Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: IyXeo2W4W6L+kqHAOL0jrFSU2YIzo0UsI2p/F4Zqzko=
Subject key identifier: 12:F1:89:D2:7C:CD:96:A7:9E:F6:8D:73:52:44:8B:FF:33:66:0D:7C
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 0198C67FBFC58B46C0B05F2F800B0FB1B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: AF
Signing time: Wed 20 Aug 2025 08:01:57 +0000
Manifest this update: Wed 20 Aug 2025 08:01:57 +0000
Manifest next update: Thu 21 Aug 2025 08:01:57 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: +JmmDly7uaIcARvCuVG1pYtBDoa2yCUvcb/68k3clZI=)
2: 5hUwO1deIxtsaDVJppuYNB_xPhA.roa (hash: cZ6SshMBGBGCASxx2lUXi7wQmA74gXz633wC/Vk5q0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:bf:c5:8b:46:c0:b0:5f:2f:80:0b:0f:b1:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Aug 20 08:01:57 2025 GMT
Not After : Aug 21 08:01:57 2025 GMT
Subject: CN=12f189d27ccd96a79ef68d7352448bff33660d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:a9:7f:51:48:c5:9d:54:93:e8:cf:b3:91:
64:df:26:55:62:28:46:1c:07:a3:2b:f1:77:8a:3f:
20:02:f9:97:c7:7e:3a:7f:9c:4a:f1:73:df:f7:96:
84:33:99:fe:b6:f2:f2:1a:2e:f6:d6:a8:d2:50:20:
c5:1b:6b:db:ee:f1:44:24:e5:ee:26:a9:cb:d8:ec:
5e:4e:96:f0:76:4b:5f:42:b1:b9:92:06:ef:8e:8f:
4d:d1:6c:4c:0c:a5:3a:e3:9a:98:78:c0:aa:f1:26:
5b:6f:44:56:f8:39:8f:c6:2f:dc:c3:b6:47:06:bb:
46:80:b2:da:f3:3a:ac:86:86:46:40:f1:1f:d3:8d:
9b:88:db:91:9c:77:d2:bb:ae:eb:0e:c1:8d:0c:a8:
47:17:fe:09:e1:44:54:c2:af:cd:0a:f6:03:60:a8:
79:38:1d:87:82:c4:7e:87:a6:39:4b:46:11:f6:d1:
e8:fd:78:03:a8:99:30:11:a1:07:7c:97:b6:cf:87:
96:7f:dc:5e:7a:bb:96:19:9a:71:72:f4:e8:ee:69:
87:22:42:2c:6a:89:7e:8a:2a:ef:17:f0:84:b6:3c:
38:d4:00:d6:09:92:09:8e:9d:62:3b:9d:53:03:64:
b2:6d:27:86:b4:b7:5f:14:5b:9a:6c:f3:03:7a:d5:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:89:D2:7C:CD:96:A7:9E:F6:8D:73:52:44:8B:FF:33:66:0D:7C
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:dd:53:0d:de:ff:2a:49:b6:ce:a6:94:35:bf:05:38:8c:
ae:c3:b4:e2:e6:0a:00:c1:e3:0d:2a:45:8e:1a:88:6f:30:e3:
1c:f4:2f:b5:bf:ac:ab:96:f1:1b:a8:a5:f1:b6:68:b1:fa:b9:
30:5d:85:f1:91:15:8b:90:cd:6f:41:45:cc:f9:c3:56:23:98:
9d:d0:68:d8:8d:60:6c:51:65:b0:74:73:db:33:a9:71:9d:40:
34:13:5b:82:a0:63:53:ab:df:94:e5:51:09:67:75:87:66:a1:
62:69:75:f5:89:75:8c:7f:fe:e3:b0:39:7f:d6:1f:22:0d:05:
89:8d:fd:3e:5f:eb:4b:f2:6c:65:ea:0f:d4:42:ba:d5:4c:50:
b1:11:c5:f6:1f:2b:b5:c1:6b:1a:f7:dd:54:be:b1:65:d3:3e:
9a:28:3a:cc:98:97:6b:c5:e1:e8:6c:f5:8b:50:52:20:9b:0b:
23:6c:d7:02:48:dd:ed:fc:cc:3e:dc:41:e2:42:5c:3c:a6:d6:
6b:a1:31:73:6e:82:36:8e:9f:65:19:a3:c1:7a:ca:94:34:a3:
d5:49:a3:eb:cd:54:7b:a0:de:d8:5d:41:51:a0:0d:6c:04:06:
e6:19:ab:c9:cc:2b:6e:b5:e6:99:95:ec:66:0e:79:11:77:87:
35:8a:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:29:14 2025 by rpki-client