Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: 2hKZRvZrcm+j1f5WIt36TL/1FLZpos48hCV1aw1MJmY=
Subject key identifier: F9:DF:91:FA:0C:97:2A:69:90:76:36:B6:C5:F5:DD:FC:CD:B8:EB:55
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 0198469B0F09C97C89D358DB71E8ABFF6B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 12:00:23 +0000
Manifest this update: Sat 26 Jul 2025 12:00:23 +0000
Manifest next update: Sun 27 Jul 2025 12:00:23 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: PItrS8CHKmsAAmGZTs9AKY32XwzHJKw6ij3LkREY8PE=)
2: tb7zy4gQAH_RQZ4Nz-3NFx59Mbo.roa (hash: oJpg/mpoL0grHs9Xu1Kgy7pPSav+AYmr/wpKbCpQ/O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:0f:09:c9:7c:89:d3:58:db:71:e8:ab:ff:6b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jul 26 12:00:23 2025 GMT
Not After : Jul 27 12:00:23 2025 GMT
Subject: CN=f9df91fa0c972a69907636b6c5f5ddfccdb8eb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:ee:57:63:85:9a:15:a6:72:96:cf:c4:7a:
c8:96:37:7c:fa:8e:4b:15:ce:d2:e4:a2:59:7d:58:
63:4c:81:57:a0:51:79:a8:be:ae:58:56:54:53:5f:
d8:ac:73:01:f1:d7:ff:aa:15:30:30:42:ac:de:c9:
77:b0:3c:56:e0:e3:68:30:98:f0:5f:95:0c:c3:8b:
79:04:de:c5:ff:53:49:ed:b6:91:77:e7:c9:1a:57:
49:7e:7b:12:c2:78:0c:b8:3b:cf:23:f7:7b:d4:37:
96:56:9c:49:f2:13:85:63:59:8f:3e:ea:ee:87:b0:
3c:88:2f:24:b2:a2:e1:cf:94:8e:b9:35:a3:5e:9e:
a1:1f:f1:a5:90:f9:a1:4a:6a:68:d7:dd:6a:54:3c:
86:05:19:65:d1:8d:95:e9:bc:ae:e0:25:5e:37:15:
49:79:2d:41:76:32:1b:d9:c3:ea:1a:a8:cd:6b:a5:
b7:6d:24:76:db:bf:d2:a2:f8:6f:d8:14:9e:4a:07:
87:a8:30:6b:a1:0d:b2:a5:fc:41:50:77:49:da:e0:
e8:ae:fa:89:71:19:46:1b:42:1b:b0:29:3a:5a:ba:
80:09:84:1d:3f:9b:e7:42:36:b4:d4:5b:9a:17:ca:
32:47:e4:de:20:da:53:32:f0:c9:9e:3b:a7:24:8f:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:91:FA:0C:97:2A:69:90:76:36:B6:C5:F5:DD:FC:CD:B8:EB:55
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:c2:fd:51:c9:4a:7e:44:16:ca:1f:bd:f3:ab:7d:ce:1b:
9e:a4:9d:f7:1e:e1:77:3d:36:57:3e:65:ff:69:e3:9b:aa:1d:
ea:e7:44:c3:aa:b6:c9:19:0d:88:b3:ea:29:1a:a9:cc:24:44:
6f:20:54:f2:63:f1:73:3b:8c:4d:5c:38:05:f3:77:f7:60:5c:
9e:a0:9d:8d:cd:85:34:90:55:bd:bc:44:8e:2e:cb:73:3f:de:
82:f1:9b:9e:ba:f8:5e:ff:df:50:0a:dc:f0:cd:aa:ed:31:ae:
58:c6:78:ee:37:04:9f:6d:9f:95:6c:60:20:d5:d7:6d:a0:e5:
ec:a3:56:8c:e9:fe:24:9e:bf:ca:ee:11:4b:97:ad:f3:da:74:
da:5a:63:e7:f4:3a:36:5e:37:34:3f:a7:3e:de:15:c4:0d:e3:
74:1b:64:2d:34:f1:4f:dd:84:6c:25:8b:01:7d:0d:3a:b9:35:
0c:5a:ad:7c:16:7c:bf:57:31:7f:d9:fa:21:77:71:ca:bd:3e:
9d:3b:72:b9:d3:da:de:6b:72:d5:92:58:21:a3:45:32:dc:4c:
56:08:9d:ba:e0:79:d1:a4:15:b5:b6:68:08:2e:5a:d7:69:fe:
94:ee:e8:04:8d:b4:5a:d3:e0:0e:68:47:31:be:f0:6e:8c:94:
c6:c2:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:11 2025 by rpki-client