Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: 7KdKTBqLyuA2p+K9e0ToO1lK9nM/mbQIBGJEitXLgdA=
Subject key identifier: BE:B7:8E:9B:40:30:59:52:A1:9C:01:65:78:65:0F:6D:B9:FB:A7:B8
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 01984AAEE192878D370BBCE375881DACB2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 1078
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: +TS5BTDmdcrZ5ALgIzwIuFq2Q6mOe8bxsXX/kLRILGI=)
2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e1:92:87:8d:37:0b:bc:e3:75:88:1d:ac:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=beb78e9b40305952a19c016578650f6db9fba7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:95:76:17:74:3d:ba:aa:a4:a2:41:ac:e6:
42:13:c2:7f:34:e3:4d:04:68:08:d1:db:8e:75:19:
2d:51:7b:21:2f:f0:fb:ac:a0:c6:33:0a:82:cd:26:
4d:66:66:13:9c:b9:10:ec:e7:3d:96:01:49:e8:70:
e7:90:77:35:e9:e8:be:04:81:60:0c:5d:e9:38:49:
b1:9d:ef:2e:fa:d7:1e:e8:db:19:fd:d4:d4:82:06:
01:23:94:6e:da:ff:cb:2d:cd:ec:f2:1c:42:bf:29:
76:79:70:67:0d:1b:b0:56:bb:ae:5f:e1:93:4d:6e:
6f:56:71:63:2c:af:6c:3f:de:4b:be:fc:9b:89:82:
c2:33:c0:6f:87:f8:08:e8:04:c6:a5:f8:0e:27:06:
64:d6:5c:ea:be:58:47:bd:88:d2:1b:e9:65:3c:49:
6e:47:31:ea:42:4c:d0:a1:92:dd:21:fc:01:44:09:
c3:65:3c:47:23:6f:17:b8:49:17:17:e5:f2:85:ab:
7a:87:b3:61:38:8f:20:cb:86:d2:24:36:57:39:12:
41:b7:7c:b8:57:3b:8b:e6:76:74:f6:30:02:5e:62:
2e:1e:3f:1c:dc:60:fc:aa:7d:92:58:ce:10:2c:6f:
8f:17:aa:bc:32:63:ae:9a:84:b1:c0:a8:f1:c6:6f:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:8E:9B:40:30:59:52:A1:9C:01:65:78:65:0F:6D:B9:FB:A7:B8
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:e1:2d:4a:a1:7e:31:df:ad:92:97:3d:fa:d3:d1:d1:0f:
9d:97:f2:df:ee:21:62:dc:e9:20:30:13:f7:85:a9:94:ee:64:
75:33:2d:b3:83:f1:26:69:b2:3f:15:9b:5e:63:72:dc:0d:8f:
60:bc:3d:97:ab:9f:cd:1a:7d:6f:80:f8:64:5e:0a:96:05:46:
d6:91:59:cd:57:f8:63:81:d6:39:dc:03:41:66:8e:8c:81:31:
ca:46:65:e7:17:f8:ed:0d:26:ce:bb:aa:a5:51:e1:b5:d1:0a:
de:3b:83:78:08:3a:58:72:2b:e1:18:80:4b:1d:7c:a4:68:7c:
9b:0b:00:6b:9d:f2:1c:29:07:f5:8a:aa:11:00:5a:99:65:0f:
be:ef:8a:d1:0a:5c:27:ff:eb:29:df:5b:41:52:25:2b:80:e8:
ec:9b:b0:f1:22:52:a7:9f:60:08:83:2c:e6:07:3d:f3:2a:29:
66:47:18:2c:79:61:44:5f:32:e3:f5:86:32:5f:fd:29:70:fa:
6d:e8:60:1c:40:17:8c:ac:8c:39:aa:60:16:e4:f4:6c:5a:1a:
2a:4e:f6:cc:cf:ee:49:45:91:02:e8:6d:33:4b:6b:13:a6:a3:
61:76:d4:d2:01:c3:39:db:90:bc:d7:f1:46:ee:79:8e:00:cc:
60:22:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:50:05 2025 by rpki-client