Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: KqcqL4jtG3ACJisuvCqcIW5kX5p4WoVD27MigtavPBE=
Subject key identifier: EC:E1:EC:25:41:57:F5:00:DD:9D:17:BD:D1:D8:C4:52:AF:64:CA:45
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 0198D6CE0DB512ED44CCB386A827C0D8CD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 12:01:24 +0000
Manifest this update: Sat 23 Aug 2025 12:01:24 +0000
Manifest next update: Sun 24 Aug 2025 12:01:24 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: QGdE/zqSg8ywSVi8YfLs53zmkTeoHoV88xLdZn8xk/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:0d:b5:12:ed:44:cc:b3:86:a8:27:c0:d8:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Aug 23 12:01:24 2025 GMT
Not After : Aug 24 12:01:24 2025 GMT
Subject: CN=ece1ec254157f500dd9d17bdd1d8c452af64ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:2e:fd:a9:c0:60:ab:02:17:a4:bf:8a:cc:
4c:54:86:75:3e:c3:65:36:f4:17:bf:be:28:19:b3:
b4:c8:34:1f:bf:9e:99:2a:0c:75:a9:66:06:9d:f2:
d9:79:57:15:eb:ce:4e:c5:db:67:8e:4c:46:73:bd:
b8:87:43:ec:eb:a0:47:8a:21:96:e6:a7:3d:31:80:
ca:a6:88:8a:70:1e:e9:82:b8:32:04:ac:7d:9c:9c:
e4:68:53:8a:cf:f2:b5:c1:6b:96:c0:5c:fc:09:8d:
30:19:69:d7:45:d3:99:8f:2d:f6:22:bd:3e:c4:cc:
c1:9f:cd:85:80:17:f2:fd:99:ae:7f:ce:cd:0b:9d:
a6:b6:6b:73:4b:ca:a9:d6:8a:55:45:f1:48:65:58:
f7:ce:ee:9a:cb:bb:65:9a:5d:df:11:1c:5e:38:ac:
f6:ab:49:28:bf:9c:8d:cf:7d:05:24:fb:be:cb:cb:
c0:7c:78:f5:49:dd:29:19:c1:19:85:0a:68:08:f2:
99:1e:57:5e:cc:1e:32:b5:d2:39:9a:62:90:4c:82:
73:6d:76:7b:ae:00:1e:f4:c2:6b:31:55:43:44:f4:
80:60:ed:99:e1:9f:90:3b:4e:4c:6d:6c:87:83:30:
ab:c1:a8:ee:58:51:53:7a:49:f6:dd:49:81:12:e9:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:EC:25:41:57:F5:00:DD:9D:17:BD:D1:D8:C4:52:AF:64:CA:45
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:a1:de:87:98:d6:02:4a:24:63:86:82:bc:22:b3:bc:8d:
a6:98:33:02:cc:c2:9f:81:37:04:46:09:e0:59:be:8b:58:a3:
2e:1a:0e:07:14:41:59:11:cb:e4:90:75:46:f2:35:d3:d4:5e:
d9:36:1b:7a:e3:f3:a2:d0:4e:47:72:2d:71:7c:1e:85:0b:e6:
1c:76:3b:79:62:49:d0:98:25:88:82:6b:ab:dc:53:c6:dd:61:
79:43:e8:4e:11:62:59:29:ac:0d:11:b7:37:74:b3:ee:96:c8:
da:8d:80:35:47:97:fc:a2:a6:35:7d:fc:0f:ff:de:d0:a7:e6:
70:1e:db:67:74:04:b3:db:34:c5:c9:b4:ce:b9:df:9f:6c:99:
8a:22:5e:15:0b:a3:78:95:0c:9f:a0:0a:59:d3:d9:62:cf:bc:
81:30:03:62:c1:8f:33:05:e9:51:34:17:76:e8:83:25:1b:7a:
be:77:32:6c:ea:1f:19:92:d1:49:b8:07:f3:68:d3:0d:c6:fd:
d8:e8:b6:cf:af:0f:e8:06:3e:50:0b:2f:4d:4c:16:e9:4f:d7:
aa:52:4f:78:7e:64:d0:62:ca:6e:80:6c:c2:61:99:f8:0a:53:
30:06:4d:5c:f6:6b:5e:7b:e9:94:f0:46:71:d4:83:09:3b:dd:
ed:67:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:02 2025 by rpki-client