Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: 8pEEbGF8/RfwFb0aIgOGuf2EtD+uKN0hQN0mMZ1j+Ic=
Subject key identifier: 74:9F:B7:36:25:10:F2:45:2B:B7:EA:02:1E:DD:DD:CA:75:4B:54:AE
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 0199FAD848A76504BE3F6BB2493FC879A5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 0670
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: PxD0QM69Syg1vTNt2LlO/mCU1NbsvHRFX1shKuI7Ks0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:48:a7:65:04:be:3f:6b:b2:49:3f:c8:79:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=749fb7362510f2452bb7ea021eddddca754b54ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:51:09:48:95:1e:46:58:35:d0:32:c1:b8:
7c:0e:ae:91:12:cd:b0:4d:8c:af:8c:5a:92:db:41:
b5:db:2b:75:82:fc:57:7c:6c:a3:d2:90:49:a6:2d:
af:1c:71:74:07:fe:d1:d6:16:f6:25:25:c4:62:22:
2d:29:c0:64:d5:cd:9a:17:76:6d:ee:fa:e1:f5:99:
98:fb:ef:6f:66:45:20:19:e2:42:83:85:a8:57:e8:
84:4c:52:77:6f:8c:e8:88:e2:45:3b:58:ad:4e:ff:
68:24:9b:7a:84:a6:d5:c8:d1:85:bd:0b:10:13:03:
46:c1:d9:c4:f7:4f:e3:25:e1:67:ec:73:41:a8:6b:
d4:a7:d0:1b:37:5e:be:83:ce:d6:dc:02:71:79:38:
c8:da:ff:fa:20:0a:f0:11:31:3e:c0:1b:37:1f:79:
79:42:2d:a4:ab:a7:25:fa:ee:d1:87:2b:26:c1:b8:
d1:c7:0c:c6:a0:bb:2b:82:cf:56:5a:d1:f4:44:05:
dc:7d:3c:4f:b6:ab:3b:a4:f7:d4:ea:7e:9d:d4:45:
79:7d:d3:73:ca:91:21:28:0e:d9:bc:42:5c:cb:86:
13:89:76:4a:1e:ac:df:c9:8d:74:45:b9:db:e1:db:
f9:73:6a:14:f4:3f:3b:d2:a4:72:f7:f4:ba:c1:b6:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:B7:36:25:10:F2:45:2B:B7:EA:02:1E:DD:DD:CA:75:4B:54:AE
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cb:8e:0c:cf:18:44:28:e0:1a:bd:3f:83:8b:5c:65:64:ca:
35:8a:b8:b7:7f:35:fa:f4:75:0b:d1:61:7b:f4:8d:2f:2b:e3:
c2:d4:6b:aa:96:3d:5d:65:12:f7:35:2d:24:bd:9d:7e:55:06:
52:ba:bc:ac:07:09:14:07:9b:55:f4:69:6e:35:25:fd:b4:89:
53:8a:53:03:27:bd:fb:44:90:74:db:44:67:d7:43:ca:d2:c3:
e9:b0:7e:62:3b:26:4d:d3:ea:d6:ea:3d:a7:36:23:06:a2:dc:
b3:1e:b6:d3:f2:ad:3d:28:2c:e7:46:d7:01:fd:5b:23:16:24:
c8:37:fb:9b:cc:41:11:eb:84:4f:fc:98:8c:53:6c:62:2f:a5:
57:47:90:13:7c:af:ef:72:74:26:ec:53:44:4c:34:7d:e7:71:
d8:5f:ff:7f:7a:7f:40:bd:d1:29:b9:64:88:a6:65:ca:e9:90:
9f:0a:55:39:e4:7b:71:6f:8c:84:be:1c:16:18:70:cf:73:84:
dc:5d:f6:a8:af:fd:ad:e0:94:31:a3:98:9c:e5:71:ef:68:33:
34:43:ed:ea:36:8b:d3:34:9c:a1:47:30:a4:39:60:d5:48:af:
2d:ad:f2:38:0c:34:19:6f:e6:4c:da:e1:9d:59:eb:7c:18:4d:
c8:97:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client