Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: 1+r+/WOhvPPFY0qd83/6pWsm6ThcO1b2WgyfX3Qclww=
Subject key identifier: 73:00:D0:F4:75:22:55:C8:B2:1B:68:88:AD:52:68:6A:AF:EE:4C:58
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 01994E88F6C77BD5F80625287CCCB1AE2342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1689
Signing time: Mon 15 Sep 2025 18:00:22 +0000
Manifest this update: Mon 15 Sep 2025 18:00:22 +0000
Manifest next update: Tue 16 Sep 2025 18:00:22 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: VIiWGdrzOxg2mjilgaA+QrnjppfR4PYhQbxzAokuerk=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:88:f6:c7:7b:d5:f8:06:25:28:7c:cc:b1:ae:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Sep 15 18:00:22 2025 GMT
Not After : Sep 16 18:00:22 2025 GMT
Subject: CN=7300d0f4752255c8b21b6888ad52686aafee4c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:77:c1:fa:4a:21:2a:51:e2:55:1d:59:92:
ad:b6:14:59:56:a4:71:c6:3f:8c:35:b7:c3:e3:3a:
d5:b8:26:b0:da:4e:8c:a6:f2:0f:b6:5a:53:59:c7:
8d:12:10:59:99:fb:7e:40:60:a9:f5:9e:e3:79:ff:
7f:c1:8d:f5:ed:47:b3:8a:c3:51:05:58:8e:69:b3:
88:95:9b:1d:1f:ec:dc:4c:05:90:91:48:75:f0:85:
80:d8:ef:89:dc:90:02:43:64:5f:82:e7:7d:85:99:
c3:48:f1:d0:fc:a2:02:d6:7b:24:8f:75:1d:28:6f:
8e:e0:e5:07:62:59:d8:a3:5d:fd:36:f7:af:3c:41:
6c:5f:cf:0e:26:76:e6:69:3f:81:8e:e1:09:73:f5:
0a:52:c6:6a:4c:92:35:57:0b:61:d0:aa:7e:86:70:
c1:b9:62:04:ec:88:d1:64:e1:be:60:89:f6:ce:28:
dc:a0:8a:e0:e4:8f:12:30:5b:65:3b:a5:fa:ab:26:
02:be:c4:0e:02:b1:90:6d:ba:49:40:aa:3b:b6:d8:
46:90:5b:9e:eb:60:32:a1:5e:6d:fb:7d:5b:34:0b:
d2:ce:21:23:c9:52:1b:21:e9:c7:60:c2:07:de:b9:
50:c4:76:0f:0d:ee:a4:fb:51:fe:da:8b:50:1c:a9:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:D0:F4:75:22:55:C8:B2:1B:68:88:AD:52:68:6A:AF:EE:4C:58
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:37:0f:14:40:cd:56:6f:e1:8c:18:a8:b7:b9:12:48:d0:
3d:e7:11:ec:4e:ea:92:cd:7f:2b:d8:b8:10:6e:ad:17:05:a8:
f5:c4:cb:1f:82:9f:d5:f3:26:65:a1:b3:d9:2f:02:24:5b:96:
7e:a8:23:81:6f:84:bd:02:35:d1:6b:60:5d:b3:22:bb:40:c7:
36:b7:2c:2b:85:d1:26:d1:d9:ee:88:4c:01:74:98:89:7b:27:
8c:98:3d:11:84:26:02:93:f2:c9:84:94:8c:72:84:a7:57:ad:
44:81:3d:fd:fe:32:2f:44:eb:6f:41:80:12:0a:26:cb:9e:06:
15:55:4e:6f:86:e0:ff:52:93:6d:7d:41:a3:5b:b8:1a:35:cb:
45:fe:28:0f:18:8d:89:37:af:11:93:db:a5:b5:20:db:68:bf:
53:fd:3c:11:7a:37:64:19:3d:ee:f9:13:dd:c9:cf:6e:29:bb:
45:de:6d:76:48:3e:4d:1d:2c:f3:b7:7e:a8:85:09:82:6e:02:
60:3d:4b:ec:06:92:b8:11:ae:00:c8:3f:3c:70:ac:98:aa:ac:
52:02:8b:ac:e0:10:58:fa:81:8c:00:55:41:7a:91:72:f0:5e:
7a:76:19:ce:8d:7d:d0:c1:25:43:e4:f8:42:c4:14:e9:aa:a2:
30:e3:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:24:50 2025 by rpki-client