Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: tHIXNPj3k1LBjcGF6KZq+qHkciezxVzaHFAV8cgjsUE=
Subject key identifier: 54:C0:6F:9F:FD:AB:3F:59:0C:BF:FC:1E:11:F5:00:1B:0A:0C:97:6A
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 0198D4733F319C01CD963827D3B1EC9802EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0BF8
Signing time: Sat 23 Aug 2025 01:02:59 +0000
Manifest this update: Sat 23 Aug 2025 01:02:59 +0000
Manifest next update: Sun 24 Aug 2025 01:02:59 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: B8RCfB2dijEX9rBDL79Lju3TxwJ8LxRWMjTqGb8G3Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3f:31:9c:01:cd:96:38:27:d3:b1:ec:98:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Aug 23 01:02:59 2025 GMT
Not After : Aug 24 01:02:59 2025 GMT
Subject: CN=54c06f9ffdab3f590cbffc1e11f5001b0a0c976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:32:5a:a9:88:07:99:78:a4:54:9c:9f:3e:
c3:df:5c:38:26:d5:8a:dd:d1:2b:bb:bc:61:d2:ac:
6f:bc:b9:e6:bd:98:a2:28:5e:5c:f9:d0:d8:f4:26:
a9:2d:a5:4b:b2:ac:31:63:46:4c:97:4a:3f:c4:b6:
ce:d8:4b:37:b6:a0:fe:65:07:c0:d4:18:36:e9:13:
eb:2a:a8:be:76:60:90:59:1e:b6:7b:fe:c1:6d:34:
31:ce:0a:df:bd:cf:db:03:c3:0d:63:b6:d9:09:08:
12:08:fc:64:9a:70:6c:02:80:77:89:82:e7:f9:0b:
85:75:b8:61:da:2a:56:2c:8e:6f:af:c9:37:ca:36:
fc:d4:a3:9a:9f:97:8b:83:ca:76:b5:ce:4a:df:a3:
96:6a:20:2c:cd:3e:e2:d0:4e:05:dd:a8:ac:df:28:
f6:ad:fd:1f:33:71:79:0b:bc:a8:d7:ab:53:43:eb:
67:78:8f:21:34:b8:ed:bc:58:33:ea:98:06:66:7b:
f3:c3:e1:8f:9a:3e:3a:ed:66:f1:8f:82:f9:2d:ed:
6c:56:bf:8c:a3:1e:46:40:03:52:bb:6a:42:65:31:
79:c1:78:a5:37:bc:3d:d7:df:dd:9e:81:0a:92:22:
88:c8:39:f2:38:f6:38:6a:57:93:a3:dc:11:57:81:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C0:6F:9F:FD:AB:3F:59:0C:BF:FC:1E:11:F5:00:1B:0A:0C:97:6A
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:ba:09:3d:92:8c:60:86:df:95:da:f2:41:b0:13:54:99:
c1:a6:63:c8:73:aa:82:f7:e0:70:85:f2:d7:73:93:5e:78:16:
b2:41:cc:ca:c1:21:d8:f6:ab:4d:4e:f8:c4:71:9b:27:43:82:
20:5a:26:3d:b9:44:88:53:3e:b2:36:ab:c6:9a:3c:af:80:92:
e2:b6:24:58:1e:c4:f3:c0:0e:d8:07:c8:97:ee:d7:26:82:4b:
26:7e:22:ea:36:02:15:7c:38:a1:9f:c7:ca:5e:a4:8c:f5:54:
66:99:3f:1c:6f:b4:7f:56:bf:c2:52:29:cc:e2:37:eb:f4:e1:
6f:58:a6:4d:e4:29:a1:fa:32:52:2b:56:ac:72:a4:82:f4:07:
56:48:d6:69:49:29:f4:9e:34:ee:a7:cd:2d:ed:62:16:ab:9e:
ab:f9:57:06:b1:83:3c:f7:c4:72:61:30:9a:26:c8:b4:7d:83:
0b:46:ba:29:b2:c7:9a:8f:e6:06:ef:cc:1a:96:89:e3:18:ad:
73:2b:4c:68:db:75:c0:c6:74:c5:61:5e:aa:15:57:7a:e5:26:
42:b3:15:bb:b2:b0:e2:73:0c:52:42:7c:43:8a:77:25:4a:18:
7d:70:42:1f:3e:b5:c2:e5:d4:4f:49:aa:58:b3:0f:6a:da:76:
24:96:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:16 2025 by rpki-client