Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: dIv0Ejk80D1s8cjmu9dWtzV3zJudQawgW3c6rNPyrmM=
Subject key identifier: 58:F8:18:4A:24:9F:D3:46:5E:F2:D5:E1:CB:6A:E3:BA:B3:03:81:3C
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 019922C3A6F0AC40AB7D25E2D49F00ECA21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 01F1
Signing time: Sun 07 Sep 2025 06:01:11 +0000
Manifest this update: Sun 07 Sep 2025 06:01:11 +0000
Manifest next update: Mon 08 Sep 2025 06:01:11 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: ZEvuVa5WnDb9HefSTrdCU/fNIlX6EeFXBZuvipQY7+Y=)
2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a6:f0:ac:40:ab:7d:25:e2:d4:9f:00:ec:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Sep 7 06:01:11 2025 GMT
Not After : Sep 8 06:01:11 2025 GMT
Subject: CN=58f8184a249fd3465ef2d5e1cb6ae3bab303813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:01:4f:dc:ba:2d:03:6e:a6:0f:ae:3e:ea:
9e:f9:5b:91:a2:3b:d7:ac:4d:ed:bb:2d:27:11:a5:
e3:0b:ea:b9:a6:9c:ca:68:45:05:8b:65:e6:f7:3f:
f2:2a:0d:97:92:44:2f:d2:0f:3b:aa:c0:1a:4d:af:
fb:c0:00:ba:dd:bb:20:71:7c:f3:f7:9e:9f:36:f4:
9b:b1:91:46:59:78:bb:91:24:e4:2e:a1:ac:8d:6b:
39:fe:91:eb:15:ca:57:37:78:ed:0f:fe:be:5d:35:
36:13:f3:e3:ef:2e:14:bf:ef:79:92:03:f4:2a:e3:
41:11:d8:a3:ba:02:72:4b:38:98:ce:d6:32:7b:55:
35:d2:8e:c9:b4:71:cb:d1:ec:9d:4f:c8:3a:f5:99:
b6:1c:80:09:54:85:11:45:a4:05:0a:bc:30:8b:a0:
f0:99:38:a9:85:d0:95:9d:97:1d:3f:70:d5:17:77:
bf:ab:a6:a2:58:c3:10:a5:6b:0b:11:a5:03:43:32:
d0:8a:da:29:54:27:c7:fa:4c:5f:50:15:7a:73:d9:
92:49:aa:be:02:45:17:2e:2c:d4:97:47:fd:d6:33:
b8:eb:fb:96:c4:a5:04:17:fc:47:78:b6:c0:81:45:
dd:53:c6:10:07:bb:9c:f4:4d:80:cc:a8:51:88:0b:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:18:4A:24:9F:D3:46:5E:F2:D5:E1:CB:6A:E3:BA:B3:03:81:3C
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2b:89:a5:9a:1c:f0:17:ae:68:73:fd:de:01:97:8b:7d:83:
cf:c1:fc:e2:71:1d:58:86:65:b0:24:8f:52:16:ea:e5:a7:f4:
e4:f0:64:c7:23:e7:d8:f7:94:59:b8:6d:b8:e9:7b:25:94:2d:
02:8b:b7:20:f0:56:48:73:14:06:d1:fc:39:a8:03:90:74:9a:
9f:85:bf:f2:fd:d5:3e:62:1c:e1:d0:65:71:5c:bd:e2:79:e2:
46:68:c0:53:4a:f8:f4:7e:f8:dd:75:b5:cd:6a:ac:c7:1b:ab:
3f:76:39:61:26:63:40:c4:f7:d8:4f:33:ae:e4:8f:64:84:b2:
61:97:5c:86:84:0a:f2:75:ab:be:15:05:ef:89:74:b2:c6:e5:
19:49:05:15:98:be:cf:e2:0c:45:66:cc:a1:46:77:b9:60:28:
91:62:be:49:c0:be:b3:ab:b5:6c:07:69:08:a1:f8:91:07:eb:
f9:f7:a6:13:4a:ba:e2:93:92:9d:de:0b:71:86:26:2a:a4:68:
d5:46:16:6e:79:ca:8c:2c:c9:e2:c4:a5:94:58:c5:4b:ca:04:
db:cd:79:9e:32:74:f7:55:6e:4f:f2:1c:f7:22:21:14:d6:bf:
31:d0:a9:48:55:ac:6d:ce:2b:7d:ff:db:7d:6e:53:18:b5:74:
d1:02:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:30 2025 by rpki-client