Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: kxkL5PhI+nyOdBEjKAbhSKVy4Rqh3Uu0YjTRTDWAQMA=
Subject key identifier: 9F:4C:DD:10:36:56:BD:50:E8:89:E6:D5:C1:D6:E2:CD:17:29:A2:CF
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 019922C30149DC03CECCEB5BC9D2932F04CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: EC
Signing time: Sun 07 Sep 2025 06:00:29 +0000
Manifest this update: Sun 07 Sep 2025 06:00:29 +0000
Manifest next update: Mon 08 Sep 2025 06:00:29 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: x4jiQbmUoZe+pT1dt16d1NckfEYbD9l8MTIBuaX4dHI=)
2: KIJNA59uDb5jeuperkH1ytHHaXY.roa (hash: FNj6mHvJhlFniaYHRv1Jg0zqnMbw0aJyG3OHR4imABM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:01:49:dc:03:ce:cc:eb:5b:c9:d2:93:2f:04:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Sep 7 06:00:29 2025 GMT
Not After : Sep 8 06:00:29 2025 GMT
Subject: CN=9f4cdd103656bd50e889e6d5c1d6e2cd1729a2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:18:09:53:7b:fa:58:c6:76:d2:20:c0:9b:
04:13:81:8a:8d:8f:79:9c:ea:2d:00:de:48:7c:0d:
a8:15:42:d2:b0:e6:1e:41:83:8a:66:66:0a:b3:b2:
27:13:62:cb:fe:50:84:d1:0c:7e:45:d7:6f:f4:81:
fa:bb:86:0c:9b:21:79:33:f4:9f:d0:53:1f:03:b5:
15:bc:de:56:bb:30:49:9f:ef:ce:fa:0c:99:f6:62:
71:a5:c2:23:9b:7c:d2:f9:b9:66:65:5a:a9:90:59:
dc:db:24:0b:e6:46:bf:8b:39:37:f3:cf:51:6d:ea:
1b:c0:fb:f8:66:bc:ac:b1:6c:57:84:3c:5b:ad:b8:
1b:bb:2b:d0:38:c3:fc:94:30:30:83:75:69:81:38:
33:e9:e8:c5:b8:4b:4d:d0:dd:a9:ab:5b:7f:b8:ff:
1c:20:8f:80:13:a7:11:f7:9f:33:8c:fb:40:cb:c9:
f1:e8:72:29:eb:ef:8a:c1:59:ca:81:b5:43:d8:3e:
8e:24:a1:ae:b0:01:1e:85:b4:f5:45:a6:c5:9a:21:
09:15:75:1f:bb:18:a8:09:fb:66:8a:13:44:d4:d0:
f9:da:9c:f6:b9:25:ea:bf:52:e2:24:fa:97:4b:b3:
ff:dd:c5:29:c8:2d:b6:95:35:82:4b:db:e8:75:be:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4C:DD:10:36:56:BD:50:E8:89:E6:D5:C1:D6:E2:CD:17:29:A2:CF
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1b:40:00:00:87:4c:56:75:37:f5:30:83:a7:2b:d6:36:08:
d6:59:eb:2e:9c:d1:57:0f:72:1f:8e:79:d6:a5:12:e3:41:49:
6c:01:7f:a0:27:38:bf:9b:a9:70:64:03:f0:fe:f2:ab:6a:a3:
7b:45:bb:07:5f:cf:e8:f0:51:86:29:07:8d:23:7a:96:9f:13:
89:2e:a2:a2:04:b4:a9:01:1f:a4:9a:d9:0c:61:34:74:6f:f8:
b2:7d:2c:15:0e:f7:04:93:c6:44:f4:b9:68:a5:e1:40:fa:14:
84:7f:99:14:b1:2f:5b:48:1a:47:4a:b3:12:b2:fc:7b:9c:22:
49:e7:4f:f3:f7:19:34:38:ee:24:cb:51:d3:8c:e5:f8:15:42:
84:19:1d:16:09:10:f8:21:1c:2f:c2:c4:9c:a2:dd:e1:75:86:
1b:8c:f9:cf:0e:ba:c3:41:09:74:66:7d:75:a1:57:ad:93:61:
93:5c:ea:6a:e9:72:ed:03:42:c9:7b:5e:23:b2:4a:fb:73:46:
8b:62:54:c0:dc:27:8c:ee:03:a2:78:68:5e:59:93:50:4d:96:
29:95:2b:1d:37:18:2a:f7:86:4f:b0:78:25:11:6d:01:68:4f:
94:1c:8c:ba:62:f1:66:00:a3:51:f8:bd:ce:d9:b6:40:85:a2:
44:0e:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:10 2025 by rpki-client