Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: 1fYltQ2cU/zooYsg52GKiyT6kqvgkRR9luPp9JWrJn8=
Subject key identifier: CF:E1:A0:73:15:A5:2E:E4:B8:07:13:47:DB:8C:2D:D3:E9:33:6E:26
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019922FA45514D126C274CFD71CBB2F885E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 014A
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: 6A+Zxdm4k0mU1KXG2STFXi2hptOiPzXvyqqGLa96giM=)
2: HVaoDMotksZf76Ju74TL_0gQqQw.roa (hash: 6Wt6s6Ldu4cKxpBhxwlW4dbeWtmB6JUQE70sEXR7L0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:45:51:4d:12:6c:27:4c:fd:71:cb:b2:f8:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=cfe1a07315a52ee4b8071347db8c2dd3e9336e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:cd:ce:24:d0:b4:93:e5:9f:b9:a8:d9:41:
6c:55:a5:87:a1:9d:3e:ce:de:0f:25:c6:45:f4:59:
29:53:6a:e3:bd:cd:46:a2:9a:92:12:da:85:24:98:
9e:c9:1c:25:00:34:c4:5e:9e:d4:1f:ed:3b:d0:99:
35:2a:32:55:6f:c3:56:32:8b:00:08:b4:11:60:9d:
2c:8f:f3:56:8f:47:d8:84:5f:d0:64:f9:cf:68:13:
d6:45:cf:bf:b6:e3:21:3d:25:af:62:9c:72:50:b6:
77:39:eb:02:11:2c:7a:e4:7f:ce:dd:b1:c5:1c:02:
8b:9a:c5:d9:72:3a:eb:19:55:aa:02:c6:be:51:f7:
5c:09:ea:9c:ef:5a:e5:ab:ce:3a:cb:b9:59:2a:5b:
ac:71:f4:9e:8b:2f:d7:15:4d:e0:2b:22:d2:15:90:
0c:6c:22:fa:7e:4c:7e:8f:b3:66:50:98:19:96:87:
3b:6f:ad:b7:7c:19:2a:c2:86:ee:13:b1:12:a6:c0:
05:6a:b9:52:2f:44:d3:e0:42:2b:d8:63:c2:8d:77:
d2:8c:18:66:5b:ba:75:ea:4e:ba:df:fd:8b:79:36:
da:c7:c4:aa:de:18:28:b0:c3:32:7f:66:40:1d:71:
32:c4:05:58:a6:98:e7:b6:0e:6a:88:40:2a:45:bf:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E1:A0:73:15:A5:2E:E4:B8:07:13:47:DB:8C:2D:D3:E9:33:6E:26
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:63:7e:77:df:42:e3:76:9c:93:df:b6:48:c7:01:15:c3:1f:
ce:e7:ce:54:ec:fa:69:92:9d:20:2a:41:ca:5c:e0:25:ae:76:
eb:bc:dd:14:9b:74:20:df:24:40:ce:f1:5c:27:80:d2:74:c4:
88:be:bc:0b:a0:6c:64:2a:bd:44:e5:ce:97:92:95:4a:c1:b3:
79:be:8d:7a:3e:56:54:5d:06:8f:7c:08:2c:23:90:42:54:19:
82:7f:f3:69:90:65:7d:77:49:70:f4:f7:a2:49:c5:3c:ba:55:
b5:a3:6b:76:f1:aa:bb:c8:58:e9:2f:08:4a:70:cf:1a:d5:2b:
e9:3d:c1:c7:3e:41:ad:6e:3c:c1:df:eb:33:08:e3:9c:1d:76:
3f:1f:e9:dd:f9:07:aa:98:de:ae:36:61:14:a2:e6:62:7e:f1:
8b:2e:e3:57:fd:51:54:c9:0e:0f:06:6f:03:e7:5e:d4:21:04:
9d:d7:e4:0a:3d:9b:2e:27:97:74:ae:df:a4:4b:57:5c:4c:5c:
e4:e9:40:a9:da:05:ad:3d:83:ef:4f:6e:eb:18:91:97:46:8b:
67:f5:c7:b6:a2:ac:0d:74:fe:ce:74:60:ca:a7:7c:30:df:35:
88:4c:92:90:f5:10:4f:2a:3b:8b:d2:3c:74:03:56:63:39:f3:
7e:5d:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:42 2025 by rpki-client