Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: 86d1uE3kiGO51jWDsWbh6YQCJHaECcnkP0hMKbgN/9w=
Subject key identifier: E5:E7:B1:0E:B5:75:92:9F:E6:2E:3B:7D:FC:A8:DF:12:DF:85:B6:03
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0198C724617A16B50941FFACF974434999A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0C1B
Signing time: Wed 20 Aug 2025 11:01:46 +0000
Manifest this update: Wed 20 Aug 2025 11:01:46 +0000
Manifest next update: Thu 21 Aug 2025 11:01:46 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: K+ySXFZ16qOGwWvuo44NwHVLyVm1yVwV1aXuBPbKBhU=)
2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=)
3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:61:7a:16:b5:09:41:ff:ac:f9:74:43:49:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Aug 20 11:01:46 2025 GMT
Not After : Aug 21 11:01:46 2025 GMT
Subject: CN=e5e7b10eb575929fe62e3b7dfca8df12df85b603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:ee:27:9a:69:82:52:b6:1d:f5:db:bc:de:
48:81:f0:67:81:be:6f:6e:c7:b6:89:9f:5c:ef:4a:
c9:38:a3:85:7d:7f:f7:f7:48:99:57:e1:bc:d8:c4:
03:3b:5a:56:0c:85:5f:d5:1e:64:68:b3:29:62:e3:
20:27:78:66:12:1b:f2:ae:58:52:f6:c2:51:2a:fe:
c1:73:4b:c9:fb:4f:00:a3:3c:9b:20:ce:dd:2a:40:
70:b8:61:eb:6f:ea:d5:d3:9c:14:71:b7:00:57:23:
f9:e6:ea:d4:f1:ef:6d:94:c6:37:d6:d7:72:a7:42:
45:5d:4b:6a:83:ad:50:40:99:28:d6:76:de:14:7d:
e1:73:ee:f5:42:93:39:0f:5f:93:34:a8:f5:58:3e:
2f:da:7f:7a:b6:d9:b8:d8:9b:4f:8e:a9:6d:75:d4:
ff:bf:f9:d1:31:ca:f4:e9:ee:9b:fb:d7:75:a3:54:
a6:8e:58:e9:88:62:6d:d7:fc:f5:1a:03:68:cf:50:
2b:58:fb:fc:ac:df:91:d7:0d:a0:f4:a4:d6:2b:04:
d1:73:93:b4:c6:ed:ea:68:99:90:55:64:32:d2:3d:
56:6c:d6:f2:ec:66:a4:9b:41:46:89:cc:3a:d2:ad:
68:0e:26:48:b2:e7:1f:3d:aa:70:a0:96:59:f0:d5:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:B1:0E:B5:75:92:9F:E6:2E:3B:7D:FC:A8:DF:12:DF:85:B6:03
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:ab:4a:44:d9:cb:5b:86:33:eb:71:cd:80:13:71:45:86:
70:b8:b2:6e:27:37:15:c8:c4:45:df:63:e7:2c:59:42:9b:75:
61:9b:6f:a0:30:67:71:c5:bc:62:7f:49:7f:e3:40:a3:27:ce:
97:be:da:ff:cc:5b:50:b1:5f:34:e7:e8:e9:fc:63:61:1d:68:
04:28:fe:89:86:ed:ba:c3:18:17:59:c9:78:6b:9c:e2:99:ce:
4c:0a:ea:8c:b0:4d:d9:e2:60:73:fd:1d:60:3c:e0:55:84:d1:
6a:a5:08:c1:a6:80:bd:fb:6c:62:09:b6:ca:bf:c5:3f:2f:50:
33:c3:35:da:98:e2:d7:17:a1:9f:dc:9f:13:60:4e:f7:a2:4a:
ff:89:08:bb:1d:80:d9:de:9f:af:ae:eb:ca:68:6d:3f:ad:66:
24:e6:78:80:6e:8d:ee:d5:e9:48:1c:46:87:ff:4e:a5:af:cc:
36:39:4e:b6:5a:26:ce:df:7f:79:48:31:f6:2c:51:a0:1c:b4:
4c:c9:bb:39:e7:ab:78:22:8e:91:19:58:c8:e6:b0:73:4d:46:
98:27:df:1c:69:fa:f5:2b:a1:48:88:8d:a1:33:58:a2:22:16:
54:3e:84:1a:d7:f1:c7:8a:49:85:7a:0a:69:7e:88:aa:47:4c:
a8:c2:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:03 2025 by rpki-client