Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: q98VNuZylqxt/KFmmFDun2Bc9Xj3qreODwl/4qe7uks=
Subject key identifier: 17:0E:34:E2:02:74:D6:5E:BD:B6:20:FD:E7:8D:DA:E3:02:81:43:70
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 0198C6EDBDA53FEE96F22FB3285A8D2CBA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0890
Signing time: Wed 20 Aug 2025 10:02:05 +0000
Manifest this update: Wed 20 Aug 2025 10:02:05 +0000
Manifest next update: Thu 21 Aug 2025 10:02:05 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: rRkX4rHrh8/qXvQ7j0ZYTMpNsI2OheokPTGq286LWd4=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:bd:a5:3f:ee:96:f2:2f:b3:28:5a:8d:2c:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Aug 20 10:02:05 2025 GMT
Not After : Aug 21 10:02:05 2025 GMT
Subject: CN=170e34e20274d65ebdb620fde78ddae302814370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:87:81:51:3d:b3:8b:10:5f:35:36:5b:c5:
6b:25:2d:9a:14:7f:49:61:25:2a:85:53:98:51:2a:
3b:45:28:37:6e:33:31:5b:87:ed:f8:91:9e:d2:0d:
de:bc:d7:52:db:91:78:81:11:8c:d6:ac:59:5e:57:
e3:7f:be:09:73:b8:44:86:c1:95:f8:31:ae:f7:e1:
81:74:d8:3d:2b:8b:d0:5c:63:2a:96:31:08:53:3f:
cc:37:84:c3:dd:b9:59:e3:d7:04:b5:82:2a:37:c4:
7e:1d:14:f9:f5:7f:1b:53:58:d3:00:c1:7a:1a:12:
c4:2d:99:bf:cf:50:1e:26:bf:e7:68:b1:03:ac:ba:
3c:2f:25:ba:89:62:1b:a7:68:cb:55:05:ee:54:6b:
0e:b2:46:9b:d6:95:c7:5b:19:12:9f:f1:d0:a6:09:
d4:66:34:ce:f4:cf:86:ea:ef:d9:41:d6:9f:10:de:
16:e6:64:ad:f8:24:e5:6c:67:d1:f5:bb:a2:9c:11:
92:c0:a7:6d:18:88:1d:f0:b6:3a:86:0b:63:ad:94:
e4:c7:70:8a:35:77:37:54:8f:af:0a:23:3b:2e:0e:
74:2e:ab:99:27:06:0c:b7:77:ed:13:44:a0:45:10:
73:06:eb:ea:5b:d7:fd:bd:1a:90:f0:cc:a5:63:51:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:34:E2:02:74:D6:5E:BD:B6:20:FD:E7:8D:DA:E3:02:81:43:70
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:63:16:17:6e:26:12:de:a8:db:ac:57:3c:60:53:a7:3c:b8:
fb:b3:05:2e:af:31:74:a7:ae:29:bb:0b:5e:26:4d:3b:d8:3c:
c5:e4:50:3c:88:0b:c0:b1:ff:a3:5d:af:9a:2a:b2:f7:fc:91:
f0:f4:4c:12:be:f4:76:94:95:ce:89:cd:0c:f4:d2:51:61:a1:
a3:06:94:0f:8d:7f:c3:b1:21:11:99:a4:2c:55:14:8e:db:64:
1b:36:09:50:2a:af:93:37:c9:53:6e:4b:0f:6c:78:ab:b7:bd:
4b:e2:80:80:28:8a:2e:17:b0:0e:5a:fa:3b:fe:44:68:f8:88:
b0:e3:eb:0e:58:18:0c:f5:12:3f:11:7e:3c:16:d5:28:7d:95:
71:d5:ff:41:c3:42:e1:db:56:0f:86:ea:56:42:73:1f:53:76:
8f:6e:02:08:6c:43:12:67:dd:51:57:a6:ad:38:20:9b:d0:12:
45:c5:13:5f:3b:ad:96:a0:e8:8a:fd:14:b1:24:e8:e8:c1:5f:
92:8b:60:22:1c:47:ed:35:7a:8a:66:b1:90:eb:8a:17:b1:8c:
55:5f:45:a6:96:94:86:00:a0:09:fb:ec:5d:0a:e1:b3:84:00:
88:82:b4:79:ff:e5:b0:cf:72:99:ba:fc:40:0a:c0:a0:5b:3e:
b7:b1:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:18:12 2025 by rpki-client