Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File: 2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier: RAS45RXOBhyp1ZzBuE3lh4zTtJJhH3IwsXi2E6V2zNE=
Subject key identifier: F3:CA:C9:2D:EA:0D:BD:9B:91:E8:CF:1A:15:1F:98:27:63:D6:BF:07
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial: 019921E7D0F91E0C121EDC86291D6782F22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number: 0EF0
Signing time: Sun 07 Sep 2025 02:01:04 +0000
Manifest this update: Sun 07 Sep 2025 02:01:04 +0000
Manifest next update: Mon 08 Sep 2025 02:01:04 +0000
Files and hashes: 1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: 2nxlQAjeuU2r3SxmsFJj63s5ZnTAz2AcCLqUoO8gD+Y=)
2: eiMs1L-2oXZyMFT4lsivxnF_7rI.roa (hash: 0CKxvXKh07lSdtj09xAAc1IiwY6cm22Ml7wMgfzveTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d0:f9:1e:0c:12:1e:dc:86:29:1d:67:82:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Validity
Not Before: Sep 7 02:01:04 2025 GMT
Not After : Sep 8 02:01:04 2025 GMT
Subject: CN=f3cac92dea0dbd9b91e8cf1a151f982763d6bf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:8a:dc:90:a7:02:45:a1:ef:ee:d7:ed:f3:
fb:fd:4b:63:55:37:ea:69:f1:1f:c0:de:90:e0:d1:
e1:ad:eb:0f:5a:44:b7:94:ec:fd:5e:c6:c7:a8:27:
5e:b7:40:1b:6d:50:d4:4d:b4:1c:53:a0:19:b8:16:
ec:16:1d:fd:1f:cb:dc:e0:55:47:a4:f4:47:eb:7e:
03:bb:2b:61:82:40:b0:98:54:50:32:ae:f6:20:62:
45:80:90:2b:c9:b5:bb:14:64:ff:68:56:92:88:9a:
74:36:37:b5:38:08:de:2f:ab:e8:ab:71:e6:2c:fc:
b0:5c:57:55:88:03:ed:49:49:3f:1e:67:9e:7c:d0:
85:f0:33:90:df:93:ba:e0:b3:99:e5:5c:5c:4d:14:
cc:92:9e:5c:24:1f:9d:55:5f:bf:33:2c:1c:0b:49:
3c:8c:5e:8d:b5:a4:33:3b:01:73:1c:89:de:fd:62:
c0:31:82:e1:84:3f:d7:e5:d9:0a:1a:17:bb:68:d8:
ac:26:ed:ec:56:13:73:47:d2:2c:66:e3:4a:65:f6:
e2:13:6b:6e:9f:19:01:89:49:ac:89:78:cc:63:f1:
71:35:d0:da:2a:d5:d6:af:4a:4a:bc:30:4a:7a:35:
8c:59:61:19:55:26:6c:5a:f1:af:c7:66:cc:bc:83:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:C9:2D:EA:0D:BD:9B:91:E8:CF:1A:15:1F:98:27:63:D6:BF:07
X509v3 Authority Key Identifier:
keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b7:c5:3d:53:ae:f4:3e:2b:3c:7c:98:29:f3:a8:10:cd:0f:
36:2b:cd:fa:55:ad:27:bc:c4:27:bd:fa:c3:79:29:59:e4:c1:
03:c0:1c:da:4c:42:4d:66:d5:93:bf:d0:24:19:7f:72:76:8c:
3d:e4:b1:86:ca:1a:80:52:da:52:65:a7:52:b5:e1:55:41:1c:
61:ac:23:32:ce:ba:79:d5:e3:f6:94:3a:66:b9:0b:13:f1:b1:
39:47:7d:c9:ac:2d:14:b8:69:b1:d5:a4:b7:39:c3:9b:5a:96:
ef:23:55:1c:34:ef:43:c5:ed:1e:ff:fa:3b:d5:8f:fd:6a:ce:
45:ba:94:d7:8a:82:ac:18:7a:56:2b:c4:34:0c:dc:38:b3:12:
40:68:14:40:dc:fc:05:55:17:52:4f:6f:45:78:30:30:23:c3:
e7:6f:07:b3:da:4a:80:6f:6c:f1:51:e5:8d:8d:68:c6:d1:1c:
b2:11:65:b4:ef:66:0a:cb:94:4b:02:50:75:9a:40:7f:ee:94:
ed:00:ce:ef:a9:ad:88:29:4c:77:df:3c:a2:83:31:67:c2:52:
9e:41:d5:d9:e7:b3:13:4c:f9:c3:5f:d6:fc:22:08:63:af:e3:
ba:01:c8:f8:34:e5:d6:6a:59:7e:8a:bd:29:85:ea:d0:23:02:
78:da:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:39 2025 by rpki-client