Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: gwv1ZcEUkwUMhKj5woGTlIl31UcjRRy/udw6xBXO3Kg=
Subject key identifier: 6A:68:E4:6E:FF:09:D1:73:A3:0F:C4:72:27:01:33:3D:56:55:7B:9F
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 0198D5156B6EED03AC54624E17866C956428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: 03DUH8fTqZm+mkyxhY/M+U2aCI3uOWYBj0BpqMmSkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6b:6e:ed:03:ac:54:62:4e:17:86:6c:95:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=6a68e46eff09d173a30fc4722701333d56557b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:13:39:c6:6a:a3:ea:d1:0f:e7:14:ef:9a:
2b:da:36:9f:34:98:4d:5e:39:ef:4b:14:3b:be:46:
5a:b3:31:b9:b8:44:ea:af:96:de:e2:c1:6a:b5:fe:
9f:ad:fa:35:82:da:e4:9b:c4:a2:0d:8c:a5:2b:ad:
6e:24:41:ce:cb:43:24:dc:f4:0a:39:d7:a8:f5:f3:
3c:72:93:65:31:98:37:64:65:1e:c3:89:0b:1d:61:
cb:c9:89:e0:bd:b8:18:20:0a:a0:ca:5f:61:2f:66:
77:9f:76:72:98:9d:5f:30:17:91:5e:fb:b5:54:24:
10:c5:66:d1:b4:2f:10:ae:11:31:8b:bd:e8:76:f8:
1f:c8:b1:13:30:15:8b:31:6f:9c:6a:ac:51:60:2d:
c3:c4:0b:c2:73:bf:6a:c6:66:76:bb:9f:5f:e9:ba:
74:cb:a6:8b:15:39:c2:c5:03:d4:c4:b1:d0:19:be:
ab:19:3b:50:54:03:be:8b:06:f9:7e:ef:3b:93:6c:
00:ad:bd:e1:48:c9:b4:a8:f0:e1:10:99:11:b7:4b:
02:c3:f0:81:e0:7c:c2:6c:d3:db:6a:50:b6:d2:91:
65:71:0d:5b:36:97:57:9b:f6:c6:4e:cb:30:21:61:
d2:22:aa:82:e5:81:16:d3:dc:8a:64:0e:f5:a8:b1:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:E4:6E:FF:09:D1:73:A3:0F:C4:72:27:01:33:3D:56:55:7B:9F
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:9e:d3:d5:a9:d5:07:85:4f:75:ee:f9:35:cb:b1:d8:a6:
d2:49:84:b2:04:5a:cc:fb:26:97:8b:8e:2e:4d:07:55:d3:10:
6e:d5:40:8d:51:52:f5:d9:4c:57:71:d1:4d:df:93:1c:46:e5:
06:58:a2:21:a9:53:f3:53:b9:8f:b6:31:c5:78:50:65:c3:a1:
72:74:43:8c:4a:b1:11:17:ae:60:4e:12:35:d4:33:75:e1:64:
9d:37:8e:be:57:81:82:6f:4f:af:1d:77:10:20:6b:ff:78:6d:
5b:b4:03:a9:1b:b1:08:ec:60:0b:e2:7d:2c:05:95:e6:cf:74:
75:c5:25:d8:fc:76:00:01:d7:4d:9c:c2:42:f4:98:95:a4:c7:
d4:fd:f9:fb:22:19:a2:dc:14:11:91:ed:d3:e3:df:73:64:52:
5c:e7:1b:60:80:79:e0:75:1e:c4:11:c6:28:1a:5d:e7:52:45:
d1:3d:f3:c4:5c:ee:ca:25:6a:b6:10:cf:7d:1f:8d:26:81:44:
bf:15:c3:5c:55:0d:1f:aa:77:9a:fa:34:67:7a:08:83:34:9e:
a4:0c:92:29:56:d1:17:ef:a9:52:1e:b6:8b:e2:be:dc:70:d1:
7c:4b:4f:bc:2b:83:ee:71:3a:f0:05:61:10:ca:b0:9f:8b:76:
4c:d2:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:20 2025 by rpki-client