Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: SsMXn0fp6On9Mtm3FvspdA9FhPF+O9fi9z2TcIAoXnE=
Subject key identifier: E6:CD:9C:9D:5B:69:8C:59:65:1C:D1:47:13:82:02:79:9E:D7:D3:40
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019839849DAE39F40E85239C7430E21B890B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 01DC
Signing time: Wed 23 Jul 2025 23:00:48 +0000
Manifest this update: Wed 23 Jul 2025 23:00:48 +0000
Manifest next update: Thu 24 Jul 2025 23:00:48 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: WTiZ8LB1IKUaa1xxUxjvwKHU4osvUj5h5g8i8mZiBvU=)
3: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:84:9d:ae:39:f4:0e:85:23:9c:74:30:e2:1b:89:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 23 23:00:48 2025 GMT
Not After : Jul 24 23:00:48 2025 GMT
Subject: CN=e6cd9c9d5b698c59651cd147138202799ed7d340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:f1:49:a0:9c:d0:1a:b0:6f:bd:6c:39:d9:
15:ff:ab:84:a3:44:96:89:26:e8:8a:73:83:2b:1d:
d2:a0:b6:8f:8b:24:fe:56:20:a1:21:f8:f5:76:30:
8f:87:cf:4d:d0:c8:27:70:3a:c1:44:61:a4:ab:41:
57:6d:c9:12:38:41:f1:c9:49:22:9c:21:c9:19:17:
91:6e:53:b7:f4:96:6b:2b:91:73:16:f6:e7:fa:76:
7d:84:d1:1e:2d:47:de:01:39:b1:1c:e1:1e:ba:d9:
f7:a6:70:5d:f3:77:62:17:ed:8e:b9:72:7a:b8:3d:
59:75:82:af:f9:7e:b1:ee:c9:46:53:61:25:48:33:
25:7f:97:1b:9c:96:73:47:f2:0d:a4:81:eb:9c:03:
f5:95:f5:42:d5:d0:58:62:7a:ea:f7:b5:38:57:c4:
ea:b4:36:2b:07:6d:c9:5b:06:fe:54:d6:93:b5:27:
80:ca:67:b6:af:24:ca:e6:ab:d3:16:ca:c5:1f:a1:
4d:e5:ab:af:e0:fe:91:33:7e:62:c7:c0:7f:9e:70:
ef:45:2f:41:47:f0:01:05:96:6a:c9:8e:18:41:7a:
c7:59:b5:dd:2c:24:0f:89:e1:b4:fe:42:2f:bc:85:
48:8a:29:39:6c:aa:4c:45:ef:fe:25:dc:e9:16:13:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:9C:9D:5B:69:8C:59:65:1C:D1:47:13:82:02:79:9E:D7:D3:40
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:7a:d0:a2:9d:c2:00:88:a9:0d:2c:3f:27:69:5c:4e:0d:
f0:d6:9a:24:3a:42:6b:cd:4f:0c:c6:82:ce:15:6a:af:c7:9f:
ac:83:f4:9c:6f:92:1b:46:c4:7b:f3:de:fc:9a:31:5c:39:bb:
37:38:4e:4e:c4:71:88:1d:a4:b4:ee:55:5b:2e:ea:61:16:c4:
4f:b2:98:50:b7:37:3b:84:e3:f4:5e:d6:22:1b:d1:b3:59:93:
83:86:4f:99:4c:ea:1e:73:ff:53:be:64:9d:b1:20:ec:0b:da:
39:90:9c:39:72:ae:68:61:4b:00:05:c3:2c:05:5c:aa:51:f1:
73:d4:28:fd:c2:82:71:be:3a:05:6c:0b:83:27:b6:ea:98:5c:
53:d3:20:a8:c0:51:11:c9:cf:d2:aa:55:4e:fa:c9:b1:50:5f:
74:41:60:d7:21:b7:fd:4c:cc:45:52:03:29:80:0d:70:bf:80:
82:3b:db:5d:07:70:10:d4:b2:ca:02:01:00:bc:eb:eb:2d:f5:
d4:a9:f0:b1:a0:a7:e9:26:46:df:d8:b5:9c:e4:c9:74:dc:ac:
bf:c0:bf:40:9c:77:94:ae:ac:71:ee:74:8c:fe:1a:61:7d:7a:
0d:99:2b:ab:14:e9:21:76:b9:a7:1a:37:1d:bc:34:1a:b1:bf:
af:fd:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:53:44 2025 by rpki-client