Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: U1XQhjvzysOCqAImnNm6SkqBfn1RcxB/1Cl0su9kFJ0=
Subject key identifier: 80:7E:06:F9:DF:C5:5F:9D:3A:AF:E3:E9:60:2A:26:6C:DD:95:40:6D
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 0199FBEAED9C1AB0BF973F854859117C8EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0F02
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: XOsT4WWy3MietpVqaJ4w2EstzJM+Lt9sXUAJ4GzxbKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ed:9c:1a:b0:bf:97:3f:85:48:59:11:7c:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=807e06f9dfc55f9d3aafe3e9602a266cdd95406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:e1:75:1e:a6:cb:c9:70:6e:4f:f4:be:d2:
4b:ad:df:7f:7a:c5:83:37:69:a2:c6:af:64:82:a7:
9d:37:c2:9d:0b:1c:31:05:1d:bd:2c:ba:3b:22:f9:
51:6b:cb:49:e5:c5:1b:00:b8:a5:e0:98:7a:38:cb:
18:0e:0e:50:a5:46:b6:e4:6c:d8:85:21:27:e3:20:
b2:c1:21:2d:40:23:49:27:96:76:e5:e3:45:96:bc:
34:c5:31:65:41:43:70:00:80:c9:26:07:9f:32:22:
fd:a7:19:c1:01:b3:fa:f6:c0:c6:b5:22:ee:0b:86:
fb:dd:49:c2:85:ea:0a:3c:3d:22:3d:e1:54:f2:bc:
19:80:4f:02:cf:24:e2:70:79:a7:30:db:ad:c7:f4:
8a:7e:a8:85:76:2b:db:22:73:7f:85:a8:83:7d:a9:
28:46:70:53:d5:5c:59:7d:12:2a:ed:2a:02:2b:73:
d8:eb:99:f3:0f:22:a9:93:2c:f4:ab:ca:4e:8b:d5:
4e:27:e1:32:13:c1:44:32:22:7c:3e:0b:95:82:1e:
ce:3b:ce:22:87:f3:ca:62:8b:9e:3a:d4:50:d6:f4:
80:1f:26:7e:d3:b0:c0:23:e3:2f:09:e7:d4:4f:b8:
b7:fb:06:87:18:05:02:5f:97:e1:b6:d6:1b:68:6a:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7E:06:F9:DF:C5:5F:9D:3A:AF:E3:E9:60:2A:26:6C:DD:95:40:6D
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a3:cf:0d:c3:fb:40:99:24:44:89:2a:4f:99:89:91:da:6f:
42:4d:37:d8:5d:ee:d3:19:c5:2a:3c:51:d4:f4:34:28:7f:8f:
14:29:8a:73:6d:43:88:db:33:44:7d:12:9d:bd:ba:ed:31:7a:
7e:8c:44:98:e4:5c:77:ea:d9:66:4e:9b:9b:68:53:27:00:d3:
68:ea:85:e6:f7:63:f4:b2:5b:fd:19:aa:ea:74:06:4e:11:fd:
a0:7f:6c:9c:0e:6c:bd:97:7e:8c:ce:83:15:7c:de:59:d5:76:
49:d2:cb:da:a2:2e:e9:0d:d5:5a:bf:55:84:53:98:bb:ec:30:
fe:d5:92:22:98:32:79:06:e7:ac:1f:c0:fa:82:49:8e:b0:5c:
18:2f:d3:9d:3b:6b:cb:20:ed:48:9a:19:be:60:c6:97:ce:75:
9f:35:0b:cd:96:4c:7e:dc:b4:ad:4e:6d:d7:a1:65:b1:bd:eb:
6b:73:79:3c:f4:d2:5f:27:18:2a:1b:09:66:44:e1:ac:bb:e9:
f5:5d:d7:7e:6e:61:15:e4:16:06:e0:92:5e:5a:e0:0d:fe:7c:
b7:dd:7b:ed:29:6c:f6:9d:eb:a7:6d:cf:16:bd:fa:52:ab:9f:
d0:09:61:c8:9e:e4:d7:f6:02:40:4b:28:09:d0:b8:8a:f2:1e:
0e:81:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:11 2025 by rpki-client