Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: iF7ar/qnr567MnDdHZUGoSP+UYT4ms7TRvWQd9LiPWI=
Subject key identifier: 0E:9C:04:91:DD:7E:4C:6A:4E:23:17:69:20:A3:2D:7A:6D:48:DE:A3
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 0198D7A961BFE261DE0D99B220DD32EE1621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 16:00:58 +0000
Manifest this update: Sat 23 Aug 2025 16:00:58 +0000
Manifest next update: Sun 24 Aug 2025 16:00:58 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: YOqthMd+/CO+IGa+n8miHbiCvzWhTBDr3NJaaDAsF8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:61:bf:e2:61:de:0d:99:b2:20:dd:32:ee:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Aug 23 16:00:58 2025 GMT
Not After : Aug 24 16:00:58 2025 GMT
Subject: CN=0e9c0491dd7e4c6a4e23176920a32d7a6d48dea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:da:33:d8:0c:b8:0b:7f:bf:9c:76:a1:37:
7b:86:df:b2:49:9f:33:de:a5:d2:05:67:b3:6b:91:
e8:e4:9c:77:81:57:bd:79:75:7f:3a:78:01:99:4c:
a9:29:54:e0:e9:97:80:37:13:a7:b2:de:12:71:f8:
a9:b5:4e:78:21:83:c9:97:cf:c6:f9:1f:2a:b9:20:
fe:c5:91:28:e3:d8:c4:16:2f:24:6b:29:93:ea:55:
d4:97:14:3b:f5:5d:be:19:61:54:86:46:4e:b8:b0:
78:7b:bb:b8:30:18:d9:9f:06:3e:96:8a:56:0d:70:
f1:83:98:62:0b:bf:dc:fd:1c:77:f1:c6:71:c7:ea:
bb:7f:a9:96:1c:b1:4d:f9:62:3c:6b:30:ab:76:fd:
68:de:2b:5e:02:2e:6f:47:9a:74:1d:96:43:df:9a:
95:c0:82:30:fc:79:84:fa:7f:38:b4:e2:83:a1:1d:
ef:f9:36:9b:80:a6:1e:93:18:0e:a1:44:48:13:e7:
07:49:c2:c3:32:e0:a8:de:64:2b:60:50:7d:44:ae:
0b:b6:c8:87:e7:62:fc:54:a0:e9:c9:c3:2e:a4:b2:
0d:f9:13:0b:e5:b7:8f:48:a8:66:06:59:a2:4d:c5:
b5:db:8a:5b:b1:0c:96:3e:33:c6:fb:2f:d9:bd:4e:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:04:91:DD:7E:4C:6A:4E:23:17:69:20:A3:2D:7A:6D:48:DE:A3
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:a9:f7:fa:9d:00:1a:da:f5:b8:47:01:8b:7f:51:8d:e5:
ea:bf:b2:9e:37:11:e4:27:40:00:83:a3:41:45:d4:ef:4e:50:
42:ed:e7:01:e7:c1:ea:01:ad:31:09:d2:12:7e:99:14:eb:14:
35:55:4f:59:4e:43:43:e8:0b:c8:8d:7b:62:fb:1f:7f:1f:54:
bd:71:03:6c:b8:86:37:99:5f:fe:3e:a0:9f:25:ae:2b:6f:94:
30:ac:12:94:58:f4:4d:37:cd:0f:29:1a:80:9e:48:da:7d:0c:
fc:8f:81:bb:38:b7:ab:71:cf:3b:62:5d:31:02:28:30:6f:cb:
d1:70:ab:8d:d7:12:4c:0b:37:36:fa:f9:c9:d5:68:d7:11:15:
33:3c:6f:f1:9f:1d:52:ca:0c:b5:fc:71:de:d7:4d:e4:6d:5f:
a7:24:43:85:82:2a:b4:ff:4b:d7:f0:43:67:a3:7e:35:43:8d:
36:f4:7e:ef:6f:2f:9e:a7:81:61:db:eb:10:07:37:8f:0b:a9:
03:09:e5:87:e9:78:c8:ab:07:6e:a5:15:f4:c8:f8:f4:fe:e6:
25:21:14:a0:a0:41:42:c5:ed:46:1f:b9:ec:64:ad:39:0d:5e:
c5:05:88:94:b6:92:09:dc:d5:13:2d:80:8e:c9:54:3a:02:90:
9d:a4:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:04 2025 by rpki-client