Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: Eo+/9PWB4XTFVfqhx0Edf6vQvLLmGnlNaMfWxFLJHq4=
Subject key identifier: 5B:89:17:D5:AC:85:B2:F0:A0:5C:CF:84:E2:4D:CF:54:56:1F:3B:48
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 019922FA5091531E95F81EC1B8C10D55E745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:00:53 +0000
Manifest this update: Sun 07 Sep 2025 07:00:53 +0000
Manifest next update: Mon 08 Sep 2025 07:00:53 +0000
Files and hashes: 1: 0LdCYiyoo_rQZDLAQK9EXmWdrLs.roa (hash: ii+DUPaWPj2PKPLgx9rgU4vJhM6MjQajOc4FBEHl1O8=)
2: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: U1igM48j9XRhZvyfC+knvifJD8LmIaFsdKZFpTxjtz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:50:91:53:1e:95:f8:1e:c1:b8:c1:0d:55:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Sep 7 07:00:53 2025 GMT
Not After : Sep 8 07:00:53 2025 GMT
Subject: CN=5b8917d5ac85b2f0a05ccf84e24dcf54561f3b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:9c:9b:ca:18:10:c0:fe:c7:72:32:80:2c:
77:02:8c:bd:ed:8f:d8:1e:c7:d8:c1:f9:03:36:17:
cc:89:a8:40:26:98:ba:fd:84:a8:02:eb:79:5d:2c:
9a:26:dd:c4:6a:9c:63:26:71:74:71:71:1b:db:da:
05:d3:09:cb:50:a2:02:78:54:fd:38:27:41:31:5b:
1a:94:76:e0:00:ea:99:2b:59:71:cb:d3:21:84:60:
25:49:00:3c:ee:f9:3a:74:7b:9a:45:55:8c:05:ad:
79:ee:5b:51:6f:82:cd:a5:f5:1e:39:f5:93:7a:6c:
4a:fb:ec:61:59:19:bd:eb:a1:f3:fa:4e:d8:0f:5e:
1b:93:d9:ab:05:68:e3:d3:31:58:9a:ac:88:30:be:
86:e2:1d:e0:0c:5e:1c:bb:de:34:ef:81:3a:36:11:
dc:0e:f6:f7:b7:fe:31:30:01:3f:4d:dc:52:9e:80:
09:8d:2b:53:a1:97:ca:94:b9:02:da:32:ea:a6:1a:
ad:7e:79:03:ec:1f:61:a3:36:9c:69:f5:9d:e6:d8:
65:6f:5a:62:9a:3c:51:66:2d:82:61:91:d5:c2:e6:
29:c8:7c:b2:db:a5:2f:53:9e:16:9e:4f:3c:9d:b0:
03:8b:15:f6:f1:4c:58:7d:91:92:1d:32:5b:dc:89:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:17:D5:AC:85:B2:F0:A0:5C:CF:84:E2:4D:CF:54:56:1F:3B:48
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:05:2c:66:bc:89:e9:4b:59:9d:00:73:16:ac:6b:5e:71:df:
08:26:d5:83:02:cb:d0:11:4c:10:3c:5c:72:50:42:88:ff:91:
f9:32:d6:12:8e:df:34:bf:e3:a6:b2:cc:14:12:5e:fc:fb:bf:
4a:5f:07:c2:57:15:64:b3:48:49:ff:46:58:e5:da:e5:f2:f4:
05:71:4b:a4:5d:c0:c2:68:ba:bb:e1:05:14:20:d6:23:d6:ba:
b9:40:11:60:3e:b7:70:14:fb:a2:ba:1e:38:86:3f:2c:b9:93:
dc:bf:c4:2a:bb:13:b3:b7:f1:f7:d0:af:76:b2:13:58:53:d8:
19:fb:86:a4:20:06:93:07:86:30:5e:25:8f:61:10:0c:68:2d:
c6:e8:f2:22:f7:d7:da:e2:28:77:06:01:43:63:60:c8:4a:6e:
88:5a:3f:89:8c:ee:03:61:c6:2e:11:a9:aa:d3:79:5a:cc:e4:
45:41:69:b7:19:87:c3:b8:07:72:f8:9e:66:8a:6a:70:18:1b:
69:80:68:49:05:54:e9:81:6f:8b:78:a6:6a:0d:5b:f7:77:ec:
88:33:4b:8b:36:6c:97:89:e3:58:53:61:7b:57:bb:4d:71:89:
e0:8a:dd:90:40:65:73:22:ac:db:a8:71:5a:b9:1f:54:e6:7d:
47:ba:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client