Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: 8Uw2h11yV3ac+Ru7SCQZiaIMrvMccrHSyqmKIwebvbY=
Subject key identifier: EA:C2:15:6E:BD:40:BE:0D:09:64:B8:60:AC:D4:6F:93:7F:26:C7:8A
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 0197C98249836F886E8C0EA6A89DB03A6944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 47
Signing time: Wed 02 Jul 2025 05:00:48 +0000
Manifest this update: Wed 02 Jul 2025 05:00:48 +0000
Manifest next update: Thu 03 Jul 2025 05:00:48 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: NN6bUg6930+1rA+c3KrPVV4DkxvzHN2QWPXKQYuf11A=)
2: dT_BFnqui1qPfatUh1gogWMYRho.roa (hash: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:49:83:6f:88:6e:8c:0e:a6:a8:9d:b0:3a:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jul 2 05:00:48 2025 GMT
Not After : Jul 3 05:00:48 2025 GMT
Subject: CN=eac2156ebd40be0d0964b860acd46f937f26c78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:16:99:87:2a:89:1d:49:74:71:2c:55:3a:
39:b6:39:2d:b5:5e:d4:36:a3:f0:fe:9b:bb:fe:bc:
9d:9f:39:a3:d1:1e:8a:07:5c:84:96:38:4a:17:2c:
d1:ce:31:19:2c:14:c2:49:26:dc:24:86:52:29:07:
3a:35:0d:26:e3:f4:0c:23:f9:ba:75:d2:d4:93:10:
e3:b4:8b:35:e8:8f:0e:10:c6:8b:36:5e:50:f2:ea:
a9:ef:29:1e:42:05:3b:d0:10:04:fa:29:88:99:a0:
aa:75:79:b8:00:37:45:be:74:bc:f7:09:2d:cb:76:
9a:ae:bd:27:74:1f:61:66:52:9a:e0:0b:30:32:09:
ba:c0:8b:00:bc:21:fb:3f:c1:7d:f2:84:74:f8:c3:
18:a2:e7:fe:5e:b1:df:c7:35:7e:b7:d7:11:59:f1:
a0:f5:71:de:20:c5:1d:dc:22:5a:88:dd:99:8e:ee:
a3:ac:c6:81:84:be:94:04:a0:6a:a4:ba:30:a0:d8:
07:c8:bd:4c:70:8d:16:78:72:46:ac:ab:f5:96:4e:
f3:5c:f1:78:23:6a:9d:c7:d5:92:3d:58:ce:26:53:
3a:b9:ee:97:3d:99:e1:5c:b8:b1:ad:c9:69:1d:d8:
0d:63:d5:3c:27:2f:b8:83:ed:21:e1:b3:45:cd:2e:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:15:6E:BD:40:BE:0D:09:64:B8:60:AC:D4:6F:93:7F:26:C7:8A
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5e:a8:39:5e:5d:04:b5:35:97:41:75:cf:dd:45:d4:70:ee:
4a:7e:6e:c1:9e:99:b1:94:d0:a9:d8:c8:7d:2c:bd:cd:4e:e4:
85:7e:1f:a3:01:cb:12:2a:41:40:c5:4a:55:82:c9:5e:05:7c:
f4:c9:c3:06:14:61:01:d1:4b:3d:5b:74:44:07:65:1f:cd:1c:
2e:e7:8d:5f:ce:04:7b:ca:25:d2:bc:65:ce:03:b2:d5:63:32:
02:ac:8d:8d:0a:21:ac:22:6d:42:6d:38:59:3f:b3:bb:38:8e:
65:b2:a8:58:ae:04:a1:6e:77:d5:80:36:00:fc:45:dc:98:12:
ab:2f:56:2a:37:28:46:be:0b:06:8b:4f:ad:a7:73:d7:fe:b6:
60:a9:13:2c:8d:bd:05:91:63:84:e4:11:6d:bf:8d:36:7d:76:
b4:79:c0:1a:26:d4:bb:97:45:8d:c6:f3:42:8d:48:23:93:42:
36:75:d2:ab:6e:16:49:74:58:18:c5:a4:ca:95:a7:11:49:3e:
8f:47:55:0b:b6:fc:7d:09:62:5e:43:36:98:b1:5c:92:59:c8:
92:1c:9a:61:1a:68:75:b4:2b:c6:5f:c8:8b:49:f6:7c:bb:b5:
42:1d:c3:82:ab:38:46:32:7c:21:6c:b3:73:fe:f5:49:b1:7c:
eb:24:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:56:32 2025 by rpki-client