Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: cjVLhW9Obd5j+rzSXldfNoXCgHZKXbq4HPJrZo8tiVQ=
Subject key identifier: CD:BD:A9:1F:D1:4B:6A:6E:4A:FF:22:6A:B7:FB:14:CC:A9:09:50:BD
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019922FA176D30FF599966347FA8D2CDE046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:00:39 +0000
Manifest this update: Sun 07 Sep 2025 07:00:39 +0000
Manifest next update: Mon 08 Sep 2025 07:00:39 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: Xgw36EX8mb6PJ6tGTuJ4QD4vidbfQpboiotUdgWiAJI=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:17:6d:30:ff:59:99:66:34:7f:a8:d2:cd:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Sep 7 07:00:39 2025 GMT
Not After : Sep 8 07:00:39 2025 GMT
Subject: CN=cdbda91fd14b6a6e4aff226ab7fb14cca90950bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:83:29:ad:4f:50:22:72:92:ee:ba:d9:22:
5e:9d:78:5e:cc:5a:ff:41:b6:bb:68:88:d9:56:a2:
18:35:9d:2f:28:69:5a:ec:69:09:9b:58:dc:d1:a0:
70:76:3c:6b:e5:0a:dc:e8:86:3d:9b:66:28:a3:37:
a0:f1:b4:bc:27:f7:24:ae:da:9b:02:69:84:bc:26:
cb:49:bb:4b:5f:18:3c:97:05:a2:ad:c9:bc:33:12:
fb:96:3b:0f:d9:7b:87:bd:db:7d:41:e7:ea:fa:85:
74:d6:ee:9f:00:f9:c2:cd:84:70:b7:89:51:dc:ff:
e2:65:01:cc:c9:3e:81:10:88:f1:bd:24:71:42:38:
f5:f0:7c:fb:b3:6b:9e:eb:ee:a6:68:da:49:cd:5e:
06:86:38:60:5f:ab:76:71:2b:8a:1f:6a:8f:94:45:
ad:75:29:2e:50:98:fc:fe:1f:49:bf:4b:02:7b:c1:
5a:35:1c:73:f4:d2:25:24:ef:d1:5e:a4:75:e3:be:
e6:8b:ba:ac:8f:04:95:cc:33:57:2c:49:c0:4d:5b:
1e:85:c7:a3:c1:d5:4d:c8:a4:29:74:57:16:69:5a:
37:a4:41:fc:70:55:47:79:b6:a4:3f:f7:85:7a:51:
1e:3a:27:ee:74:ff:86:a0:0e:c5:4f:dc:f5:c2:dc:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BD:A9:1F:D1:4B:6A:6E:4A:FF:22:6A:B7:FB:14:CC:A9:09:50:BD
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:d7:22:af:bd:96:51:75:16:d2:82:cd:7b:d0:37:5e:e5:
c2:2d:bd:67:e7:6c:fc:c2:ad:c7:78:03:29:87:ea:fd:f6:d4:
4e:09:d3:0c:b8:c1:03:7d:05:29:88:a4:9a:d6:f0:3f:32:21:
b4:46:88:4a:e4:6c:f8:4d:18:7d:0f:0d:9f:aa:30:3e:61:40:
00:d1:59:7f:d0:77:39:85:e4:25:68:33:92:7f:16:06:76:42:
3d:fd:52:50:ff:ae:68:ee:63:3e:bb:5e:1e:ed:8b:ba:7d:1f:
2f:96:0b:b4:bd:46:f3:85:71:8c:9f:96:c5:e3:d2:79:9c:5b:
6a:dd:2e:c7:dc:60:b1:68:30:e9:69:11:de:e9:66:55:26:d9:
4f:1a:17:e3:a2:2c:9a:37:92:01:7f:37:7b:12:ca:c7:66:60:
4a:f8:a3:cb:48:cd:e9:d2:a2:9d:6c:ba:1c:5b:63:7a:db:f9:
f3:e4:1e:c4:a4:35:eb:f8:28:14:a1:1a:27:5a:f4:c2:e1:62:
23:d4:21:2e:e5:dc:b9:fa:03:0f:f3:17:91:a3:f3:2f:14:75:
19:14:08:6d:5e:90:52:7d:48:35:6f:bf:08:54:3f:f9:ca:db:
32:14:f2:26:5a:6f:7f:c9:06:3e:22:ba:ec:6b:54:bc:7e:6b:
df:39:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:36 2025 by rpki-client