Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: c6l4DqtyP/DiOB/VYXyySX34ES06Bk44I7JuE+7tRTo=
Subject key identifier: 5F:2C:02:43:DD:88:D8:4C:4D:31:41:AB:2E:FE:84:3B:C8:69:DF:DC
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 01991D2F56A9876334FC6B48D00DF0FC0D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0735
Signing time: Sat 06 Sep 2025 04:01:05 +0000
Manifest this update: Sat 06 Sep 2025 04:01:05 +0000
Manifest next update: Sun 07 Sep 2025 04:01:05 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: zBJQq2t7e3WgqCn3D6Zt5tFsFeeKv2KfUBV/qDKdHh8=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:56:a9:87:63:34:fc:6b:48:d0:0d:f0:fc:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Sep 6 04:01:05 2025 GMT
Not After : Sep 7 04:01:05 2025 GMT
Subject: CN=5f2c0243dd88d84c4d3141ab2efe843bc869dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:e2:cb:da:eb:44:bd:c1:8f:8d:f4:54:ab:
f0:23:c4:65:5f:47:bf:4e:af:aa:07:56:0b:de:2d:
69:bf:fd:34:8a:cd:31:92:2d:e8:f1:98:ed:81:f9:
d2:c1:3b:03:0e:35:41:6c:7f:b0:31:a7:63:67:da:
01:a4:9f:02:69:fd:dd:02:a7:67:b0:8b:ca:da:93:
f2:75:2f:2f:92:e7:8b:4f:07:2c:b5:9d:d3:eb:46:
06:50:35:2b:bb:e7:33:ea:09:8f:83:ae:6e:fb:63:
0f:4d:1a:fb:02:98:fb:e0:37:b9:55:77:71:f5:45:
06:52:4c:a9:c3:5a:86:09:b6:7f:1e:70:92:0f:e0:
03:1d:1e:e7:54:dc:31:9a:f8:cd:86:79:0d:24:15:
a4:45:cf:7a:7f:4f:98:70:1b:7f:e1:20:52:8f:7f:
fe:c0:f2:66:71:9e:4e:98:e2:0f:97:a9:d9:d4:8d:
44:50:ef:1d:8f:9b:70:cf:b8:41:04:4c:b9:6b:4e:
f3:5b:94:ab:60:de:fa:b9:b9:f0:6c:49:22:48:70:
ef:13:4f:c8:b8:f9:4b:28:12:2f:04:52:d7:90:76:
d1:66:73:ce:49:57:a4:d8:3b:69:c1:55:d5:0b:08:
02:59:52:55:bd:63:0b:0e:20:f9:6e:92:f8:47:15:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:02:43:DD:88:D8:4C:4D:31:41:AB:2E:FE:84:3B:C8:69:DF:DC
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:d8:95:2d:ce:8e:92:08:e0:4b:e0:14:1d:92:2c:35:6b:
3d:25:df:5d:79:0f:7a:be:36:31:2e:ec:e9:81:20:21:67:64:
18:8f:63:6c:b6:47:6e:73:5b:09:87:a0:5c:25:7d:db:25:bd:
1c:54:71:2b:1b:41:e1:aa:19:58:6e:b1:41:a3:82:dc:8f:bf:
83:31:a4:45:ce:cf:13:2f:01:f1:f4:3b:6b:cb:ef:38:71:3c:
a6:9a:f2:94:32:fe:0f:31:f6:ef:ae:f1:71:68:de:00:df:89:
91:93:68:62:cf:6b:77:7f:5f:30:48:a4:29:e2:b9:96:15:96:
27:1e:f4:41:c5:52:b4:e6:86:4f:6c:12:a2:f0:c1:11:69:1b:
35:a6:46:8b:0f:7c:14:b7:e4:67:e3:1f:2b:5a:84:46:51:21:
ec:a3:9c:42:43:a5:0e:45:43:d8:c4:89:38:21:99:44:0f:b7:
80:e4:9d:e3:b2:e5:e4:a6:a9:0a:af:55:e9:a8:f5:34:75:52:
4e:2b:58:15:89:66:63:36:5c:b4:7f:9a:00:4c:32:9e:93:13:
65:04:f5:fd:c6:4d:1a:96:2e:b8:a9:0b:1c:0d:78:26:90:96:
b7:2e:58:48:af:82:38:d1:69:03:0c:ad:ae:87:29:e0:6a:6f:
88:50:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:59:55 2025 by rpki-client