Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: +aoI5VgbitWo88w3s42ek19p7uCj8jjM76utSL9SE6o=
Subject key identifier: 14:8C:96:34:3D:F5:C0:D5:4A:05:36:94:DC:31:1E:E9:FE:28:59:CC
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019922C358FB80ACD9B1A54BCF013ED63CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0F44
Signing time: Sun 07 Sep 2025 06:00:51 +0000
Manifest this update: Sun 07 Sep 2025 06:00:51 +0000
Manifest next update: Mon 08 Sep 2025 06:00:51 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: rOwA4ZTQTw8TMUYt/9+eixL+Zikp/IkHbIamzhX/6P8=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:58:fb:80:ac:d9:b1:a5:4b:cf:01:3e:d6:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Sep 7 06:00:51 2025 GMT
Not After : Sep 8 06:00:51 2025 GMT
Subject: CN=148c96343df5c0d54a053694dc311ee9fe2859cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:37:fd:62:4b:73:c9:d8:0e:28:32:6f:f9:
86:28:bc:86:79:e6:45:3c:38:db:cc:65:48:f4:55:
f6:bf:03:27:25:a9:d6:d7:df:2f:58:48:16:3d:f6:
50:d6:6b:0f:14:e2:fe:99:53:b3:c1:10:69:af:75:
25:5b:a4:d4:50:40:41:08:01:7f:00:52:ab:d8:a8:
c6:e3:30:fa:bb:97:e3:2d:be:de:fc:b8:a6:2f:6c:
34:93:47:35:1a:ff:02:66:ee:cf:4d:2f:54:ed:86:
99:32:f3:d6:81:e1:01:2d:12:91:61:87:fb:e3:c3:
1d:ef:23:d5:0b:0a:22:17:ff:68:37:5a:0d:ee:bd:
b9:25:0f:3a:3b:54:25:4d:ca:ea:12:55:4e:fd:02:
0e:ca:a9:f6:75:5b:51:fc:85:c3:80:a9:3d:59:6e:
39:dc:88:c2:78:b8:26:bb:fe:d9:3f:2b:fa:a1:82:
e1:4b:19:b0:40:ea:79:dd:8b:06:7f:da:13:97:45:
cd:15:f1:61:95:72:2a:32:6d:1b:2b:19:89:34:49:
5e:87:0e:7f:e0:9c:53:1c:08:7d:9d:ca:d0:8f:41:
6b:73:6e:70:20:a6:b1:1a:51:72:6d:2c:fb:e6:5b:
30:52:47:44:16:e4:fe:16:ac:45:a6:55:dd:7a:e4:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:96:34:3D:F5:C0:D5:4A:05:36:94:DC:31:1E:E9:FE:28:59:CC
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ef:e0:b4:1f:3b:3d:bf:74:ba:55:bd:e3:8c:5f:c8:df:c8:
df:e2:7d:70:68:81:ab:a0:bf:a4:05:ca:df:2e:10:26:39:9b:
86:66:c4:7d:5d:32:18:c6:9b:33:88:dc:06:1b:5a:22:f8:9b:
71:7f:85:55:18:8a:81:98:a3:99:4d:e0:f2:cf:d2:e9:32:c9:
eb:23:9e:51:4b:aa:5f:8e:4d:6a:ad:88:18:a9:fb:ee:a3:2e:
a5:74:95:ad:dd:ad:03:68:0f:4c:26:ac:93:ca:e4:49:33:2d:
39:90:77:60:ab:ad:16:e1:4a:bb:7a:c6:a9:ff:0b:e8:72:9d:
3c:1c:ad:40:52:3e:f2:84:b1:c8:8c:6c:5e:ca:48:a6:d4:4a:
90:e5:d0:3b:a5:dd:2f:61:9a:c3:e6:52:3f:0f:90:f6:0b:0e:
87:02:b3:5b:76:8f:9b:a2:4b:a7:1a:2f:f7:6d:55:94:f5:a3:
45:e1:dd:f3:f5:d1:b6:41:5d:46:3e:9b:c6:17:e2:71:12:03:
23:6e:5b:ac:67:44:81:74:67:9e:d9:09:a3:d9:96:20:21:ea:
a0:30:b9:25:83:62:2c:94:ca:db:7f:f8:96:15:34:0c:cd:90:
47:01:f6:0a:03:67:3e:6c:45:53:8a:df:f9:3e:49:c3:72:1b:
46:ef:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client