Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: HZ6VL3E59Z9n4U+1ORFnLHzdDUs0qGqVsLk3SXtqYhs=
Subject key identifier: 6E:9C:70:3D:FC:8C:11:84:E3:24:D5:37:CB:93:62:44:9E:8E:06:0B
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 019849D3B0F09B3EE5162857AE535B8CFFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 03:01:06 +0000
Manifest this update: Sun 27 Jul 2025 03:01:06 +0000
Manifest next update: Mon 28 Jul 2025 03:01:06 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: M64Jzcxyy5zatMy6eyUhlZVrkM0MAxL/b8SHXFdWoko=)
2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b0:f0:9b:3e:e5:16:28:57:ae:53:5b:8c:ff:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Jul 27 03:01:06 2025 GMT
Not After : Jul 28 03:01:06 2025 GMT
Subject: CN=6e9c703dfc8c1184e324d537cb9362449e8e060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:47:d6:ac:db:46:97:8d:5f:dc:1c:0e:13:
71:68:80:9a:d3:65:fb:d2:59:34:01:45:bc:90:3e:
e8:16:f0:34:e8:ea:9f:04:bc:20:0e:49:ea:87:83:
7d:68:3f:f2:06:c1:24:3d:f2:9b:f3:b7:d0:9a:a5:
ec:96:d5:a1:7a:ab:e2:c7:30:62:c1:cc:a1:86:51:
92:7c:e3:cd:76:df:dd:b0:fb:46:f7:4d:7c:f7:2b:
ce:22:45:3d:19:55:bb:52:42:db:cd:d4:af:2e:a7:
06:fa:e6:73:2b:07:e1:e9:1b:4a:12:06:24:b7:57:
0c:6d:e8:0d:5f:8e:f3:c8:79:be:f7:54:5d:ea:28:
67:df:85:96:65:10:62:a6:83:a5:c4:ac:35:84:33:
f6:df:7a:6b:3c:f0:81:91:a6:5d:51:dc:ea:a1:e4:
da:f7:e1:20:b6:15:03:df:24:bc:b7:99:74:64:c0:
4a:69:08:a4:b5:3c:96:c9:f5:a0:64:7c:d2:92:64:
11:e7:56:c9:65:16:56:10:39:8b:4d:3f:a3:9b:9e:
37:56:b6:86:7d:66:ae:3a:8f:6f:d8:40:3d:42:0f:
8f:6b:75:9e:3a:36:8a:bc:78:73:07:c8:b1:0e:ed:
f2:bb:13:1b:4c:c3:70:6a:18:67:17:2d:97:5f:d4:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9C:70:3D:FC:8C:11:84:E3:24:D5:37:CB:93:62:44:9E:8E:06:0B
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:db:33:1e:eb:f2:1a:b4:fa:25:10:a7:b0:ef:14:37:0e:11:
c7:27:97:d7:24:2e:70:29:5a:74:53:e8:0f:1d:9c:88:fd:84:
d1:8f:67:01:68:2f:09:38:02:37:c2:60:f9:9b:09:e6:9a:f1:
fd:f0:08:6c:9e:41:dc:b5:cd:3c:93:9b:14:2c:40:6c:9a:66:
42:bd:ae:fb:3e:c6:5a:2b:a3:71:94:0c:ef:d4:95:d9:8a:93:
13:3a:3b:ce:68:05:6f:6e:52:cf:d2:c2:ae:45:ca:50:e2:e0:
ca:a6:80:bf:07:9e:09:e5:86:ca:b2:86:f7:db:d6:09:cc:29:
6b:28:8c:e6:89:44:96:a2:ed:d6:a1:78:ba:81:e7:44:6a:ef:
58:4e:50:7d:ff:f3:b9:6f:6f:2c:60:05:1b:97:4a:36:88:28:
96:ba:a3:d3:6d:51:b5:eb:d5:b2:77:1c:c1:d2:f2:f6:8a:63:
ab:60:71:53:d1:41:f2:0f:7a:8e:32:8b:d4:26:34:82:d6:e6:
6d:9e:55:34:88:27:8b:94:a5:a1:37:95:47:76:b1:c5:87:3c:
eb:b7:34:86:47:20:31:b2:e3:0b:eb:b5:96:3c:68:1e:0f:73:
9d:7b:44:b8:28:de:25:b9:10:3b:8b:36:91:27:ff:d6:ed:61:
eb:4d:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:37:33 2025 by rpki-client