Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: 1ldZ17jWhAgKNUjzL6TQVxe4kkVWomF54veb9uTW67E=
Subject key identifier: F1:A4:D7:90:35:46:3C:BC:25:CF:84:5A:7B:C9:B6:3F:96:8C:34:18
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019922559D9BF1B2FC658677AEA33816E2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1338
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: dpY5kqfbi4bzRVZjUUj+qfxfsx53sn/aIVb8W5sERWQ=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9d:9b:f1:b2:fc:65:86:77:ae:a3:38:16:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=f1a4d79035463cbc25cf845a7bc9b63f968c3418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:39:a5:8d:23:9a:4f:81:41:6f:39:98:0a:
c3:c1:53:9b:18:96:d8:b4:9d:6c:91:bf:d9:e5:69:
76:55:7e:1d:e0:7c:be:ed:2d:b6:ce:81:17:87:15:
fa:b4:3d:7e:cc:19:06:af:51:b5:08:57:02:6b:49:
39:ad:da:71:91:b5:01:8a:18:53:75:5b:50:07:c0:
6e:be:51:e6:e2:fd:fd:f7:b4:97:10:25:b9:5a:9e:
6a:09:18:87:55:6a:14:c4:d4:9d:8b:14:fb:69:ae:
be:7e:ae:b4:0b:42:10:45:cd:77:e6:06:8d:c5:99:
a7:92:08:30:42:2f:1a:77:8a:4b:f8:cc:00:75:6b:
c3:ca:05:af:bb:62:11:c0:05:8b:ec:5c:ba:a4:fa:
7c:cf:61:b3:4a:ac:75:87:2d:eb:8c:5c:d7:29:7a:
a3:f8:a4:d8:0f:c8:f3:e6:20:f1:c4:f3:1d:ef:20:
b8:da:30:42:65:87:2d:64:9b:7a:06:7d:65:27:9f:
46:2f:84:92:34:70:86:94:8e:c6:80:63:28:49:b5:
6a:e6:5e:f3:fc:f9:e5:d7:16:13:3d:24:c0:87:bb:
06:61:cf:75:90:09:6a:6c:7a:e1:9e:8b:70:b1:aa:
9a:ec:28:d1:6f:6d:1c:ab:c7:42:89:be:6f:a3:fe:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:D7:90:35:46:3C:BC:25:CF:84:5A:7B:C9:B6:3F:96:8C:34:18
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9b:83:30:9d:ac:f6:40:e8:be:7b:34:d9:1e:83:2a:9a:77:
37:ee:03:8d:6e:7f:a7:66:d0:3b:28:3b:3c:ca:1b:37:b1:7b:
2d:6b:b5:c5:80:f1:01:0b:fc:e2:d4:f9:e2:1e:2c:ea:8a:e1:
82:06:9a:a2:15:12:c4:29:57:b7:76:51:0b:eb:8a:b6:02:7a:
14:d6:45:d7:ee:f8:f5:4c:2f:f0:f5:fa:b7:0c:2a:67:cb:51:
0b:57:06:0c:fd:57:23:d9:19:e8:6b:df:8b:48:f4:f6:7e:2a:
8a:fa:0c:b6:33:af:79:98:8b:8a:f8:6c:b8:a3:5c:0c:fc:62:
c7:9f:e7:65:b6:a5:46:e7:70:92:4b:df:9e:b8:dc:7d:8c:92:
1e:77:b2:0a:5c:21:c3:5f:fa:b5:56:6a:b5:ea:2a:1c:49:32:
83:e1:ed:57:94:f8:8d:5a:56:b6:ff:cf:4a:e9:ad:44:e5:c3:
ed:e7:65:21:b9:63:df:61:b7:09:9d:f6:04:14:50:30:0c:8c:
e2:82:e1:d4:43:f7:e4:89:74:90:7e:ca:73:fe:74:54:2f:1b:
34:90:46:0c:4e:d4:26:b6:d2:a1:b6:9a:a1:3f:82:50:80:aa:
22:3f:f3:89:6d:c5:ac:42:e0:d2:5b:76:ae:e8:96:50:92:4a:
00:bb:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:06 2025 by rpki-client