Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: keqHyWZHljK5Psd4Q7TCfjx8MWIclAchIO8Cw0EJcYQ=
Subject key identifier: 91:08:A5:35:36:54:85:CD:8B:4A:5D:25:C9:22:5D:08:16:FE:8C:03
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 01984EC2DB1E7A9985CC485473B9DC178A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0D4A
Signing time: Mon 28 Jul 2025 02:00:49 +0000
Manifest this update: Mon 28 Jul 2025 02:00:49 +0000
Manifest next update: Tue 29 Jul 2025 02:00:49 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: R2PZKHmuK4TqVs2PC6rtCjp7qcJzxR5xo3M6d1LJ3nY=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:db:1e:7a:99:85:cc:48:54:73:b9:dc:17:8a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jul 28 02:00:49 2025 GMT
Not After : Jul 29 02:00:49 2025 GMT
Subject: CN=9108a535365485cd8b4a5d25c9225d0816fe8c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:da:f9:c9:e1:8d:03:19:26:b0:52:92:c7:
a9:cf:6b:fe:af:54:04:4d:17:f8:95:65:08:66:6a:
f4:41:82:8c:7f:66:2d:9e:e0:58:10:d1:27:5f:2e:
06:52:e0:61:ba:91:2b:a3:4d:10:13:23:f6:b3:3c:
41:38:f7:6b:14:a3:2f:ce:04:28:60:75:a0:1f:db:
63:df:42:9e:16:ec:3d:34:18:a0:45:7e:5e:bd:e2:
95:31:33:7c:3f:50:83:26:be:ff:48:1e:d1:eb:8c:
96:60:cd:18:d4:58:59:84:32:36:48:01:e1:53:02:
d9:cd:c5:bc:13:6d:42:e1:01:c1:0a:29:c4:0a:55:
e0:7b:55:d7:4c:04:46:76:f5:f1:0d:05:80:d0:68:
92:8b:64:3b:38:36:a8:e3:cd:66:93:12:16:b4:a5:
9c:94:e8:8a:b8:35:eb:71:d4:1e:8a:0d:e5:76:c7:
21:a5:b8:39:67:5d:26:dd:09:c4:a0:2b:2c:93:c3:
25:95:70:aa:bb:57:db:27:75:09:92:4f:2e:b2:34:
ce:6b:d4:a8:7b:9e:26:9e:62:99:dd:c6:4a:3b:7b:
27:1d:3f:ab:9a:05:77:21:aa:b4:93:26:15:fd:44:
43:e2:e1:39:c8:a4:b0:cc:c4:fc:d6:de:80:8f:0a:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:A5:35:36:54:85:CD:8B:4A:5D:25:C9:22:5D:08:16:FE:8C:03
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a7:8d:de:05:20:cd:e2:34:e6:d8:91:cf:8a:c5:fc:54:2d:
16:94:74:9f:42:ed:ae:08:91:a9:57:b9:25:46:6c:e4:82:fc:
7d:b9:64:08:81:b3:42:d9:9a:a4:2b:0f:7a:90:56:db:2c:37:
c9:f9:48:22:73:00:5f:8d:9a:e0:dd:3d:0d:5c:70:ee:24:8f:
2c:6a:b1:a8:ba:e6:14:98:50:2d:7e:42:e0:70:1d:6d:7a:5a:
cd:c4:f3:f5:b5:12:9e:6d:9c:37:71:ae:79:a5:bb:53:91:46:
16:90:da:1b:cf:61:f4:2a:7a:55:56:68:c2:57:33:ab:c7:02:
c7:f6:e6:16:1e:e5:03:53:61:c2:ad:44:05:26:2a:cc:ed:8e:
e3:3a:c3:d1:59:59:d3:01:fc:c3:34:0b:90:ac:5f:36:e1:8e:
bd:f0:3c:e1:1c:df:5c:05:32:24:19:8b:53:c4:1d:aa:1a:30:
fb:b9:e4:1a:70:72:16:66:ff:7d:c9:58:16:19:40:4a:b4:cd:
66:d4:dd:a5:0d:9a:09:b5:6a:36:ab:e9:e3:f5:d0:34:c8:ed:
5e:bc:e1:d7:fe:2f:86:8f:ef:82:79:6c:0a:6a:eb:9d:a0:8c:
e3:07:cf:cf:cd:f6:ca:f4:74:7a:c5:46:8e:0e:c4:78:74:f4:
55:68:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:47:27 2025 by rpki-client