Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier: oXNa4A+lt2l1AjZUVRpoiszOSJb3IxFXK5WJHNk6SbA=
Subject key identifier: C8:29:28:31:75:99:E9:40:18:D6:D6:E2:42:D5:3B:80:49:CE:87:3B
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 019846647508CB593ED393FC89A597F2BC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number: 0C69
Signing time: Sat 26 Jul 2025 11:00:45 +0000
Manifest this update: Sat 26 Jul 2025 11:00:45 +0000
Manifest next update: Sun 27 Jul 2025 11:00:45 +0000
Files and hashes: 1: 17FLk26rZWNpnvEJucbEAG-7zqY.roa (hash: qMmpcRGKwOqOR5+GsVwNkgRbdBAdNorVpaMiale+nXI=)
2: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: lLCbcqPxncEUzOO4NtWxuOjn3N6FAqaZeam9drsPvvA=)
3: bBGzNd5qGUUIPYH3-5zWMnwwyJg.roa (hash: 290Z2J6Jo9xanYpdqpciKr53wSmtU/PW4k3Qs+NnOTs=)
4: k29cbE30TGhu-1q8rRu7-jpqTg4.roa (hash: 9mQL8HUgIQzEZ7MXmoS/sUavd/K/UaaalJ5/ztoLSTk=)
5: s7mUu7WrVHVPJEBCCdi0H3bHpis.roa (hash: ExGJpFM76OJZURK1GFJNiBKKffY4pIrBrUBBm9tcC8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:75:08:cb:59:3e:d3:93:fc:89:a5:97:f2:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Jul 26 11:00:45 2025 GMT
Not After : Jul 27 11:00:45 2025 GMT
Subject: CN=c82928317599e94018d6d6e242d53b8049ce873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:04:04:04:47:38:95:ff:9b:c8:74:77:2a:
62:06:84:7d:6c:93:fa:9e:9a:35:0e:c9:70:68:f6:
93:5f:dc:0a:69:d9:a4:fa:b4:10:9a:9e:e3:bd:91:
c8:cb:2e:1f:96:b9:b4:d7:b2:0f:4b:63:e7:5d:b6:
75:cb:8c:42:99:1b:9a:e9:97:c0:5e:60:e7:c9:fd:
b4:8a:5c:ed:1c:3c:91:f4:e4:61:8b:49:c7:ba:25:
f9:8f:b2:fc:43:11:f6:1e:62:16:04:26:32:cf:c9:
1d:e2:4b:30:17:de:bd:03:16:b4:a9:10:f5:de:85:
55:da:b6:e9:31:00:9b:75:70:6f:f3:0f:8b:ed:bd:
f1:88:a3:9c:d3:cd:41:ec:65:49:4c:81:53:e2:16:
6f:5e:d9:76:fd:7b:6f:6a:b9:56:40:b3:c4:50:04:
b5:e2:e6:1e:05:94:b7:09:85:c6:9d:ce:bb:73:2b:
40:42:da:80:98:1a:da:a6:be:70:18:95:95:bc:23:
ca:de:c3:be:44:91:9a:99:3f:9a:c5:96:52:81:88:
44:ec:00:23:fc:14:79:80:c9:da:3e:ef:0b:ad:fd:
fb:24:4b:ab:cb:65:19:30:bf:64:1a:5c:70:d3:bb:
53:2d:70:5a:61:60:5c:54:56:2c:37:9f:7a:df:2c:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:28:31:75:99:E9:40:18:D6:D6:E2:42:D5:3B:80:49:CE:87:3B
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:39:8f:0a:dc:a2:91:72:78:89:78:ab:b6:78:87:27:ba:46:
67:c3:82:59:d6:9d:e0:6a:15:3d:8c:8e:15:4c:c6:e9:8f:61:
9c:78:8b:2c:fc:0a:8b:eb:3a:1d:fd:0f:56:35:fa:07:ef:d3:
a9:cd:fb:8d:d6:c8:2f:64:d2:5c:bd:cf:2a:f3:6c:b7:98:16:
b0:85:a4:23:dd:92:d0:a5:d7:a9:b4:0a:12:40:ef:ce:f8:c5:
45:61:3e:8b:24:85:3c:8c:71:3d:e8:13:cd:23:e6:4e:a3:8e:
8a:53:13:e3:f9:5e:88:64:d7:7a:84:3f:e1:ef:52:31:19:16:
42:d5:ab:b2:e2:33:74:a6:56:99:3b:45:f0:cd:73:04:a0:5a:
b3:98:06:72:e5:a9:9a:1a:ec:5d:c4:b3:22:af:d0:5a:aa:db:
81:9f:5b:ec:1b:6e:50:cd:b8:48:a2:5d:2a:50:a6:03:05:43:
5f:07:bb:7e:b5:78:9c:b3:a4:60:aa:d8:5e:2f:ca:54:4a:3a:
0a:d3:2e:c5:f2:27:56:f5:83:46:69:d9:6d:b6:0d:3f:84:a5:
a4:11:ac:c3:89:8f:b9:a6:84:bd:67:5e:51:82:70:ff:f8:54:
53:26:09:f2:ef:c7:57:bf:b2:67:b7:32:1c:81:d1:fe:fc:09:
22:66:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:10 2025 by rpki-client