Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: 43eUiuMX6clJXersiiJP5fOS2QnOLSe/2CfSwdYvLYU=
Subject key identifier: A7:A5:0D:30:4F:C0:10:57:06:F4:DC:49:5C:62:74:CA:70:06:74:7D
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 01992D7E109D4E02FF84814A8B25DBE7BAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 0626
Signing time: Tue 09 Sep 2025 08:01:00 +0000
Manifest this update: Tue 09 Sep 2025 08:01:00 +0000
Manifest next update: Wed 10 Sep 2025 08:01:00 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: phtJ1OQrAiuMiG7eCC56whNUVDhwIAYE/dgMkBzNu+k=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:10:9d:4e:02:ff:84:81:4a:8b:25:db:e7:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Sep 9 08:01:00 2025 GMT
Not After : Sep 10 08:01:00 2025 GMT
Subject: CN=a7a50d304fc0105706f4dc495c6274ca7006747d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:9c:0f:d7:4c:1c:f4:16:1c:62:02:0e:90:
1d:65:24:a9:e1:95:0b:f0:3b:66:4a:65:76:ba:c8:
3b:64:31:1d:34:e0:c9:7a:8b:be:84:da:3f:8f:c4:
17:9e:18:12:0e:c4:0c:20:59:c1:da:36:fa:13:ff:
97:f3:41:15:46:40:40:75:84:38:f5:ee:63:8c:92:
69:0e:01:2b:30:6f:29:83:75:b4:2c:b0:98:3e:8b:
49:49:e8:a7:a9:74:40:4d:43:f8:10:3e:d4:b6:42:
3a:fa:21:17:64:9e:f0:ed:e6:54:fc:2d:0a:bf:01:
87:74:9c:f8:10:37:de:7c:fb:93:ae:f3:d3:5b:c0:
64:6a:2e:86:da:23:8f:fd:04:40:29:d7:63:bc:5f:
17:ea:12:37:59:19:a6:4e:3b:f3:f3:3e:19:81:e8:
50:eb:89:62:cb:89:98:47:d7:63:16:ea:ae:f4:a9:
ed:f2:0b:df:40:e7:38:21:5c:3c:a3:54:28:59:b1:
e6:d2:33:6e:b2:91:fe:6a:c6:ba:46:61:83:e6:4f:
e4:07:73:38:84:38:0a:15:b9:37:c2:cd:81:56:cb:
27:46:74:70:53:cf:76:d3:40:5b:df:8e:b2:3f:da:
96:4e:6e:17:d5:94:e2:cc:ea:68:63:58:d8:40:4b:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:0D:30:4F:C0:10:57:06:F4:DC:49:5C:62:74:CA:70:06:74:7D
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:5c:a7:48:5b:c2:48:9b:25:92:36:80:00:df:35:a7:bd:
1b:03:db:7e:8a:a5:98:9c:6a:83:07:b6:27:66:97:20:30:dd:
be:21:15:1e:89:1c:45:44:4b:3b:1b:73:81:61:5e:69:0b:54:
09:c4:b3:c8:e0:35:2a:51:39:db:4e:f2:cd:b5:43:f0:5b:e5:
79:b3:e5:ed:02:4b:d2:75:08:aa:88:da:f0:64:47:94:e2:56:
a8:46:0b:df:e9:27:72:f6:4e:40:29:97:d5:47:1f:43:c0:c3:
86:26:87:04:54:e7:bf:47:d7:bb:17:00:94:19:3e:12:a4:43:
56:0b:36:b6:4b:62:0b:d4:e4:f9:51:70:fc:8f:40:de:54:e0:
cd:82:74:48:30:ff:d1:2a:64:6e:33:54:f2:16:da:bc:28:07:
d0:f0:c9:66:75:49:be:12:71:57:fb:28:bd:a0:c8:a2:08:86:
59:32:39:d8:65:2d:60:bb:da:02:33:5f:33:32:f3:fc:c0:76:
d6:7c:8f:92:df:96:71:83:34:3d:d1:fa:cf:9e:0e:37:5c:fd:
8f:b9:c0:84:0c:6c:39:fd:5d:be:e8:ce:36:77:58:91:fb:ae:
6f:5b:5d:51:c2:e2:8e:59:50:8a:96:4e:7e:e8:a1:d2:75:3e:
ad:79:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 15:48:32 2025 by rpki-client