Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: nYAKeQvQaM3aNuAVk40TDw1BaFXoKvnq+igvs8ejHVs=
Subject key identifier: C8:1A:10:E0:0A:44:1D:77:39:84:B4:A1:34:F4:C5:E9:AD:A2:7D:51
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 0198D404E611918346C0ED68376BBFC51D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: 0C
Signing time: Fri 22 Aug 2025 23:02:27 +0000
Manifest this update: Fri 22 Aug 2025 23:02:27 +0000
Manifest next update: Sat 23 Aug 2025 23:02:27 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: +kIMmpeO1jFhdz78aKSMSXdGUCprBBGrpQAWwcwoY48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e6:11:91:83:46:c0:ed:68:37:6b:bf:c5:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: Aug 22 23:02:27 2025 GMT
Not After : Aug 23 23:02:27 2025 GMT
Subject: CN=c81a10e00a441d773984b4a134f4c5e9ada27d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:73:ea:7c:bb:38:47:1e:c7:32:17:fb:3c:
90:4c:64:68:5d:af:a1:50:fe:5a:92:7a:85:b1:b6:
47:0f:3d:58:b8:99:c4:ca:d0:75:00:55:39:a0:48:
7d:aa:c2:93:f6:23:68:ae:ea:b0:7c:58:f4:53:9f:
83:78:6e:bc:dc:9e:00:cf:0d:07:99:62:4f:da:37:
08:90:0b:22:8b:cb:44:40:fb:17:b3:54:17:b0:8b:
3f:6b:df:ba:7d:e5:aa:47:ca:c2:e3:b9:d9:f0:cf:
4b:bd:48:25:c1:be:3a:eb:1c:15:46:9a:e1:46:63:
97:be:48:75:a3:10:95:f6:5b:02:ff:44:30:49:8e:
dc:56:1c:88:db:6d:64:61:a0:b6:f9:9b:2e:e5:54:
09:e2:4b:26:28:74:c6:3e:d3:30:26:42:e6:75:b6:
39:be:a6:c5:18:59:b7:ec:28:72:fd:7f:8e:f2:63:
3f:1a:e7:aa:fa:42:66:21:21:7b:97:1d:24:b8:0a:
a9:aa:f6:75:fe:55:d8:d4:8f:d0:74:17:d5:fd:0c:
ce:cb:7e:ba:cb:8a:4e:0d:24:31:4d:6a:2d:fd:d8:
90:a8:71:54:8a:2d:40:c7:1c:99:ab:a9:b9:4d:a8:
19:0e:5f:67:83:a9:40:57:9b:1c:40:3a:fa:d5:13:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:10:E0:0A:44:1D:77:39:84:B4:A1:34:F4:C5:E9:AD:A2:7D:51
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:72:64:9c:bd:7f:66:73:75:7a:06:7b:40:f5:e9:ea:9f:
44:2f:04:f2:1f:5f:1f:af:78:8d:e6:e7:00:5b:d8:44:e5:15:
80:4c:d8:24:79:d8:99:b9:98:65:c6:ea:87:74:1f:02:38:79:
06:3f:d9:51:35:0d:79:76:03:be:dc:11:cd:bd:de:d6:86:9c:
31:ba:7e:b8:d6:4a:d0:8c:94:df:d3:13:83:8b:49:21:21:c5:
d1:e4:0f:46:66:95:ec:8f:26:a7:6f:c4:3e:75:98:64:da:66:
11:e2:3e:dd:d5:29:5e:b6:73:4a:44:6b:e1:ee:54:6d:3e:a1:
4e:b6:51:cb:8e:61:98:c6:9f:74:a3:b5:0d:96:3b:74:63:5a:
57:3f:a0:ec:47:58:20:fb:5b:e2:c2:ef:80:19:9d:53:d2:9a:
ea:aa:35:f9:65:73:e5:62:36:b5:48:ae:54:6d:5d:bc:a6:76:
ef:70:8e:ee:fb:77:72:03:31:89:14:a7:63:ff:a5:07:78:c2:
10:26:4d:f1:6d:9f:59:a6:59:1f:2a:a9:26:6b:f3:96:b7:ab:
6c:ca:da:86:96:f3:27:06:6a:75:99:96:34:30:5b:4c:9c:b3:
be:5b:ee:54:dd:26:73:39:43:e9:92:4a:7a:d3:d4:a4:52:73:
ad:75:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:53 2025 by rpki-client