Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: I6UUx89OVj0gMJAjAS05nyLEWzOPa5DkQ+XRUvD0EZo=
Subject key identifier: 77:32:D0:28:EA:DD:AC:FB:6C:4B:04:9D:F7:A3:D0:FC:3B:B3:A1:A3
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 0199239EC55BEB7F83EB7F2DA73AD70A021B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 0AFF
Signing time: Sun 07 Sep 2025 10:00:31 +0000
Manifest this update: Sun 07 Sep 2025 10:00:31 +0000
Manifest next update: Mon 08 Sep 2025 10:00:31 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: YNjY/lV4yj8QcInpTd8CXxGgldp6iCp41CxeGyS5r9A=)
2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c5:5b:eb:7f:83:eb:7f:2d:a7:3a:d7:0a:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Sep 7 10:00:31 2025 GMT
Not After : Sep 8 10:00:31 2025 GMT
Subject: CN=7732d028eaddacfb6c4b049df7a3d0fc3bb3a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:53:0a:52:e1:9f:82:c3:f8:cf:c8:bc:b3:
52:66:dc:48:af:fc:72:e2:5b:a8:2d:68:6d:f9:9f:
6c:13:1b:4f:8a:6f:6a:4e:bd:f9:96:63:4e:46:46:
e6:d4:0f:30:71:1f:d4:de:f5:18:c0:b9:31:5e:58:
1e:a3:8a:9f:56:cf:63:9f:1f:9f:c2:df:dd:67:fd:
5c:99:7f:3c:2b:26:92:91:b2:2f:7b:c4:34:e9:64:
76:6d:f6:5f:7b:e8:47:09:6a:6c:3a:7b:b9:dc:56:
06:3a:b5:1e:14:9e:f6:f1:9a:a7:f1:d5:ba:89:ce:
48:43:bf:10:03:a9:ee:b3:8b:df:ae:ba:96:4f:b0:
9c:25:96:9f:33:b5:52:5f:61:c2:b1:f7:79:4e:d4:
60:4b:5c:06:e7:e2:ae:60:e4:91:0c:a7:3f:2e:1b:
39:a5:ea:d0:c4:5b:87:29:9b:ac:51:8e:4a:0a:74:
92:de:d1:75:45:52:ca:34:cd:92:49:52:d9:d2:c2:
08:f1:5b:4f:d7:72:b9:e2:43:09:28:96:26:9b:97:
c5:da:6a:1c:c5:e2:32:46:ac:31:9c:1f:f0:8e:9a:
97:e3:77:5d:18:c6:26:32:76:91:69:32:4a:60:6b:
7b:6c:a0:10:65:fc:95:a0:89:0e:1a:e7:56:1e:56:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:D0:28:EA:DD:AC:FB:6C:4B:04:9D:F7:A3:D0:FC:3B:B3:A1:A3
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:39:66:1c:76:8d:96:e8:fd:23:e1:db:e4:57:e9:7a:0e:
76:71:34:ec:fa:68:ca:9d:66:8b:e2:d5:b8:a4:5e:b4:0c:ad:
b4:65:d5:10:85:dc:4c:cc:49:74:12:9e:b9:a2:50:a6:09:1e:
f7:ea:7c:3c:aa:b9:37:8c:ec:78:4b:dc:d4:9f:84:f0:c3:ec:
ec:63:89:8e:f0:61:c6:2d:ef:62:51:95:c3:38:66:eb:8b:66:
cb:e3:cb:5b:fe:14:e5:01:73:7c:6c:97:04:ce:81:6b:85:02:
bc:56:45:0e:4f:ea:ce:2c:24:05:20:c0:01:bb:1b:43:18:49:
e4:72:70:40:12:5c:5d:48:52:34:48:42:23:f7:ec:02:82:b3:
63:98:29:70:9b:27:b3:17:9c:ba:ba:17:d2:44:6f:ab:c5:32:
26:74:a1:48:48:8f:df:16:79:08:29:69:78:e9:6d:e5:94:ed:
92:24:62:2a:a0:30:b6:be:75:af:23:45:6a:75:d0:b1:dd:a6:
6a:1e:1e:3f:b0:e5:10:c7:5b:c7:88:76:04:f1:4c:af:9f:ab:
dc:09:9b:7b:33:7d:cf:d0:90:09:d3:27:00:6d:40:cc:7a:ad:
1c:c2:18:29:f9:cc:28:9a:9c:02:04:a7:d7:e9:e5:25:8b:12:
c3:36:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:26 2025 by rpki-client