Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: 8Y+CLKgWTJq3lj6/9IZpX99tlQvt3B4yc8bekFuWbZY=
Subject key identifier: 60:3C:06:CC:39:F2:54:96:C2:83:8C:D0:FA:AD:C4:11:BC:5E:81:16
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019916F67F3F1D7892003ACCAD1899EC765E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 166F
Signing time: Thu 04 Sep 2025 23:01:17 +0000
Manifest this update: Thu 04 Sep 2025 23:01:17 +0000
Manifest next update: Fri 05 Sep 2025 23:01:17 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: Nu8f8lLKjrSMwpYiUVLXShYlwgJj06+R50JVipRUNe8=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:7f:3f:1d:78:92:00:3a:cc:ad:18:99:ec:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Sep 4 23:01:17 2025 GMT
Not After : Sep 5 23:01:17 2025 GMT
Subject: CN=603c06cc39f25496c2838cd0faadc411bc5e8116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:e5:1d:06:f3:38:5e:19:50:ac:c9:5e:c9:
50:19:52:4c:79:4d:25:df:1b:8c:25:d3:f7:f4:73:
ee:7a:20:95:46:83:c8:2a:81:7a:e6:b7:cc:d2:88:
69:a0:25:0c:c5:b8:7e:ed:fc:84:30:06:72:25:83:
ff:9e:10:28:d5:68:52:de:02:b7:4d:4e:a2:dd:4e:
38:96:6d:2d:9a:cf:c0:8d:f5:cc:9c:34:fc:88:ab:
79:4b:1f:9e:dc:7d:00:32:7f:02:00:04:ac:c9:2d:
de:73:26:94:ab:b5:97:cc:1c:64:0c:b2:5e:a7:62:
63:38:81:62:f7:94:12:95:58:c1:45:78:64:d5:91:
d3:4e:e2:dd:e1:e6:76:e6:0d:f3:62:6c:aa:c0:f4:
5a:0b:f8:13:1c:3c:b5:05:5e:51:5d:42:ad:14:47:
6c:1d:c4:d9:2d:27:1e:59:0c:2b:51:03:80:d8:83:
d3:0e:1f:d9:1c:66:1f:a4:78:df:5c:e4:9f:01:c3:
8a:ed:a7:f8:ae:ef:8a:84:61:0a:c3:02:26:9f:9e:
15:e6:a0:43:6a:5d:22:e3:c0:11:de:c6:4d:18:74:
83:42:45:6f:eb:7b:02:95:38:0b:a2:bf:42:ed:fa:
4e:2b:ef:e5:7a:a5:9d:26:f1:2e:05:90:d0:89:84:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:06:CC:39:F2:54:96:C2:83:8C:D0:FA:AD:C4:11:BC:5E:81:16
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:46:d6:29:cd:9a:fc:3e:a7:8c:f3:02:f5:7d:22:a1:8a:e1:
a8:ec:74:21:8c:2a:4a:9e:ab:f9:93:de:a5:73:b9:2e:26:e7:
ba:8c:95:70:29:32:ad:05:00:00:8f:f8:78:b7:97:a3:50:c7:
f1:9e:a8:4d:53:ef:95:60:89:72:8c:ff:ac:c6:b4:b6:34:6d:
51:ae:48:6b:1c:61:0b:6b:e2:29:b2:e5:94:cc:63:b7:ee:fd:
1a:bd:a7:f6:b5:b6:09:3c:7c:4d:2b:a6:98:00:c5:f7:99:69:
45:82:ee:05:25:62:df:c4:1c:cf:89:f0:e8:9e:16:68:6d:f0:
48:6e:56:c2:06:8f:82:03:d8:db:d5:83:ff:61:69:59:82:5a:
74:fb:0d:a2:66:0f:b5:7a:02:e4:84:85:9b:f0:14:88:bb:0a:
7a:f9:cc:b0:c9:cd:a0:d7:f2:97:1a:3f:08:cb:e9:fc:7f:fc:
00:c4:79:1f:bd:7b:ed:d7:df:9e:01:13:eb:c2:eb:87:de:fb:
05:e8:ee:a9:50:27:41:2d:71:32:63:29:66:f2:65:32:8b:ea:
6b:98:84:fa:a0:ad:bc:eb:7a:38:5e:87:dd:15:bb:6f:88:b5:
91:49:ae:57:39:57:0d:58:a6:6b:15:d5:ce:ec:eb:49:72:95:
d2:d3:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client