:05:a2:27:de:ab:f9:35:a3:
b4:83:4b:12:36:b0:23:b5:5e:6c:11:fe:47:bf:c0:c4:50:cd:
3c:3f:4e:e5:7e:37:c7:a3:ad:2c:48:8d:19:9a:7f:8d:cc:d3:
51:c7:48:dd:ce:b9:7e:ad:9f:f5:dc:90:a0:ef:a9:90:bd:4f:
d3:0c:9c:24:b7:75:c8:dc:7e:a1:80:35:9a:99:e2:f9:e8:ed:
70:4f:fe:2c:10:66:59:10:a8:3e:6f:82:6c:3f:33:48:39:42:
68:7a:57:ce:28:bf:5c:83:93:ba:99:43:c2:a5:b9:af:63:4e:
dc:23:1b:68:91:dc:36:98:56:29:74:10:14:3d:5f:0b:e7:84:
96:b6:74:1e:32:d0:40:f4:14:06:8c:5e:91:07:0e:84:13:75:
0e:95:46:dd:1d:cf:28:62:d4:ac:c6:8e:d3:03:67:f2:93:b3:
69:ec:d7:5f:63:4e:d4:ec:63:03:80:67:ea:ae:6d:93:9c:54:
96:cb:39:29:8d:dd:53:f7:db:fe:82:4b:59:54:d2:ae:3b:32:
cd:4f:85:f8:3f:43:2c:dc:7d:1b:1a:52:3b:01:3a:ec:f7:fc:
45:88:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:17 2025 by rpki-client