Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: MAlf7WICVLnSSjIx8t9whmVVoz57eN4cugOeqiYH1Ew=
Subject key identifier: 9B:D1:D8:3D:12:6B:B5:A2:D1:04:D4:F1:A8:F4:41:6C:8C:31:9C:DE
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 0199FFC7E0E08F530613BC7339F40202C62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 097B
Signing time: Mon 20 Oct 2025 04:01:53 +0000
Manifest this update: Mon 20 Oct 2025 04:01:53 +0000
Manifest next update: Tue 21 Oct 2025 04:01:53 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: xu5do2RiWjulfvjiu3e2aBTrVDQ0wFfBBpD/tH7skHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e0:e0:8f:53:06:13:bc:73:39:f4:02:02:c6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Oct 20 04:01:53 2025 GMT
Not After : Oct 21 04:01:53 2025 GMT
Subject: CN=9bd1d83d126bb5a2d104d4f1a8f4416c8c319cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:e4:cb:95:5e:eb:02:40:82:42:06:d4:46:
1a:9c:a7:42:f8:cf:8b:3f:a3:b5:3a:b3:00:67:69:
8e:5d:04:69:d2:93:0e:be:34:ff:a5:1c:4f:8e:5f:
f4:ba:91:ca:1b:55:07:20:bc:72:28:8c:b1:f4:fa:
d9:9b:f7:1e:c3:04:f0:04:63:f6:93:dc:ea:24:71:
d8:4e:94:cc:82:16:8e:c9:df:39:d7:d5:ea:c1:32:
99:c2:64:c5:3f:11:01:ab:72:38:a9:42:31:3a:c7:
4f:96:6c:15:2d:f9:e5:41:92:23:a1:c9:95:70:a1:
6f:1d:cd:e3:1f:60:d3:37:0d:75:4b:e4:87:1a:12:
ab:7d:6f:5f:cd:50:f1:f5:40:af:3e:e1:9d:05:0d:
d6:09:d5:7b:a5:1f:3e:9c:dc:31:b2:25:e5:4b:17:
24:22:f3:cc:7b:9f:43:2d:7c:d1:e2:18:a7:b9:1e:
9a:72:fb:aa:4d:1e:34:d7:9b:95:a2:38:a8:86:c9:
fa:07:2b:f8:79:d2:a3:9e:28:7b:96:f2:2b:56:65:
c2:7e:21:06:d8:c6:39:a1:f1:80:6e:20:97:96:a9:
79:ea:a1:13:dd:5b:a9:83:24:fe:35:06:6e:3c:75:
ec:48:d7:54:34:c6:d5:c6:11:33:14:da:d7:bf:0f:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:D8:3D:12:6B:B5:A2:D1:04:D4:F1:A8:F4:41:6C:8C:31:9C:DE
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:94:6f:4e:0d:88:53:e7:93:dd:f3:1c:6b:6a:34:9b:de:d4:
8e:a4:c4:8e:20:3e:cd:8b:1d:06:31:43:a9:cd:48:58:1f:db:
ab:e8:91:10:f5:ca:ad:d8:9a:83:35:b6:e7:05:5a:7b:dd:3a:
61:93:e4:71:64:b2:58:ca:2b:da:21:c2:87:e7:47:c9:41:9d:
d6:22:a5:83:32:d6:44:f7:39:9d:0b:26:ae:ed:66:3f:4a:7f:
33:b9:cf:23:0d:de:ef:ed:b3:67:3c:94:30:0e:dd:5c:30:e6:
b7:41:f5:40:b6:40:52:95:d4:c5:d8:03:6f:af:b1:ba:69:69:
5e:28:41:7a:b1:69:a8:9e:08:14:f2:77:da:1e:47:f7:3e:80:
5b:08:cf:36:30:15:e5:22:8d:75:a7:2b:2e:cf:1c:5b:87:10:
64:f5:8d:c3:ab:06:89:43:e2:fd:67:27:4b:11:56:1d:f2:6e:
4d:26:56:a5:f4:84:1a:80:64:24:64:23:bb:59:c3:47:ec:3c:
da:bc:16:8d:e4:fe:d4:f4:56:2b:47:38:bc:da:6e:8d:51:fd:
2c:62:a1:7c:f1:d1:25:c7:a5:39:89:a5:b5:e3:f7:32:ca:0d:
28:fc:17:e5:dc:23:0e:75:90:9b:83:7e:e2:0c:60:36:15:29:
08:bc:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:27 2025 by rpki-client