Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: BJdVbRy7PomU8nn4oyvXQ2NtLD3IuLJojjbVkx8KwNI=
Subject key identifier: BB:69:26:47:C2:F3:A7:65:54:81:E0:5D:93:27:9D:C0:99:D8:51:3A
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01983F4F9204A2ED831180F26CBEE319626E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 01DF
Signing time: Fri 25 Jul 2025 02:00:35 +0000
Manifest this update: Fri 25 Jul 2025 02:00:35 +0000
Manifest next update: Sat 26 Jul 2025 02:00:35 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: GYQxfMVoBwLljzqCZPNzguDPnH3QqVRZ1CH5Tkou2Qc=)
3: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:4f:92:04:a2:ed:83:11:80:f2:6c:be:e3:19:62:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 25 02:00:35 2025 GMT
Not After : Jul 26 02:00:35 2025 GMT
Subject: CN=bb692647c2f3a7655481e05d93279dc099d8513a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:e6:f0:30:dd:b6:66:bb:72:e6:65:66:23:
64:27:75:20:4e:66:8a:61:72:2d:12:e6:b7:f5:33:
85:1b:b2:a4:b4:0c:18:38:90:00:65:54:97:79:f6:
da:22:27:df:2c:a5:49:39:2b:dd:15:2c:71:f2:e9:
28:8e:0e:5b:17:24:c1:56:c6:f2:a2:cf:e2:5c:71:
f3:de:bd:08:8e:a9:3d:6f:56:a3:d9:36:35:5b:0c:
45:22:ac:7f:48:5e:16:a9:6e:56:18:9d:97:77:0a:
fb:b0:2b:ec:c9:eb:1e:af:a9:b6:5a:56:fd:b3:b4:
c4:8a:d3:5c:21:d5:93:de:d1:c0:de:b5:7f:7e:d6:
60:40:cf:c8:39:e6:16:8c:67:2d:43:1d:97:34:d0:
0f:f0:c0:53:31:0d:80:f9:8a:18:fe:23:9c:43:3c:
be:eb:95:bb:16:83:7e:1b:58:96:6f:d2:98:18:1a:
ef:b2:e7:03:7d:75:a5:de:f1:9d:9d:1e:65:5f:a5:
48:fe:11:e4:e3:1b:74:15:7f:96:03:1c:69:47:5c:
d2:f5:7a:c0:a2:3b:93:5d:43:34:7f:40:87:66:09:
00:91:99:4a:d2:24:b7:b2:4a:99:93:94:71:ea:90:
40:23:c9:df:08:48:af:2e:8d:b0:03:4b:a0:fb:0a:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:26:47:C2:F3:A7:65:54:81:E0:5D:93:27:9D:C0:99:D8:51:3A
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:75:ea:32:a2:28:07:69:71:c9:df:76:b1:cb:e4:69:a4:ef:
67:46:5c:e5:b3:b9:cd:1c:6c:2b:18:52:c2:07:db:8d:06:ce:
c0:a4:d4:33:30:7b:1b:c9:01:20:24:6f:21:5c:43:8b:29:a4:
95:10:37:21:3b:f6:0f:03:55:fd:74:61:f1:70:27:01:51:37:
34:23:b8:e1:2f:38:82:39:ec:91:0d:ce:a5:0c:7d:ad:14:20:
30:9b:f6:da:1e:6b:ff:1f:c5:fd:42:6a:cb:88:9f:61:88:ee:
1e:3c:98:53:97:92:47:8f:76:b4:88:87:d7:78:04:ce:04:ac:
bb:92:4b:57:78:4a:ba:d8:c4:55:d6:da:f4:64:db:50:7c:b6:
67:8a:d3:e5:6b:e7:ff:bc:33:4d:2b:ee:55:8f:77:80:a0:24:
e8:bd:61:9b:68:3b:06:8b:c5:fc:b2:05:33:92:0a:0b:c4:af:
d8:7c:0e:3e:18:44:31:a8:3b:9b:c5:3f:44:02:10:6c:c6:96:
4e:76:dd:9f:63:d2:1c:95:1e:4c:01:92:48:3f:cb:88:23:7c:
00:11:65:88:a6:05:91:82:a1:e3:f5:6e:90:ae:8b:c2:0b:94:
7e:34:82:b9:86:ce:04:43:0e:14:59:88:33:af:2d:62:ad:c3:
eb:60:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:39:21 2025 by rpki-client