Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: iwkFe+DkJTIRsrGgcnqf/kGTTKVcMS3R/6EZsxXAZ58=
Subject key identifier: A4:9C:3B:FE:40:F1:C6:E9:23:05:68:61:C3:8C:A9:9F:E7:E7:05:EE
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 0199183FDF4F0076FFD274233EA4C4749899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1674
Signing time: Fri 05 Sep 2025 05:01:03 +0000
Manifest this update: Fri 05 Sep 2025 05:01:03 +0000
Manifest next update: Sat 06 Sep 2025 05:01:03 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: lo8o/aEY7RltlgR4vOnFQVS17lVv/m9fYsF+J90N0iY=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:df:4f:00:76:ff:d2:74:23:3e:a4:c4:74:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Sep 5 05:01:03 2025 GMT
Not After : Sep 6 05:01:03 2025 GMT
Subject: CN=a49c3bfe40f1c6e923056861c38ca99fe7e705ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:12:e0:63:89:60:bb:f0:ac:84:e1:09:5c:
ef:e6:13:e1:f5:63:d6:4d:17:b7:c1:2b:0a:7a:e0:
20:f8:9d:6d:18:19:29:fa:9e:fa:a2:e0:9f:c3:2c:
7a:66:b4:ad:b5:cf:97:6a:b2:b3:d3:6d:3f:d2:77:
c7:52:08:d2:58:75:11:8a:d9:e5:50:bc:0c:5d:c4:
c8:8c:1c:20:69:ca:ba:6a:92:54:61:76:75:1e:c3:
50:57:c3:dc:e9:50:95:68:37:87:77:b7:31:38:dc:
17:35:b1:42:6b:22:bb:e0:99:84:d0:52:04:ae:4f:
8e:f0:e3:7b:ae:d9:5b:31:23:2f:49:8f:6e:78:ea:
48:81:3c:00:e9:f1:8f:f9:4f:dd:34:ff:7b:21:bf:
96:fc:d8:92:73:b3:a3:cf:82:67:f8:1b:33:dc:af:
73:4b:a4:c3:1a:11:95:5d:40:e5:90:a9:d8:73:9c:
33:b1:e2:cc:79:e7:4a:59:ad:de:78:2c:4a:81:db:
4b:0d:ea:43:59:86:af:19:64:e0:ce:f5:e3:33:76:
c5:77:a9:d0:9a:55:9f:b7:3c:a7:47:fc:c0:8c:25:
3a:2e:67:84:11:fe:3b:b4:bf:45:b8:44:ae:84:8d:
da:d9:b0:ac:a1:52:35:ea:3f:17:b5:6d:e6:68:cc:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:3B:FE:40:F1:C6:E9:23:05:68:61:C3:8C:A9:9F:E7:E7:05:EE
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:55:a8:16:57:fc:a7:ab:ab:3f:b4:86:c8:60:35:9a:b4:33:
84:db:d7:eb:4a:4b:5e:f0:e5:3a:22:a0:14:b4:a8:59:a0:18:
3a:82:10:47:2b:e9:81:16:d3:aa:8b:f6:90:bd:68:9f:af:a2:
b3:94:d4:97:20:b1:ec:b3:fb:65:33:43:16:a1:a3:ad:06:7b:
da:90:d2:f3:ff:03:42:57:ab:64:2e:7a:b0:8f:02:87:0a:70:
d7:d6:41:0b:bc:c0:50:ca:24:b3:fa:f7:da:22:03:d1:7c:db:
5b:6c:de:c7:c4:ed:6c:f6:99:a2:b3:53:cf:ac:41:e8:5d:f6:
13:18:4d:bb:e6:f2:f8:6f:54:82:29:c7:46:90:58:e2:c4:f1:
67:a3:df:ba:0e:b8:a2:f0:cd:54:0d:02:b9:62:5a:8b:74:3a:
75:e9:44:53:9a:06:82:75:5e:e4:5d:1d:3b:e0:54:bb:c7:ea:
93:88:6f:d9:7c:96:c8:62:42:47:7a:54:02:9b:38:ca:01:29:
1b:51:82:7c:50:d9:97:cd:61:b4:e4:ea:01:43:20:c0:1a:2c:
5f:78:8d:88:fc:c6:e4:06:76:f7:8a:95:f8:53:d8:32:ec:83:
bb:d7:4d:c3:78:07:5e:72:2d:3e:5e:86:44:2a:a0:97:8f:f7:
d0:b4:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:34 2025 by rpki-client