Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: biBsdPkElzDfRijj4JSSY6J60ysBxViMk6OxXE2FNto=
Subject key identifier: B3:46:C8:F9:A3:4F:E8:79:D2:A2:0B:6A:57:24:C2:C5:CA:2A:11:E0
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 0199FB0EBD531A158AAE4C2581BFBF584C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 4F
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: lpNy6yIdDE59TgBg8i86N5CFXe1sOnDnnR8IMTUiFCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:bd:53:1a:15:8a:ae:4c:25:81:bf:bf:58:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=b346c8f9a34fe879d2a20b6a5724c2c5ca2a11e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:56:6d:52:5f:bc:a4:7e:49:3b:01:e8:b7:
d2:da:f6:ff:53:e4:76:e8:db:9f:7d:33:7f:54:16:
06:94:2c:86:d0:08:b2:97:88:ee:72:89:a4:49:1c:
30:2e:55:50:b2:90:55:1d:1b:7a:de:49:8c:ba:c5:
c0:42:7c:81:2e:9a:73:7d:70:62:3e:d9:12:81:f0:
2b:2d:15:c3:21:4e:2a:2d:84:31:65:51:93:65:0d:
fa:08:d0:4d:77:28:c7:e6:06:64:0c:cc:69:2d:90:
b7:73:54:66:7e:35:79:50:ee:f4:2e:a0:d9:24:2e:
1b:36:fd:09:f1:2e:57:e6:89:5b:3c:83:ed:df:a1:
1c:0b:4d:83:63:8b:8a:eb:24:e0:e3:54:78:c4:82:
8a:ac:0e:9d:4e:cd:ac:d7:29:a6:59:a1:b1:16:47:
c4:5c:35:ab:3d:72:71:b4:10:40:60:96:64:b0:ce:
74:9c:57:45:6d:49:3b:68:af:6d:8f:d6:12:21:a3:
d9:f7:8a:37:d5:0a:97:6c:8f:5e:29:09:2c:15:5a:
c4:6d:58:fb:a3:4e:7d:88:6b:ad:5b:15:14:82:fe:
8b:02:14:74:52:a3:85:44:71:74:87:76:22:1a:25:
57:7b:52:f3:df:ca:3b:17:e0:34:aa:92:9d:f7:14:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:C8:F9:A3:4F:E8:79:D2:A2:0B:6A:57:24:C2:C5:CA:2A:11:E0
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:ed:b5:51:2f:f4:2d:74:e2:72:e8:75:08:0d:7f:56:6b:
37:7f:fd:4b:4c:8d:0f:5d:5e:ba:a5:23:7a:23:e5:0b:d3:d7:
61:98:81:f1:93:42:3f:1a:93:92:bb:21:e1:a5:b9:fb:79:f4:
e5:fb:02:b5:49:f6:d5:85:50:aa:f0:00:56:01:91:8f:b6:7c:
d6:a8:13:5b:f5:79:a1:36:d4:d0:3e:db:ed:32:e0:cf:2b:b4:
42:36:e2:8e:14:82:f0:2c:3b:63:37:2c:a3:bf:91:d0:39:b6:
1c:b9:5f:f9:ce:3f:96:a7:ca:87:dc:85:4a:78:50:11:89:f6:
17:19:90:71:40:ff:3b:ed:4f:d2:7a:ae:22:33:de:db:62:45:
f4:c9:c9:84:6e:06:3b:71:90:6e:78:ae:6f:02:4b:c9:9d:37:
27:3c:04:e5:58:c3:c9:58:18:4f:b9:6c:e5:ff:ae:c3:d2:f8:
07:7e:4a:7b:97:4d:f2:70:37:cb:95:ee:88:03:35:f8:14:41:
54:ff:31:73:1f:32:8f:f4:72:bd:c1:6c:5e:02:53:8e:1b:ee:
fd:e5:18:5a:e7:4f:f0:34:d1:4c:13:56:05:a9:02:c5:b0:76:
a5:91:75:25:cb:89:9b:92:10:8f:7a:37:7a:6e:8f:cc:ae:c0:
05:13:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:43 2025 by rpki-client