Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: AZalWgdMDefwftzDM+2d+aB1zVmcG9vpN3HmGzIbCeM=
Subject key identifier: 46:6B:D6:BC:67:B1:EC:9A:C0:57:74:8E:4E:A1:EF:2F:AF:D3:04:CA
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 0199228C957AF74DF1A2D28193053C00C456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 1537
Signing time: Sun 07 Sep 2025 05:01:02 +0000
Manifest this update: Sun 07 Sep 2025 05:01:02 +0000
Manifest next update: Mon 08 Sep 2025 05:01:02 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: e2iRA+6yQB90nUFCKX58Cyqan2H9bwAK2De4MzmiTVw=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:95:7a:f7:4d:f1:a2:d2:81:93:05:3c:00:c4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Sep 7 05:01:02 2025 GMT
Not After : Sep 8 05:01:02 2025 GMT
Subject: CN=466bd6bc67b1ec9ac057748e4ea1ef2fafd304ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:3d:69:45:8e:ad:fc:5c:59:8c:27:8a:f0:
e7:eb:3e:fe:84:44:0e:bb:69:e3:24:fc:a5:0e:9f:
9e:fb:1f:88:51:5b:33:4a:57:1f:3f:b5:6a:f2:7a:
c9:df:f8:09:05:b4:83:4c:96:4c:a2:d0:12:fe:af:
5f:f4:b8:46:ca:6e:b3:00:ba:18:79:d8:fd:88:f8:
b6:90:92:fd:0a:fb:8d:a4:84:f8:7b:6a:4e:fa:15:
06:aa:9b:0b:9e:46:8e:76:94:b7:14:04:ea:4f:e3:
5e:97:a0:29:4a:97:be:04:23:cc:91:16:90:d2:68:
9c:22:08:be:6f:f8:18:9e:16:00:bd:0f:36:4c:fc:
96:35:e9:82:31:97:73:14:3a:60:9d:c6:23:0b:5c:
89:c5:cc:7c:87:9b:de:b8:98:af:3f:8f:cd:4a:e4:
38:1d:f8:a7:d3:52:f1:58:81:72:d5:cf:40:01:36:
81:67:44:4b:37:1b:ae:af:06:d6:4c:25:22:55:a7:
30:35:4e:7c:07:2d:08:59:e8:af:d3:c2:59:77:ec:
c4:09:4c:fd:f6:02:de:66:84:92:c1:c2:b0:fa:ec:
ad:99:52:32:fd:9f:f9:2e:89:db:ee:e3:04:28:22:
1d:f6:c7:92:9c:28:93:bd:70:53:be:0c:45:0b:c3:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6B:D6:BC:67:B1:EC:9A:C0:57:74:8E:4E:A1:EF:2F:AF:D3:04:CA
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:00:9a:b3:29:0c:b3:21:88:18:a1:dd:ee:09:4f:f9:ca:2a:
85:66:b4:b3:96:eb:00:67:db:54:07:5b:19:2b:b1:ec:3f:97:
d8:5c:69:fb:e5:e7:f0:58:14:ac:77:6f:e7:31:39:60:ae:1c:
e9:3e:ca:8b:df:c5:2e:0d:d1:11:31:90:e1:c1:6d:2f:e8:c7:
22:80:55:83:58:7d:b7:ff:f5:40:2b:71:a8:a4:bf:04:36:9e:
b9:41:a2:f1:6f:d2:11:9f:3d:d3:1e:b3:d6:ae:60:cc:83:8c:
7d:9b:60:6a:55:9f:0b:b6:e3:17:c5:c9:d0:5a:27:9a:1e:65:
10:2c:63:38:9f:8a:22:7b:c9:23:92:fd:13:8e:ef:c7:96:aa:
63:b4:c1:aa:0d:f5:fd:b9:7c:ab:78:70:94:41:af:10:74:bf:
2c:d6:9b:bf:36:1f:a8:d9:a8:b0:db:e8:71:52:1c:5a:1c:f6:
db:f7:88:d6:5e:12:d3:91:8d:40:cb:e0:e8:eb:c2:73:c7:47:
6d:66:fe:5a:07:cf:98:b3:67:77:32:d9:df:4c:a0:13:9c:04:
de:b1:a4:b8:d1:66:99:f9:de:82:8b:86:1e:c6:b7:eb:79:be:
a3:60:62:9a:53:05:cb:36:95:db:07:42:33:fa:11:43:38:47:
a8:7a:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:01 2025 by rpki-client