Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: mboP/A0O4533511QqBSMXegehmTYgWnCc9rePGo4kwI=
Subject key identifier: 44:AA:33:0C:65:36:46:18:4A:33:7D:93:9E:1C:46:F5:C2:6D:90:10
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 0199FDD9307858BB7BB40359B245C241A355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:33 +0000
Manifest this update: Sun 19 Oct 2025 19:01:33 +0000
Manifest next update: Mon 20 Oct 2025 19:01:33 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: b3Ef98oCqNDHgG4YyDwd3uz85xldV4Kp9+STWEoNL8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:30:78:58:bb:7b:b4:03:59:b2:45:c2:41:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Oct 19 19:01:33 2025 GMT
Not After : Oct 20 19:01:33 2025 GMT
Subject: CN=44aa330c653646184a337d939e1c46f5c26d9010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:a1:ed:d2:d3:67:86:89:f5:94:eb:a4:cb:
42:d5:71:0c:84:d6:86:41:06:c0:3c:5a:9c:38:10:
34:85:f6:d6:27:7f:4e:0b:4d:54:b4:54:4b:43:ab:
ec:1b:80:5d:8d:1c:4b:19:b4:10:0f:6f:31:a1:b9:
12:d6:31:61:6b:70:5e:43:a7:3b:84:57:6f:f3:bd:
0a:6b:92:d3:21:91:8f:03:09:b1:66:1b:83:34:62:
12:52:6a:f0:03:fd:19:c2:1b:11:46:96:d7:cd:19:
d4:9d:b8:ce:49:32:31:68:8d:61:ec:b3:3b:44:ef:
92:9b:c5:d5:56:c7:da:2f:08:65:59:74:33:70:65:
f0:61:23:c2:85:f8:30:41:2c:c3:d4:a4:48:54:15:
98:50:2e:fb:68:3a:ac:13:99:a4:3b:31:8a:d9:83:
82:7e:6f:17:d4:b4:9f:83:c7:42:6e:a4:03:9e:a6:
be:31:cf:aa:92:b4:6a:00:19:f8:ce:8b:c0:10:59:
fa:85:c9:50:a4:87:53:a7:f0:93:28:75:5c:27:e3:
93:5f:d4:7c:2b:9c:ea:8f:b7:cc:d5:6c:23:50:ee:
bd:50:6e:3a:02:c5:6b:e3:28:91:35:3d:d9:69:5c:
0f:c8:d8:bd:0d:00:91:1e:41:58:ad:24:4c:ec:99:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:33:0C:65:36:46:18:4A:33:7D:93:9E:1C:46:F5:C2:6D:90:10
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:5a:49:ee:0d:f8:f2:a6:c2:20:87:98:49:e8:83:d2:a6:
4d:35:42:3a:5b:b2:bf:21:69:58:80:50:c9:19:33:c9:da:08:
2b:c4:42:36:b4:15:e0:94:f1:80:14:3b:c1:32:ef:9a:fa:71:
0e:e7:2a:a6:15:b5:95:b5:69:59:28:ea:b0:fe:3c:c3:10:8c:
7e:c9:5a:af:90:19:b5:a6:d8:c0:18:ac:52:49:11:3a:f8:b3:
31:3a:05:ca:66:12:85:9a:f1:d4:54:8f:55:70:bf:c4:2e:1a:
52:c4:42:84:e0:5a:de:af:07:83:45:c0:bf:df:a9:9d:87:1e:
49:eb:9e:91:45:4f:4e:8d:6f:17:9b:31:10:52:3c:93:b7:64:
da:b7:99:21:1d:a5:70:a0:9c:cf:ae:62:fc:26:32:33:68:84:
8d:3f:6e:4a:1f:42:52:a2:fd:f7:cf:e8:91:c6:0d:78:e0:d2:
15:7f:af:e0:94:25:a6:17:f2:36:88:8e:08:58:05:94:e7:70:
77:f9:05:76:fb:cf:be:9c:56:ca:33:29:c7:8f:f1:bc:61:42:
b9:ed:ee:cf:95:47:96:fd:c9:35:6b:f0:88:7e:c6:52:7d:7e:
dd:52:a5:ca:9b:93:d5:64:c5:96:70:2d:29:33:85:4c:4e:2a:
c6:7b:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:53 2025 by rpki-client