Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: dseNp5UFlQc+9w9W+/Pd57p/syCxrk3H4dms6e1hdOs=
Subject key identifier: F5:C3:8E:8A:EA:69:E3:8B:37:2B:34:BB:70:41:24:73:56:1C:F2:B3
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 0198D66139CAB1A6C58A4080D368912F72A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: iI8VzQB50T7vMhjKenfoxb4lpF0DFPT3jmZ8Jbdn9ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:39:ca:b1:a6:c5:8a:40:80:d3:68:91:2f:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=f5c38e8aea69e38b372b34bb70412473561cf2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:9b:1c:27:88:66:c2:67:74:be:3c:ae:ea:
7f:69:63:d1:88:e5:bf:08:a8:0f:f3:e5:53:68:28:
4d:df:a0:66:cf:29:15:6c:f3:83:9f:db:27:2b:96:
c0:91:34:6c:b4:d0:32:7b:bb:55:be:aa:0d:cd:8f:
ae:80:63:2d:b8:87:2b:6b:7a:e0:15:e7:3d:35:5b:
cd:74:c2:13:7d:b9:b8:2f:19:4f:ac:0e:e0:eb:88:
85:11:33:58:af:57:8e:a2:93:e2:8c:94:db:9a:ec:
69:3f:cd:ae:9f:53:71:42:87:91:8f:3e:f1:3c:2f:
68:fb:bb:8e:42:51:dc:92:5a:9d:68:fc:74:0e:81:
04:73:ff:30:0a:96:3b:45:67:52:0e:8b:e5:25:b7:
4d:9c:64:47:8b:9b:10:9a:bc:a4:22:a1:9a:f2:6a:
0b:87:0c:9d:4a:67:2c:14:23:f4:81:87:78:a0:2c:
5a:11:f0:12:56:70:11:b7:85:a0:2f:a7:64:07:52:
f5:8e:4b:82:e4:d4:bc:24:9c:73:3e:71:cf:95:92:
d5:93:21:05:ef:7b:dc:60:ea:9b:e6:3e:d3:46:ec:
ef:cb:d4:3b:77:1d:ee:ac:db:bb:3f:55:bb:43:f8:
df:5b:ea:d4:0a:10:2f:ee:1d:a8:38:fa:bc:35:db:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:8E:8A:EA:69:E3:8B:37:2B:34:BB:70:41:24:73:56:1C:F2:B3
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1a:34:87:a5:90:8b:e0:b3:ce:e7:3d:0e:a8:3b:bc:84:84:
c4:50:2e:75:bf:f1:ba:ad:fc:7d:d8:09:fc:f7:28:5f:cb:9e:
c1:7c:bd:e3:36:6f:2a:93:fd:fb:61:85:95:4d:c2:30:89:18:
e8:41:f4:29:56:21:83:15:5f:8c:c7:54:90:ec:50:71:98:d8:
ca:6d:82:99:4c:85:06:66:5e:d4:13:91:16:98:f3:88:41:71:
e9:39:ea:e1:0a:9d:a3:87:19:1c:df:f3:32:36:e4:a5:88:46:
03:69:c9:31:37:6d:7e:8e:a8:4d:fd:fa:a5:1f:05:20:43:71:
fa:06:2b:e6:8b:d5:ee:fa:cf:d0:86:a1:49:d6:c6:f0:47:bf:
14:a2:c1:44:20:14:3a:28:ed:f9:d2:e0:42:43:fc:45:df:b5:
b2:d7:6d:d5:57:8d:48:0e:5c:0d:d2:76:3e:7f:04:64:16:40:
a0:5e:45:c4:bc:b6:aa:74:14:b3:ff:7d:eb:9c:78:a2:2a:ba:
00:d2:d2:39:06:c0:97:17:30:1a:d9:b9:c7:05:04:52:ae:43:
63:f9:56:a7:52:f0:85:35:29:91:f0:53:db:cd:e1:bf:2b:6c:
9f:be:00:74:78:cc:3d:c2:58:1e:e9:71:e3:e4:8c:81:d9:05:
7c:66:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:39 2025 by rpki-client