Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: zR8eXKFSpKzXCppR7Dwd9HQPkp3YeDOv9ACaTHIwVf4=
Subject key identifier: 28:B6:35:E1:03:DB:B4:6C:93:CB:AA:49:0D:E9:F3:C9:3A:3D:A7:B2
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019923A046FC33B71DA40EF757BD52EB90A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0D19
Signing time: Sun 07 Sep 2025 10:02:10 +0000
Manifest this update: Sun 07 Sep 2025 10:02:10 +0000
Manifest next update: Mon 08 Sep 2025 10:02:10 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: 5QHFt/JS5+BTvUWgzaWxZYATwyCQeYuFS/U30BaaZPk=)
2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:46:fc:33:b7:1d:a4:0e:f7:57:bd:52:eb:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Sep 7 10:02:10 2025 GMT
Not After : Sep 8 10:02:10 2025 GMT
Subject: CN=28b635e103dbb46c93cbaa490de9f3c93a3da7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:63:0c:ad:ef:fe:c4:bd:60:c0:c7:5d:2e:
8b:96:e6:ce:18:fa:27:d9:ac:bd:94:ae:1f:da:1f:
49:3a:b7:66:a7:c0:e9:0c:c1:dc:b5:5e:1b:9b:68:
f9:33:8b:43:2e:08:8d:d6:92:d6:56:f9:5c:9d:fc:
e0:8d:19:3b:35:be:8e:1b:4a:54:38:7e:8c:c9:19:
ae:32:12:d4:29:52:a3:9a:e5:cc:60:33:db:64:07:
7d:fc:ca:2d:1c:6c:0e:d5:c6:61:32:91:b6:1f:db:
64:2d:68:ab:cc:a3:47:c7:7c:09:54:ed:42:5c:a4:
ae:b9:aa:35:8b:b3:ee:b0:03:d0:43:25:83:84:60:
95:aa:ce:95:ae:70:78:65:0b:83:9c:c6:a3:6e:53:
7f:ac:7c:82:50:3a:10:d6:c3:fb:82:54:b2:75:7e:
85:67:68:87:f1:0d:57:97:ff:6a:99:cb:80:24:7b:
a9:38:a4:9d:11:2f:77:14:3d:43:26:ca:41:6f:6c:
e9:b9:32:00:15:a1:4c:53:d5:37:76:b5:70:5e:49:
a5:d3:d0:7c:86:59:d8:08:7e:c4:d3:0e:9b:d6:43:
4b:a4:16:89:60:a7:94:7f:3d:40:85:96:65:e3:7e:
64:0c:74:b9:c4:21:bd:01:e2:fe:52:4a:34:1e:ab:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:35:E1:03:DB:B4:6C:93:CB:AA:49:0D:E9:F3:C9:3A:3D:A7:B2
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1b:1c:be:0e:13:49:1a:0d:ad:b7:8b:8f:13:72:d1:05:03:
d0:fe:d4:7e:a3:17:bc:cb:8e:bd:63:b7:d3:3d:07:c2:ae:b1:
9f:81:f9:97:e6:71:9a:09:6f:01:ee:fe:64:6e:2d:6a:d3:fc:
cd:d2:d5:f5:5a:03:32:8c:36:93:3e:2e:e1:36:4c:b2:9c:5b:
12:04:24:c1:f7:09:32:30:c5:c4:34:e8:e7:67:5d:84:7b:47:
04:ae:ef:cb:a6:fa:60:e3:26:b2:84:c0:ac:5d:b4:eb:de:f3:
86:86:8f:f3:c5:8b:6e:67:2b:ad:79:d3:04:cb:50:06:48:fc:
9c:25:cc:4f:ca:24:3b:43:aa:9e:fd:ab:f9:a7:a1:02:2b:f6:
19:bc:91:ac:d8:5d:57:25:dc:20:f7:ab:81:98:53:1a:42:7a:
12:9f:d5:e8:67:6f:73:3d:af:0a:cf:df:73:0d:06:16:3a:f8:
fe:95:b9:97:cc:2b:4a:15:4b:6b:b6:11:de:99:6c:d8:c1:ad:
63:1e:0b:9c:8b:43:42:55:ad:11:ca:65:ed:bf:53:aa:18:22:
27:fc:30:d0:d7:e4:e4:32:d4:1c:b6:00:3a:f9:03:31:52:4e:
47:37:9a:38:00:fc:91:87:9e:96:8f:47:d5:5c:64:e4:ad:ca:
1d:17:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:28 2025 by rpki-client