Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: HQUp+4Or7DvVSdJSr6QIg5OhIBIwByFd01Afx9VcRw4=
Subject key identifier: A1:C1:6D:78:C8:6A:D1:8B:F7:1A:09:E0:6C:D1:65:2A:C3:9F:54:8D
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019921E78EE08A7FAC96D6BC91D5E16E2CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:00:47 +0000
Manifest this update: Sun 07 Sep 2025 02:00:47 +0000
Manifest next update: Mon 08 Sep 2025 02:00:47 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: F/q9dPKOZ5pfgE9PE2s2sx6QgJ5FhmL2nfqqcRFtByE=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:8e:e0:8a:7f:ac:96:d6:bc:91:d5:e1:6e:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Sep 7 02:00:47 2025 GMT
Not After : Sep 8 02:00:47 2025 GMT
Subject: CN=a1c16d78c86ad18bf71a09e06cd1652ac39f548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:b6:27:0a:c0:3c:6d:4b:84:ba:6a:14:ce:
0e:3b:c3:87:24:39:25:d0:77:ec:ef:12:27:0a:9e:
52:45:a7:47:74:0c:38:a7:08:2c:2f:8e:62:d6:d7:
c3:e8:e3:b1:b7:91:9d:bf:e2:31:3f:d6:da:85:31:
26:3c:75:7c:e2:4f:7d:44:44:ac:e1:86:04:74:5d:
df:05:69:f5:41:b4:52:44:20:95:0b:b2:d6:07:38:
1d:f5:2d:52:ce:44:eb:11:af:dc:52:ea:45:cc:9f:
69:ad:87:fd:b0:22:ea:30:7b:45:45:bb:93:8d:b0:
b7:e6:05:5c:03:a2:1d:27:07:f7:c5:91:fd:6d:fe:
6d:bb:67:22:cf:23:fc:08:f6:a1:35:91:17:0a:c2:
ea:1e:7a:a9:9a:8c:a8:80:d5:ba:c2:8f:b4:ce:92:
fc:ac:41:a4:dd:e5:f8:02:d8:c7:ac:d9:71:4d:7d:
3e:4f:8f:ad:1b:82:18:b0:e7:a5:7e:15:7d:8b:d7:
d9:4d:fd:b4:b3:0a:88:ca:75:12:31:cf:a0:6b:65:
a0:d3:11:e4:2d:e7:66:2c:df:38:9f:b6:15:72:64:
13:53:8c:8b:ea:14:6f:b4:ee:98:d5:8e:b2:d1:f1:
4a:1b:be:66:a4:05:ab:41:6e:3c:14:ac:09:7a:a2:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:6D:78:C8:6A:D1:8B:F7:1A:09:E0:6C:D1:65:2A:C3:9F:54:8D
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:3b:d1:08:e4:07:67:7b:89:a0:60:88:4c:b3:52:d2:61:
2c:78:2a:db:8f:81:bb:5c:af:16:cb:88:4b:c5:4e:cb:84:4c:
e2:3a:f8:8f:ae:b2:8a:72:9b:df:31:56:13:ab:5f:0b:db:51:
f6:71:8b:42:71:99:b1:69:01:84:46:d1:b6:b8:de:88:a2:d5:
69:44:b7:9a:1d:e8:19:02:e6:1d:ad:7c:5f:f9:74:93:f3:99:
da:ec:1c:54:ef:55:ad:a6:64:43:7c:0f:ab:25:f3:bb:c3:19:
11:07:72:77:3e:ee:9e:f5:4b:9e:25:f4:5e:eb:24:bc:74:fc:
1e:d9:0b:c3:5e:cf:30:c7:1e:7f:98:c0:5d:e7:a6:aa:73:f3:
8b:2d:46:62:2f:86:d4:69:6b:27:d8:6c:e5:bd:43:8f:bf:ca:
7c:88:b8:f6:a7:05:9b:94:b1:8d:89:6d:7a:9e:29:ca:05:37:
fe:6b:4e:34:9c:aa:7d:4b:bd:7d:b4:0e:28:57:dc:a0:1f:16:
69:b6:63:ef:fe:84:40:2c:c2:12:21:27:7b:a9:9e:29:b8:44:
d8:9c:5f:05:73:bd:05:64:e6:9e:a6:08:19:86:7b:62:52:fc:
56:ea:7b:81:4e:f5:3e:7f:14:ef:a4:54:96:0c:d6:72:e5:56:
fe:41:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client