Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: 7g3VRgSc3ZswxFx1I2Va0GTazzLA6lRmddxSOjuKva4=
Subject key identifier: 7E:54:AA:20:92:96:E0:A7:8D:2A:D0:1B:33:22:6A:4F:FF:BC:44:1A
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0199179ABD63DCC619DB8A9D91E1D986DECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 166E
Signing time: Fri 05 Sep 2025 02:00:40 +0000
Manifest this update: Fri 05 Sep 2025 02:00:40 +0000
Manifest next update: Sat 06 Sep 2025 02:00:40 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: /Dyin1cDvFshJpycvgNdDJrh015jhw+AqUfar5mFONs=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:bd:63:dc:c6:19:db:8a:9d:91:e1:d9:86:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Sep 5 02:00:40 2025 GMT
Not After : Sep 6 02:00:40 2025 GMT
Subject: CN=7e54aa209296e0a78d2ad01b33226a4fffbc441a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:f9:8c:94:16:1d:9c:7a:21:6b:00:06:b4:
e4:a9:6c:a1:f6:d7:e0:5f:b0:6f:41:73:6d:95:5f:
16:6c:dd:ac:75:c2:87:a8:f5:84:42:3e:56:0b:6b:
2e:d6:7f:c8:eb:b5:34:51:f6:09:8a:a2:6b:ca:fe:
48:b9:14:5f:7c:a1:44:38:cb:b8:09:c3:70:e0:5f:
62:3a:98:b8:ca:19:5b:95:af:9b:35:40:22:f0:eb:
8a:69:3d:32:de:8f:0a:0e:9b:28:3c:d5:f3:8e:76:
17:63:07:01:2c:25:a9:6b:c5:fb:ea:fe:92:4e:3a:
66:aa:75:09:22:14:2c:f0:de:ce:3e:63:c5:e2:90:
08:dd:51:b5:48:da:91:39:82:c2:c6:8b:41:65:98:
3e:0d:7e:06:3b:5d:e5:77:a3:37:4d:fe:ac:d6:e7:
ad:89:7c:ab:cf:62:7b:76:b6:a1:55:0a:0b:fd:da:
f3:0d:e7:02:6f:0d:c4:56:ad:17:8d:ec:73:40:20:
ba:42:7f:b1:a6:87:34:9c:18:3d:8b:b7:8b:ad:b4:
ae:fa:44:8e:1a:88:34:58:11:8d:24:b7:9e:96:dd:
11:1f:4f:5f:b7:96:44:db:33:f3:55:d4:ba:c0:84:
30:09:e0:60:58:ce:82:c6:82:3f:ba:c4:6c:52:9d:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:AA:20:92:96:E0:A7:8D:2A:D0:1B:33:22:6A:4F:FF:BC:44:1A
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b7:7a:be:bc:da:73:17:4f:f9:55:1c:fb:2c:c6:1b:aa:f4:
85:03:8c:89:23:b5:93:e7:ec:40:15:9c:8f:99:9c:9a:41:e6:
85:c3:86:4c:95:84:cc:98:2c:9d:e0:42:35:9f:9f:11:65:bb:
27:c4:54:7f:b2:80:25:91:8b:81:98:aa:f9:b9:04:68:6b:8e:
26:26:de:c2:9d:3d:00:fb:9a:95:52:f7:4f:ad:64:d4:c1:6f:
b1:99:f7:b8:2f:ac:50:f2:e1:d3:25:1a:24:8d:8a:e1:3c:85:
85:09:8f:e6:31:f6:f0:c1:22:15:c2:46:de:94:21:66:07:1b:
4b:d6:97:88:dd:15:44:2e:ef:c4:d5:ad:7d:a7:4d:c5:ee:72:
b1:57:15:4d:3d:2a:e1:74:ec:3a:c6:37:06:f9:7e:66:bc:ec:
4a:3b:cd:f6:c0:1e:23:a1:ca:e6:42:ed:5c:a0:12:f2:0e:d1:
6a:3d:e1:2b:a0:01:88:80:59:41:ae:14:46:87:9f:fd:e4:65:
71:10:7b:fe:c0:38:30:81:0a:98:51:a4:83:45:1f:79:e1:62:
bd:2c:87:f9:42:80:84:d6:02:3f:96:e2:ae:a1:af:20:d3:3c:
4f:4c:21:fa:f1:61:ec:38:a6:52:f7:46:02:61:51:3c:9f:b4:
b5:52:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:32 2025 by rpki-client