Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: pdyiJPVg8UaLdAJQeH3+08O8CPzuw9AeZGit2KJw1YQ=
Subject key identifier: BF:DC:95:83:E9:35:1D:1D:9C:DD:91:0A:6F:64:15:88:7C:76:CA:69
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 01984B538B3B4AB48E17CF3D037839CEB791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 1115
Signing time: Sun 27 Jul 2025 10:00:22 +0000
Manifest this update: Sun 27 Jul 2025 10:00:22 +0000
Manifest next update: Mon 28 Jul 2025 10:00:22 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: dznHsnQkBMIJ4QJfK4kYhScrU5Qa9ZKrRbKBLnFWxI0=)
2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:8b:3b:4a:b4:8e:17:cf:3d:03:78:39:ce:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Jul 27 10:00:22 2025 GMT
Not After : Jul 28 10:00:22 2025 GMT
Subject: CN=bfdc9583e9351d1d9cdd910a6f6415887c76ca69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:90:df:2c:3b:01:90:2e:a9:c6:3d:8a:99:
ec:26:9f:2a:5b:00:03:6f:3c:d7:f2:05:35:85:49:
19:1a:c3:a1:f9:86:13:1c:09:50:1b:c5:4c:c4:36:
72:db:7d:c3:e5:40:95:4d:2c:1c:dd:7f:7e:d8:0a:
d1:6e:f1:7d:1a:1d:6c:c7:8b:3e:20:be:93:0b:9d:
90:a9:ad:b6:7b:2b:7b:55:2b:76:23:a9:70:01:af:
7b:f7:27:ed:a9:8f:a5:c3:6f:1a:e2:6b:45:c2:eb:
7d:92:79:d6:5e:f4:9b:22:d5:e3:eb:aa:d8:d3:c0:
97:50:1d:9d:18:fa:4b:c0:de:c1:7d:1a:6a:79:46:
1e:7e:d2:84:1a:6d:56:3a:f7:85:c1:50:28:ee:ec:
03:f5:d4:bb:0c:b2:70:c4:9c:5e:ff:45:3e:e5:c8:
c0:71:2d:ec:dd:3b:ca:7e:5d:b5:54:7f:d1:33:38:
03:91:80:3f:af:23:ee:ec:1a:66:48:f4:f0:44:ac:
ac:96:c8:07:c4:8b:ff:73:bf:9c:8c:88:02:3a:75:
42:f2:3f:fe:31:97:e4:8c:7b:42:94:0c:cb:10:24:
7c:18:96:74:2b:fe:00:be:93:97:ec:e9:58:ae:6f:
82:a0:44:74:64:6b:95:01:f7:89:cb:c2:ee:69:49:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DC:95:83:E9:35:1D:1D:9C:DD:91:0A:6F:64:15:88:7C:76:CA:69
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:25:62:48:04:87:19:eb:84:57:44:d9:c2:98:d9:fe:45:
06:35:10:39:49:f6:76:b0:2a:54:4e:14:35:f8:9e:0a:38:ac:
6a:98:0d:64:a5:3a:1a:dc:bb:98:7d:18:6b:e3:75:42:4e:ee:
28:1a:99:b8:33:a5:06:3b:b8:31:35:14:3e:59:38:3b:34:39:
63:66:85:a2:5b:8c:a4:6d:4b:e0:6d:ea:34:dc:1c:bc:82:43:
35:8a:68:88:45:d4:39:99:65:c7:6e:fc:3d:ca:a8:c7:09:49:
73:20:3e:92:f1:c2:eb:0d:78:77:a1:ef:1f:6a:e9:07:ab:a9:
3f:78:bc:e2:19:3c:0c:9e:7b:a1:12:e7:03:40:73:b8:4f:e0:
63:89:5d:be:7c:2d:93:49:98:51:79:03:4f:65:32:8f:3a:be:
68:36:c5:ac:bd:2c:ba:2d:80:3a:58:24:6c:88:02:43:2a:f3:
0a:f2:6e:c1:cd:82:33:89:dd:b1:92:e9:96:1e:09:ad:b1:d6:
fb:41:aa:6d:51:d6:6f:ec:87:8e:4f:c4:30:5d:c0:60:e4:81:
e7:35:45:01:41:cd:5a:52:0b:7f:53:a1:fd:3e:5a:07:1d:b6:
88:7f:68:16:79:41:bc:5e:9c:e9:ef:76:4c:45:b5:bb:e8:5c:
f8:4b:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:30:13 2025 by rpki-client