Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: i4Vq/PNf7IPW/8ZnAvm1HjlxFEb13NpdNqC1qA+iAyE=
Subject key identifier: C3:59:86:EF:70:4D:05:76:07:50:A4:C1:F6:A6:02:BE:2E:BE:B8:34
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 01992A7C7EDB1227D0AA745C0F28A2CA6B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 10D3
Signing time: Mon 08 Sep 2025 18:00:25 +0000
Manifest this update: Mon 08 Sep 2025 18:00:25 +0000
Manifest next update: Tue 09 Sep 2025 18:00:25 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: buKxDvmiWLhlWbp0BbginqPOPEcvwWANfrgDKSJyhqk=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:7c:7e:db:12:27:d0:aa:74:5c:0f:28:a2:ca:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Sep 8 18:00:25 2025 GMT
Not After : Sep 9 18:00:25 2025 GMT
Subject: CN=c35986ef704d05760750a4c1f6a602be2ebeb834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:82:56:1e:ba:4b:2f:f2:fa:3b:3e:1b:04:
ef:2c:9e:dc:09:a0:bc:ce:b3:5b:4f:86:a7:6f:7f:
a8:d6:d2:95:eb:f9:f0:7b:33:78:51:9b:5e:c6:01:
36:9e:bd:73:4a:42:9a:35:97:e2:94:61:a1:37:96:
5d:0e:3d:e4:1b:72:46:30:1f:a3:2a:ba:3e:f3:6c:
af:bd:9e:f9:8b:34:11:fe:9e:2b:27:f5:e5:94:ae:
79:5f:22:49:29:1e:dc:ee:36:c2:8e:4e:cb:79:f7:
55:88:79:db:81:9a:95:3d:1b:39:d2:3f:92:55:c4:
04:a3:62:f7:1b:3a:7c:ca:c6:21:22:2b:86:e0:fe:
bf:ec:83:52:c0:34:39:e5:46:37:96:9c:20:a0:fb:
ec:39:e2:53:b5:14:5a:c4:ca:99:74:c3:1b:7e:f1:
4f:ef:0d:14:8e:f6:03:e8:46:e2:4d:60:6f:d3:ab:
51:93:f8:d2:f1:92:6c:32:90:92:53:1e:90:9c:f2:
32:ab:8b:7d:18:5c:f0:08:3b:5b:9d:59:a5:22:5d:
f1:4f:46:d3:01:a2:e8:47:12:08:59:9a:0e:ad:1b:
22:11:95:3c:95:f4:98:6d:81:cc:e2:22:54:89:66:
ec:be:9a:86:e1:8e:96:eb:26:40:e4:0f:73:65:4e:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:86:EF:70:4D:05:76:07:50:A4:C1:F6:A6:02:BE:2E:BE:B8:34
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:6d:72:da:b8:c0:5b:75:33:a0:fd:31:a6:65:78:de:d7:
88:93:99:c8:bb:3d:28:e7:85:a5:fa:09:68:cf:1e:8b:c7:84:
6f:2f:96:f4:5b:cf:2a:51:e9:51:16:45:15:94:2c:8c:ca:4d:
92:a9:e0:c7:8d:6e:45:21:ac:a0:f7:f1:73:43:d9:81:51:50:
e5:89:79:24:d9:8e:ed:d9:a5:04:89:95:be:ec:38:00:2a:cf:
6b:0d:3a:fc:73:f2:ee:6e:4f:ed:e7:8b:f7:48:84:51:bb:36:
7d:33:be:ef:a0:8a:c9:2e:f5:1f:48:78:4e:39:7d:06:96:97:
ca:92:3e:37:0d:b3:04:17:19:6f:7d:af:43:ad:12:9a:a1:5b:
d0:cb:00:27:d4:91:f0:3b:c7:b0:bb:a9:60:fc:23:12:ca:b2:
ac:a7:42:d5:19:f3:de:9d:08:09:af:05:88:b7:a7:01:eb:6f:
33:70:e0:0f:30:c6:2b:d5:25:eb:6c:0d:d0:b7:b6:0c:f4:4a:
21:1b:6a:8d:e3:a0:bc:46:4d:93:6e:92:78:18:90:d2:ab:30:
ee:04:67:f5:1a:70:05:f1:08:c2:05:3d:81:16:1b:6a:21:0f:
e6:1f:61:a0:e3:1f:9a:3b:0d:d6:68:f8:c0:62:e8:3f:22:a0:
40:c9:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:39:20 2025 by rpki-client