Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: cF/9w6fu32xb1vJMATC9Qdcy022/0L6yh9Tb+zNSP+c=
Subject key identifier: 6C:BF:1C:18:53:DD:66:15:77:FB:3E:6B:35:5B:41:DA:90:86:26:96
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 0198D515B910A8E51A789656FDE3EC3F2AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 1464
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: 3W76F6+NTizfXs29Hjj25v/CGnpO+ZOCOhAHrxsh5Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b9:10:a8:e5:1a:78:96:56:fd:e3:ec:3f:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=6cbf1c1853dd661577fb3e6b355b41da90862696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:13:9c:ee:33:7e:ef:c4:d2:15:30:86:25:
52:e8:27:b9:72:46:9c:6f:c1:52:79:a4:48:25:43:
0f:a8:21:b6:a4:bf:32:0a:8a:a7:27:4e:83:84:84:
7b:68:bd:9f:e0:46:38:d4:71:ee:af:5e:2e:23:ba:
a3:33:db:0c:54:fd:be:38:54:f9:52:8d:c9:2a:8e:
e9:63:5f:6f:71:e1:ee:41:b6:11:7c:01:a6:8a:d5:
61:43:76:6c:42:db:71:bd:2c:de:65:c8:99:12:ca:
e8:c6:af:51:ca:f1:de:55:9a:3b:0c:ba:80:ab:bd:
a6:73:d2:93:37:10:54:82:b3:bd:13:17:3d:75:e9:
24:72:66:88:8f:6b:04:bd:75:20:24:ac:b2:05:1c:
5e:30:8f:91:62:54:03:cc:a7:48:d9:0f:ae:f3:cc:
64:2c:0b:01:28:88:ee:e7:b6:f6:1b:29:4f:40:20:
6f:f0:2d:6a:ba:6d:1a:62:6b:e8:0b:70:a9:71:d7:
e1:e5:c4:1f:ce:40:84:0e:b9:0d:34:1a:a5:1a:a9:
5a:a3:a6:d6:f2:16:1b:83:8c:90:6d:71:36:06:b5:
04:6e:0b:27:ea:8d:35:59:3b:f0:10:a3:b1:5c:f7:
4b:d8:fd:8a:dd:55:e1:31:31:08:64:33:bd:48:c3:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BF:1C:18:53:DD:66:15:77:FB:3E:6B:35:5B:41:DA:90:86:26:96
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8d:0b:2f:6e:fd:e3:97:a3:93:fc:38:78:74:fe:15:60:be:
a5:85:f7:c4:4d:66:2f:00:3a:cc:b3:b2:a8:fe:15:4c:c6:67:
ba:5c:ed:9e:74:00:6b:ca:24:4b:10:71:e1:8c:19:61:63:15:
24:d2:90:ef:8b:ba:b1:3a:b9:37:05:9e:28:19:ff:19:87:1a:
bd:ad:78:72:e3:3b:c3:c2:28:7e:45:2c:e0:77:68:f9:3d:49:
50:33:ff:3a:e8:99:84:fa:e4:88:e6:50:2b:e6:c4:04:ab:fd:
3a:32:3a:cf:9e:e3:38:03:6a:46:6d:2e:2e:64:18:59:40:95:
c5:ff:0c:68:72:5f:a4:5a:e6:af:b9:12:45:c3:65:81:d7:fc:
8e:55:36:a0:a8:28:01:90:32:10:53:c3:cb:c3:f2:0b:88:83:
40:f5:a6:bc:8f:4a:c1:11:7e:ec:55:08:45:41:00:ce:11:44:
43:c6:ef:b6:5e:95:46:a1:67:a2:90:53:53:07:12:0c:ba:50:
33:07:3e:f2:bb:1f:7a:5c:71:f7:92:d8:12:c9:37:28:44:55:
ed:fe:da:b7:97:c9:3d:a9:aa:60:63:8d:28:d9:2d:4b:a2:b7:
c8:15:9f:e4:d3:1f:bd:13:28:0a:20:7a:5a:5f:d3:0d:7b:78:
a6:0f:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:26 2025 by rpki-client