Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json)
Hash identifier: yZq3j7VKS8hlhxPMWruwHPW3PWi0yh/ZVVEyt6ERjH4=
Subject key identifier: 2B:6D:4C:78:0D:87:61:F5:57:BF:38:5E:62:DB:1A:BE:1B:6D:32:DA
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial: 019922C3A3A666E6B97DC88BBCBCF77F4503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
Manifest number: E2
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: B9IzXLL2ixuUY8NCctMry3Z9SSY.roa (hash: LgY0TUvH+7Vh/0iBbmvFVKw12ZRzdi35NQADfuagyL0=)
2: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: vSQ3OIDKjlOHQCJyTXkQrCH4+12tDFgY8tAeAsjLqTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a3:a6:66:e6:b9:7d:c8:8b:bc:bc:f7:7f:45:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=2b6d4c780d8761f557bf385e62db1abe1b6d32da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:05:40:44:53:7e:14:7d:bf:82:2f:33:93:
c9:2a:82:76:36:eb:61:ac:59:a6:b9:3e:0f:9d:73:
bb:c9:33:d4:e8:5d:52:e7:f7:9a:67:90:9b:c4:5c:
e8:11:29:af:a2:21:2f:14:2d:1b:7e:7c:6d:68:5d:
62:12:40:d2:fb:32:f2:e1:e9:a4:a2:62:ee:9a:08:
f0:af:22:36:eb:aa:d7:75:5e:dc:88:66:66:18:8e:
57:b7:4f:ca:3d:ed:df:97:75:64:cb:18:1e:a3:f9:
0f:0d:0d:7e:a5:33:ad:fc:df:74:1e:1d:2d:31:c1:
97:cf:02:09:b8:67:53:20:22:65:16:56:9a:01:9d:
3a:37:2c:31:ca:39:56:c6:af:2d:00:fe:59:ab:0b:
a7:bc:f6:96:48:b4:b4:da:a8:b7:eb:b5:91:ae:b3:
17:46:ba:ec:c0:b3:d4:7d:0b:ae:1c:d9:20:a7:0d:
b6:b3:54:4a:73:e3:da:53:76:66:c9:77:89:40:6a:
2c:9a:a0:6f:67:73:db:11:1d:28:cd:24:a1:31:b8:
e0:ea:ac:a4:7f:df:db:01:c7:a1:37:3f:92:73:b0:
e5:29:b0:72:d2:d5:a4:de:15:39:8f:b8:0f:53:d9:
50:c9:3e:86:70:33:9c:5e:7e:d2:59:a1:23:f3:7a:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:4C:78:0D:87:61:F5:57:BF:38:5E:62:DB:1A:BE:1B:6D:32:DA
X509v3 Authority Key Identifier:
keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dc:cd:8e:47:df:71:df:57:d9:d0:e2:a0:e0:f7:e7:a1:32:
00:77:3e:c6:9a:6a:37:d2:d2:77:4d:98:e7:6a:bc:5f:5c:98:
ae:57:d3:4d:11:c2:b5:9e:23:75:0e:87:46:40:08:86:b5:5b:
19:8d:bb:b3:cd:17:d7:a1:61:b5:4d:3a:cd:ec:54:a3:94:5e:
00:a2:a6:94:52:5b:2b:5a:c5:33:01:39:0d:2e:c7:09:4e:85:
e6:7e:b7:7f:f7:7e:60:4f:eb:dd:46:2c:4b:a4:e1:32:0a:0c:
ef:64:b0:8e:7f:58:ff:a8:4b:73:c8:b1:79:1d:ad:8f:0e:49:
1d:94:b7:94:14:d9:30:a5:00:eb:c7:a4:05:6e:3b:fe:de:22:
01:62:c1:8c:d7:98:ed:b2:3e:d3:f5:57:45:19:a9:f9:23:70:
b2:65:e1:16:b6:9b:28:04:aa:7c:d1:5f:77:e8:59:20:71:c0:
d6:ec:cb:59:8a:8b:33:8d:71:28:cb:71:22:22:9b:b2:ee:f2:
6c:c2:ce:fa:c7:53:87:9e:b3:97:5d:fe:95:38:da:63:58:72:
89:16:51:2f:1a:e9:45:4b:75:95:2f:b1:0d:44:41:95:20:a6:
65:fc:c7:21:b7:5d:db:ed:af:7a:2d:d6:a4:34:d7:5b:bc:d6:
57:24:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:24 2025 by rpki-client