Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: 716HystylmP53twNUqGOj1iKq21wtco3ELJu9ftSsPs=
Subject key identifier: FC:67:B0:6B:9E:3F:E7:C8:7E:11:63:B3:A9:C9:0F:17:F0:11:2D:68
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019851C406D5F9347D5021DFAAF503F5D45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 131E
Signing time: Mon 28 Jul 2025 16:00:57 +0000
Manifest this update: Mon 28 Jul 2025 16:00:57 +0000
Manifest next update: Tue 29 Jul 2025 16:00:57 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: GcU20sowJYJu/BhYEs2Fx2/hITrq03rimLvfpvZ8fb4=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c4:06:d5:f9:34:7d:50:21:df:aa:f5:03:f5:d4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Jul 28 16:00:57 2025 GMT
Not After : Jul 29 16:00:57 2025 GMT
Subject: CN=fc67b06b9e3fe7c87e1163b3a9c90f17f0112d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:00:62:c5:97:25:2d:fd:93:d9:c3:84:f5:
93:d9:4a:98:5c:a9:5e:6e:9d:4f:99:69:58:9c:bc:
b7:a5:4d:3d:20:3f:83:bd:ec:24:96:1b:08:6c:97:
44:16:5a:cb:de:a6:d7:ac:9e:ec:51:1b:f5:02:92:
34:95:c3:9f:45:97:34:72:67:98:a5:c8:87:23:89:
44:5e:7b:ce:e8:fd:55:88:b7:d6:3d:0f:39:3e:19:
d6:57:0c:76:24:17:75:d3:e4:53:ad:e8:37:18:b5:
9a:73:c6:e5:34:e1:bb:27:20:99:ad:8e:53:68:63:
0b:87:c4:7f:8b:65:ed:57:db:a6:c0:9d:1f:48:2e:
a5:ab:68:4e:6c:df:5c:8f:c3:5f:fc:dd:d7:82:5d:
ac:75:12:e6:87:5e:35:34:79:2c:71:31:95:42:f2:
ea:bf:e6:47:7c:4a:00:d0:5f:c4:62:03:f7:7a:7a:
44:78:fc:3c:68:0d:74:c4:86:73:b1:3a:88:91:1b:
8a:f1:59:13:9e:3a:df:e2:f9:3e:7b:6c:72:32:76:
bd:c1:60:e4:7f:4a:f9:ce:cb:71:8c:ca:b8:95:d1:
6c:ea:23:be:d6:71:4d:ed:70:bd:7c:b1:67:94:10:
30:0d:08:b1:ef:9e:63:0b:96:67:97:8c:d8:e0:4e:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:B0:6B:9E:3F:E7:C8:7E:11:63:B3:A9:C9:0F:17:F0:11:2D:68
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9f:6d:0a:8b:e6:9b:1c:bc:1c:dc:db:8b:f1:18:e2:65:06:
90:f5:09:7b:eb:b2:30:f5:b3:73:04:34:68:48:da:06:28:aa:
6b:9b:6a:88:e6:59:c8:59:b2:62:96:70:39:eb:0b:d1:c0:02:
00:77:4d:21:f2:82:9a:6b:60:7e:34:42:71:8d:e5:df:1d:20:
f0:8a:ec:e6:43:ea:10:f9:32:72:a4:52:a8:b0:dd:8a:49:a9:
4e:e6:15:bc:8c:1f:31:bd:0b:a5:ef:d6:00:4d:8c:3a:8c:66:
86:46:e4:2d:6e:ea:96:cf:fd:55:3f:4a:d3:48:72:80:8e:28:
7c:3c:fb:0e:4d:99:1e:a7:d2:63:f2:bd:ed:b3:30:ea:a4:b2:
db:09:a9:de:45:17:59:57:11:7a:ec:2d:ed:05:c8:cb:9b:86:
a0:e0:81:33:41:06:ce:85:c6:08:9f:6b:87:32:01:5e:aa:e1:
77:6d:47:0e:c9:19:65:c9:09:b3:fb:06:13:75:6b:f1:a3:0a:
d8:a4:7b:8f:06:41:75:63:5d:41:f4:5f:a5:80:01:22:70:64:
be:66:88:62:d7:0f:37:8f:cd:fc:c7:22:01:fb:6d:73:20:d3:
41:cb:07:e4:99:9d:a7:e3:2a:2e:aa:13:a8:59:f6:dc:57:12:
ef:aa:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:11:09 2025 by rpki-client