Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: l7lkjrQ5iwpW0KtMVRusH2+SqA5WJ2ngMks7cX/hWYo=
Subject key identifier: 47:F6:04:9C:A8:A8:00:67:CA:CD:F2:53:4D:74:2C:E6:7D:18:37:9B
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019845888BF5F8917A63E89630FA36F64427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0FA3
Signing time: Sat 26 Jul 2025 07:00:33 +0000
Manifest this update: Sat 26 Jul 2025 07:00:33 +0000
Manifest next update: Sun 27 Jul 2025 07:00:33 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: DwRBmzodJHqM59dNrKvZF8wdMWeiBWuaD1KcZXJBy0A=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:8b:f5:f8:91:7a:63:e8:96:30:fa:36:f6:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jul 26 07:00:33 2025 GMT
Not After : Jul 27 07:00:33 2025 GMT
Subject: CN=47f6049ca8a80067cacdf2534d742ce67d18379b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:e3:d6:76:6a:43:e9:d0:18:cb:57:4f:be:
d8:a6:7a:89:7f:dd:72:5f:75:19:45:4a:6e:1e:3a:
2d:76:aa:9c:70:d3:78:19:14:0c:40:df:e5:cf:e9:
50:77:1e:e8:df:eb:59:71:22:66:37:0f:05:a2:6e:
26:47:f3:2b:e9:b8:c9:71:9d:11:79:30:97:ab:82:
3d:5d:78:ab:a6:df:27:60:43:c5:41:e3:89:bd:c0:
6c:9d:70:19:1f:b8:cc:94:49:45:b1:cd:42:ff:b2:
b3:11:05:3a:cb:e1:99:fe:e2:02:22:0c:ca:48:f0:
13:48:4b:2e:10:07:30:28:e8:c9:68:16:d8:e3:e1:
05:11:1c:ee:ec:35:57:c9:cf:bb:89:01:94:fa:63:
f2:58:66:d5:a6:20:01:34:94:94:a2:86:72:72:d2:
06:ce:81:6b:e6:09:aa:b9:30:63:35:ac:e4:9a:6e:
53:d9:79:01:56:c4:e7:ad:5c:ed:98:c9:ae:60:37:
41:26:24:c7:05:e7:ec:f2:c0:e1:81:e1:d5:fd:2f:
1d:0a:96:0d:72:b8:94:0c:4c:90:5f:87:9d:69:f0:
70:cc:41:f3:20:03:5c:1b:6c:32:e3:82:c2:26:9c:
bc:24:82:a8:ba:d7:fc:54:1b:f3:5b:9c:85:7a:17:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:04:9C:A8:A8:00:67:CA:CD:F2:53:4D:74:2C:E6:7D:18:37:9B
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9a:1e:54:4c:1d:96:95:c6:70:81:77:13:1b:85:32:e4:2b:
af:46:4c:ad:12:24:1c:e0:ff:84:78:81:95:70:64:fe:54:76:
cb:60:53:f3:13:0e:ac:f9:16:4e:b3:b4:40:78:09:16:d1:e3:
a4:53:07:ad:37:f5:92:be:17:a2:fd:dd:d3:6e:d1:7d:4f:e4:
ac:14:be:8e:61:68:4d:d0:5d:41:fd:0d:66:3a:62:74:06:ec:
e4:a7:b6:f6:c1:5d:0a:f8:25:b4:e2:28:1e:0b:8f:28:c0:fa:
97:48:53:9b:2a:75:c2:a0:07:e0:00:b0:3b:45:33:e0:69:7b:
49:ed:7f:de:ed:a9:cf:ee:62:34:9c:14:93:74:c7:cd:0e:4c:
ae:26:94:c3:5a:13:2d:00:7a:fe:35:eb:86:a6:38:7d:e2:f1:
30:c4:d4:14:4f:cc:95:0c:dd:31:b6:e5:ed:c8:86:bc:77:0b:
04:55:cc:21:e6:df:b8:39:63:60:21:27:e7:dc:4c:0d:be:fd:
35:40:61:62:47:99:ae:d5:a4:ca:41:7c:93:ed:75:5d:e9:0b:
6c:20:ed:02:dd:ba:87:ad:2e:13:59:84:5d:6f:5a:97:4e:03:
2a:d7:d3:26:7c:94:46:81:25:1f:6d:51:82:2e:cc:2a:5d:73:
d7:74:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:16:18 2025 by rpki-client