Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: qMBOdnEv7cFQvmGNEp3lWet54EpdgvdmVlrD/AHSSYs=
Subject key identifier: B6:D7:56:2D:3F:45:E4:B8:FF:57:CC:DD:11:27:CD:1D:52:7A:A9:09
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 0198D4E0FB0433195373B2BBD48D7DF94954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:50 +0000
Manifest this update: Sat 23 Aug 2025 03:02:50 +0000
Manifest next update: Sun 24 Aug 2025 03:02:50 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: 8mCYIwRRtSyrx6r8dBO60aZ/0EH28x3TT8SgleB+FP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:fb:04:33:19:53:73:b2:bb:d4:8d:7d:f9:49:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Aug 23 03:02:50 2025 GMT
Not After : Aug 24 03:02:50 2025 GMT
Subject: CN=b6d7562d3f45e4b8ff57ccdd1127cd1d527aa909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:8a:76:b7:47:a0:aa:0a:98:4f:df:99:a6:
05:53:03:3d:23:2c:24:06:94:e8:32:6e:f1:a1:38:
ec:4e:8a:46:8d:14:bb:f0:c7:92:81:d5:7b:f7:7c:
6d:e6:fc:25:a5:c0:05:8f:0b:c1:5b:0e:a0:f7:82:
47:b4:bb:a5:7f:20:90:41:13:9f:ed:d5:e7:dc:9c:
81:f7:04:9c:ea:b2:44:fc:89:32:7e:24:2f:14:0a:
39:09:92:6e:b4:5a:8e:02:c6:a7:e9:5c:9c:c2:fb:
ac:5d:1b:ba:e8:b6:2a:cb:ae:e6:4f:f0:19:40:30:
01:25:71:2c:c3:c3:0b:5d:fe:ba:36:53:43:17:32:
c4:d5:6c:47:8c:70:80:a6:8c:5f:f7:36:55:31:4e:
c7:47:ad:55:dc:5e:97:6e:37:79:f6:81:4f:e6:89:
d9:6c:e6:7b:11:87:3e:2a:41:dd:6e:87:9c:a2:fb:
15:a7:18:53:b6:a5:44:a2:3e:db:1e:18:68:a5:57:
ab:7a:6f:d7:3e:44:6d:64:10:86:22:30:ff:c3:3e:
c1:f8:70:11:e1:9d:90:e2:1f:31:a8:30:7b:a2:6d:
b5:5d:6c:64:94:b4:88:29:0e:65:b2:b6:d4:c8:6e:
4b:45:c9:ff:47:9d:79:9f:63:88:c4:61:1b:5d:55:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:56:2D:3F:45:E4:B8:FF:57:CC:DD:11:27:CD:1D:52:7A:A9:09
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:b0:12:ca:dc:e3:7b:2f:64:e1:8d:57:c8:44:3f:3c:41:
47:99:df:12:2b:c2:54:db:54:88:b2:3a:77:dd:28:53:e9:f3:
0b:3a:cd:90:4d:63:80:75:7a:a6:5f:7c:dc:d7:f8:26:0a:6e:
22:dc:04:b8:3d:80:60:c5:a5:1c:05:fd:c6:a1:0f:f5:de:12:
c4:f5:4a:d7:cc:76:88:97:bd:af:dd:b6:94:56:7d:df:a3:be:
5d:a3:a7:ee:0f:7f:c0:94:54:d2:ae:b2:80:6a:5c:1a:07:32:
7a:c8:c0:c6:3c:06:d7:4c:7a:07:61:2b:d1:31:a3:cd:b5:68:
05:e4:5b:6c:ad:15:49:13:97:72:fe:7e:29:d8:99:18:d6:cf:
74:01:54:03:6e:0d:43:2c:52:0b:86:05:d5:74:ec:31:62:b8:
d9:a1:f4:11:34:96:30:65:ee:12:e5:df:c6:27:89:7a:6e:92:
34:fe:8e:7f:13:1e:25:ec:23:52:48:bb:a7:37:4c:fb:7e:f7:
30:1b:a4:f8:e0:5e:0c:c2:8e:29:de:ef:fc:87:57:e2:ea:5a:
d9:3e:16:f6:7d:1e:fc:bd:89:38:18:65:6d:58:fc:d9:c1:a3:
82:e3:08:36:a0:f6:33:f2:0e:e1:e6:34:0c:24:35:90:c5:b5:
cb:3b:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:29 2025 by rpki-client