Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: QfEiOLEaVBvLIIm+0IU9mJL9gjObDhAt1kC8+Cz5cDI=
Subject key identifier: FE:E6:EC:FB:64:A5:33:66:D1:0F:F0:1C:11:DD:CB:F0:05:FB:37:06
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 0198D65F781A34CD3EEA21340267BB85861E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 08E1
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: URg7wDH6/3sIYGWVZRAbIZmO+sGR+RpbMeonfQ2Vgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:78:1a:34:cd:3e:ea:21:34:02:67:bb:85:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=fee6ecfb64a53366d10ff01c11ddcbf005fb3706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:ae:47:46:c6:f4:e1:d7:14:2d:2e:06:dc:
41:0e:84:9f:9f:d1:79:84:69:bc:79:ba:fc:f9:6a:
ec:f8:ba:f4:e6:67:35:2a:39:58:f5:68:b2:ff:00:
d6:e3:06:66:8c:b5:26:97:bf:0d:3b:7c:09:62:2e:
8e:52:c1:d8:7f:fd:27:61:8b:65:4a:68:d5:46:40:
01:6e:78:8d:00:a3:c5:66:f8:b4:0e:96:0d:2d:18:
67:e1:38:25:6f:a5:cc:3f:5f:74:d2:cd:27:a1:24:
4d:0e:b3:be:11:b3:f6:d2:4f:62:05:b2:48:e9:9c:
91:28:ef:ad:28:3a:dc:e8:fc:ed:05:18:b4:93:1d:
3b:62:d6:fa:86:60:fc:60:63:d0:88:b3:e6:f6:e3:
63:8b:da:fe:15:ed:87:9f:1f:a4:7c:9a:99:81:e4:
e4:ee:41:3e:ee:00:16:8c:02:6a:5b:3e:64:3b:fe:
49:b0:df:a4:61:8d:cf:65:e6:5d:3a:5c:af:27:a9:
b8:88:68:99:3b:9e:90:f1:3c:9c:d2:9f:44:2b:78:
d3:cf:70:93:52:46:40:2f:4e:50:cc:1a:28:93:1d:
af:49:64:d3:0e:81:e0:85:d6:18:e0:a4:cb:28:48:
79:5a:03:50:5f:9d:8e:44:7b:66:91:ce:e2:31:97:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:EC:FB:64:A5:33:66:D1:0F:F0:1C:11:DD:CB:F0:05:FB:37:06
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:46:0b:e4:4e:7c:21:fc:60:ef:5f:76:9e:d1:73:88:0e:
d1:b7:5a:36:58:3d:94:65:66:d7:84:c5:0e:e8:60:19:a6:3b:
f7:ef:21:9c:c4:50:fa:b4:75:3b:bf:29:db:51:dd:ff:83:19:
56:fb:21:84:99:80:c9:dc:4d:e7:0b:aa:21:39:ef:b6:72:40:
51:7d:ca:1e:bb:dd:58:49:c4:e7:ec:d9:a0:6c:71:5c:bf:12:
49:c6:41:ef:eb:41:06:ab:4e:c0:6a:72:b5:d6:5f:a2:d8:a4:
89:25:25:71:83:fc:7c:d3:62:f3:55:07:11:dc:04:26:40:fc:
99:19:9d:99:bc:8c:70:40:bc:0b:c3:f1:a1:9d:34:70:f6:7c:
0d:cf:e3:e2:73:de:82:23:25:ab:07:f8:da:34:90:9d:18:97:
e4:c6:45:a3:01:fc:cd:b5:aa:4c:39:9b:6b:0b:8a:95:fb:55:
f6:de:fc:8a:98:47:ac:ca:40:08:bc:2b:cf:83:71:e2:45:07:
0b:e0:ac:23:e4:29:d5:a8:37:16:8d:96:8a:e6:e1:0a:87:22:
b8:f8:d2:ab:f6:75:3f:f6:a7:13:b4:fc:df:a7:e1:86:d2:29:
2b:d6:4e:1e:52:f3:75:e5:9d:d2:79:0e:53:16:3d:4e:bb:6d:
90:b5:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:47 2025 by rpki-client