Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: WfBugEMFoawmsuQHS1O5BoyW+FlffEVoL/jyinhlQbA=
Subject key identifier: 06:D2:8B:3B:29:25:8A:4C:2D:0A:06:2D:77:60:1D:0A:17:61:92:30
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 0198D4E0777A0283A72F1F1B1DCC3DC20EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 12A1
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: o/rirMe2ouXEQ+ShgLc74HMPuv6LX7zSXg8CNg2y3xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:77:7a:02:83:a7:2f:1f:1b:1d:cc:3d:c2:0e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=06d28b3b29258a4c2d0a062d77601d0a17619230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:c9:06:28:50:5b:5b:59:e4:d1:6e:32:cf:
eb:1c:51:fc:e0:00:49:d5:00:d9:6d:9c:10:c9:21:
92:6e:63:05:52:40:8e:41:66:2b:de:54:6e:1e:a8:
b8:78:46:ef:7e:38:71:12:a5:88:d1:a4:ed:e2:d7:
74:35:7d:ec:fb:cf:35:60:ad:f8:6e:41:96:9f:e4:
06:9e:bb:53:96:06:f4:83:34:64:2d:7c:f3:fc:ac:
7b:2f:76:9f:21:96:51:d5:d4:51:87:4c:19:4d:1d:
3c:e0:1e:bc:52:34:cc:da:a7:98:34:2d:be:96:71:
d0:e7:e0:dd:6b:8d:38:d4:5d:ab:4b:9b:7f:77:2d:
0f:55:eb:bc:ae:ee:ad:3c:fb:4d:4f:84:c5:16:ad:
cb:86:f0:52:5e:cb:25:26:9c:d8:9d:35:37:a9:32:
4a:f3:7c:96:06:12:5d:4a:ee:f1:0e:c5:b1:d8:23:
fb:4d:3e:ea:b4:f2:62:1a:1c:22:25:ec:1c:cc:91:
ae:64:e0:8e:e4:3a:da:e9:60:95:15:5f:be:6e:a0:
4d:8a:9f:10:3a:cb:98:1e:f0:bc:5d:a9:c5:3e:29:
49:10:15:b3:af:d0:fe:19:8e:88:bf:5d:77:70:7d:
51:c3:69:22:7d:e1:31:3c:12:5e:ab:31:c5:8f:a0:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:8B:3B:29:25:8A:4C:2D:0A:06:2D:77:60:1D:0A:17:61:92:30
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:30:4a:b5:2f:f6:a5:a8:fc:73:40:ee:a6:1d:a6:fd:bc:
4f:cd:fc:92:61:4f:50:2b:35:7b:7e:d2:49:86:8d:1c:7a:9f:
93:df:01:07:a9:65:fa:28:b1:c8:6a:c6:c2:bc:0f:5f:63:3a:
27:ed:56:f9:8d:f3:9c:d0:69:62:82:d2:92:68:b6:1a:55:aa:
ec:84:6a:f6:a2:21:af:7f:c4:cf:24:36:26:16:4a:79:13:80:
42:2b:21:5a:f5:93:e1:f7:76:b9:b9:58:e0:50:b7:c9:e9:8f:
44:ce:a3:50:8e:4f:01:6b:11:6c:d5:6b:9b:8a:0e:af:be:a4:
c1:ce:3b:14:bb:65:c9:e1:d6:f6:70:fb:87:15:27:43:e4:f0:
18:ca:82:9c:96:e2:66:9c:6b:46:0e:73:51:1e:a0:fb:4d:e9:
a0:10:38:7d:d1:73:7d:52:b7:0c:a1:ae:86:23:eb:d5:00:ee:
3a:7e:92:93:ec:d0:80:d6:53:99:7c:45:b9:78:b6:12:08:3f:
4d:34:01:ba:41:30:6b:41:d1:0c:44:40:e6:2e:14:67:06:ad:
cd:cc:f3:2c:e4:ac:bd:e1:d0:19:35:0e:2f:eb:e6:d3:07:3b:
bb:c6:de:e2:64:2c:fa:c5:6e:54:d1:47:6f:9d:b6:33:24:2e:
87:63:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:03 2025 by rpki-client