Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: nSbne/vNcHUX7qNYiTD+EjxnTdaTZZ9MOQJbS8rJ7RE=
Subject key identifier: D0:78:99:2D:7A:25:08:29:00:C8:CC:77:AF:D8:D8:C0:EB:CB:69:B1
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 0198473FC47DF1F36474FC70DF701AE4F06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 15:00:17 +0000
Manifest this update: Sat 26 Jul 2025 15:00:17 +0000
Manifest next update: Sun 27 Jul 2025 15:00:17 +0000
Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: mN7jtoDWD3D46hu6UexFTDSM4gXPK/Wj6JHHVu5AFMc=)
3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
6: S-JnIhmXL5e2DsjQFgno_k2Vz8E.roa (hash: /YQsaxBTg9/GiAQu4cI2KHBUoCqKcZjkOS7l2+NOeWg=)
7: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
8: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:3f:c4:7d:f1:f3:64:74:fc:70:df:70:1a:e4:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jul 26 15:00:17 2025 GMT
Not After : Jul 27 15:00:17 2025 GMT
Subject: CN=d078992d7a25082900c8cc77afd8d8c0ebcb69b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:d5:22:c1:f3:5c:4b:8a:f0:9e:6f:e3:70:
e0:ba:89:e7:82:e0:fc:a2:4b:31:ba:ba:cc:f7:92:
6b:26:89:44:fa:04:29:42:6c:6d:06:fe:15:1d:fd:
e3:7c:0a:9a:8f:13:9b:89:48:95:37:7e:ce:02:f4:
38:99:a9:17:c4:9c:a9:ce:6f:81:29:ef:5d:b8:6b:
62:2c:2e:9e:1e:3b:6a:ed:73:84:c3:a6:37:54:e0:
26:ec:bb:54:fa:9b:5f:45:29:a2:be:48:84:1d:74:
5b:9e:d1:79:86:0d:6c:a9:a8:ce:1b:da:56:a7:c2:
7b:6f:41:52:e3:c2:4c:0a:82:07:95:a0:c3:ed:d1:
6b:47:59:62:ac:a5:18:d3:00:e8:55:d1:8f:62:cc:
38:af:7d:f0:64:1b:4d:bf:af:5d:d6:db:44:57:40:
e0:25:81:69:df:ae:05:d7:8b:60:69:a9:79:f4:7d:
10:8f:00:2a:86:dc:9b:74:7c:91:16:5c:87:43:f0:
78:83:35:22:44:c8:22:36:61:a4:f4:15:05:af:56:
4e:e4:f4:91:9a:9d:17:1e:b0:2c:20:1e:e8:e5:d3:
51:e7:b3:92:38:86:b9:60:af:c5:a8:8d:c1:e6:15:
72:79:69:e9:d9:b0:67:72:99:c3:33:b7:9d:75:25:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:99:2D:7A:25:08:29:00:C8:CC:77:AF:D8:D8:C0:EB:CB:69:B1
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:8e:95:15:43:09:de:cc:12:47:d4:1c:55:1b:7a:9f:f2:
42:d9:2b:7c:e6:36:d6:5e:49:52:57:b2:9d:83:a2:2f:c4:ac:
ae:c2:b8:bc:4b:89:f7:84:c0:30:04:3e:d0:b2:4c:b0:f3:aa:
7d:60:c5:5f:e9:8e:d8:26:86:46:fd:32:65:24:38:14:ed:ae:
98:f3:a5:c2:a9:ba:d6:74:34:10:5e:c1:a4:f3:45:01:c4:57:
72:06:19:76:76:0f:25:2b:87:90:a3:27:84:14:3a:2d:74:27:
fa:e7:ec:77:65:27:c4:38:df:cc:c2:8f:c5:ff:45:bb:df:9d:
a4:55:6d:d3:21:7e:da:71:0c:5e:62:0e:e8:58:d9:b8:cf:03:
05:d8:8f:ca:e6:0e:80:1d:0c:38:58:c1:9f:25:45:a3:4d:45:
ed:12:8e:4d:e1:b2:e0:2b:e7:ea:1b:80:b5:01:cf:3e:6e:c7:
2a:76:66:24:3b:08:83:01:e6:62:f1:96:64:ee:f5:ae:90:5d:
45:d9:af:c1:46:29:a9:db:a7:52:cc:f0:71:87:09:82:ee:ec:
b0:9f:48:6c:7e:24:3c:62:10:59:4b:f6:21:80:e0:a0:20:38:
3c:79:a7:02:3b:ca:8b:d5:4b:8f:78:6c:e5:48:72:92:32:5c:
d1:de:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:48 2025 by rpki-client