Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: pPjDUmCNJYDNPbL69IbWiTtC/ae4au8yaQbanwjLsNc=
Subject key identifier: ED:FF:F3:00:A3:17:50:74:CB:91:B8:EE:53:97:D8:39:F5:69:EB:E7
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 0199180910BE9ADC8798D1C27958E03D1071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:01:11 +0000
Manifest this update: Fri 05 Sep 2025 04:01:11 +0000
Manifest next update: Sat 06 Sep 2025 04:01:11 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: fOFY27sCCSpx/Iq8/7I7qahXm+QGNtvgY15UCZMF8wo=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:10:be:9a:dc:87:98:d1:c2:79:58:e0:3d:10:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Sep 5 04:01:11 2025 GMT
Not After : Sep 6 04:01:11 2025 GMT
Subject: CN=edfff300a3175074cb91b8ee5397d839f569ebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:72:13:02:41:43:cf:8b:b3:5c:30:d0:a4:
07:f7:59:38:2c:ec:ac:8a:e0:84:7c:c5:f4:e6:bc:
66:e4:49:1a:a4:14:90:7a:49:6c:42:e4:35:c9:ad:
28:4d:10:d2:51:6a:76:b6:fa:fb:b7:7e:55:c6:bd:
f1:5e:ef:c8:f3:d5:ab:bb:be:b1:c2:b5:40:e9:3b:
8a:20:01:43:79:8d:9d:39:9c:97:34:1d:eb:a5:cc:
48:56:06:52:a6:02:b5:a7:94:d0:96:62:d4:03:98:
aa:bf:ed:df:40:5e:4c:b7:e5:3f:70:ed:9b:80:0a:
cf:9a:07:89:ae:33:96:7c:3b:5d:64:e1:58:cc:51:
c0:4c:43:ea:24:66:e2:cb:da:59:91:8b:6a:75:cb:
44:7d:88:ca:96:e6:7f:78:05:1c:2d:c6:57:04:f1:
97:b6:1e:90:72:47:c5:c4:ff:b3:a2:45:89:62:2d:
79:7f:b6:37:0c:f2:4a:45:13:df:c9:64:50:ef:75:
4d:ee:72:cf:9e:b4:62:e7:d7:3a:93:30:a3:67:5f:
a1:22:39:00:d6:6a:14:82:f7:6c:cf:49:76:83:40:
2d:d5:d4:5e:53:2c:dc:10:5d:16:83:37:0e:d0:cd:
fc:85:85:dd:27:5d:ce:d6:43:2e:f3:61:c4:6f:d7:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:F3:00:A3:17:50:74:CB:91:B8:EE:53:97:D8:39:F5:69:EB:E7
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:be:fc:2e:a3:cf:3e:c6:f1:51:a2:6e:4e:0a:ce:fb:6d:
db:31:da:69:ce:c3:77:4c:b9:fe:d8:19:25:89:d1:c6:ba:d4:
51:b7:f7:ce:a4:60:40:89:ea:0b:85:dc:cb:e0:f1:99:6c:5c:
6d:80:30:9d:7d:d1:1d:64:d2:4a:d6:60:e4:65:d0:65:bb:67:
a4:f9:18:a7:00:a4:87:43:58:63:83:28:d3:25:8f:0b:88:ae:
d9:d5:0e:50:45:2b:13:09:12:10:58:97:a0:bf:34:b1:91:37:
d6:07:ce:5e:02:b8:96:13:a7:7e:13:47:0e:81:57:8b:4b:46:
05:38:9a:94:d8:99:12:2e:c0:93:c4:d1:e2:b3:fe:71:85:35:
ed:66:84:57:fc:64:4b:9e:77:d7:48:0e:eb:45:d9:61:d0:26:
08:ef:1d:e3:69:bc:d6:51:f6:8d:69:b6:9a:89:32:f0:86:d1:
d9:ae:c1:86:91:56:37:d9:33:68:c1:c4:f9:39:ea:e0:24:c5:
10:64:70:77:64:4b:e0:0f:4b:e7:d6:2c:02:03:ba:d3:5d:a8:
78:18:24:25:07:7f:f2:cd:c3:88:d6:86:36:92:9d:dc:dd:00:
fb:1f:01:1a:c2:5a:90:1c:19:29:1c:80:14:5a:0a:64:44:b0:
e8:da:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:21:28 2025 by rpki-client