Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: I630Nz8Hwfizpyqqa+0TqNf7ECaQsJJfvxKqo9vNT34=
Subject key identifier: 7C:25:39:8A:26:92:E3:FF:EE:CB:6D:12:3A:49:AE:EB:5B:66:FE:75
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 0199FC8F730EACFF1184FB0DCD5F44ED9875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 163F
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: SeyY328UWadkncPOVU/RNeyP/ZzbYcgtkpvsLSFrewY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:73:0e:ac:ff:11:84:fb:0d:cd:5f:44:ed:98:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=7c25398a2692e3ffeecb6d123a49aeeb5b66fe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:b9:f5:88:d1:33:fb:21:ae:c6:fc:40:e4:
5a:a6:d6:ba:17:10:0f:98:98:34:d1:55:a9:e1:88:
f3:04:46:71:9f:82:0e:3f:5a:2e:78:de:04:42:91:
bc:d3:9f:66:f8:39:e0:e7:35:be:21:09:fb:29:0b:
5a:a9:f5:e6:2c:a6:de:1b:89:fb:6f:ba:c1:75:0f:
13:3c:c1:9a:b2:d6:31:8d:32:0b:2e:5f:66:87:1f:
b5:e1:72:d4:9f:e5:0c:5c:da:b6:03:f5:c1:62:ee:
05:63:ff:c6:7c:bf:9d:1c:c5:8e:fd:36:ff:e4:b6:
6d:2d:ef:f6:88:0a:6d:4f:cd:d8:fd:db:e6:a3:e3:
3f:4c:d5:08:2c:cd:1b:7d:a8:c2:02:2f:6e:28:2b:
83:10:ff:ff:4e:a2:4b:52:24:52:66:45:95:31:c9:
59:3e:c7:d3:e2:34:0b:8b:39:c7:b8:bd:86:e5:7d:
fd:d8:d7:6d:9b:bc:3f:e1:6c:1a:3d:13:6f:93:3c:
6e:9b:f6:06:aa:3f:4c:0e:03:99:c8:94:68:45:aa:
30:fd:51:5e:83:3a:37:43:ae:77:57:bc:82:8e:1c:
e4:de:47:c0:f2:39:9c:c0:a3:89:5d:ac:c5:64:69:
9d:30:6a:63:33:6a:4f:d8:87:19:26:56:ac:db:cc:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:39:8A:26:92:E3:FF:EE:CB:6D:12:3A:49:AE:EB:5B:66:FE:75
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:94:8a:a9:6d:cf:59:73:ca:93:38:87:e1:53:bd:5e:5c:f5:
20:aa:1a:f4:bb:68:06:8e:43:94:55:51:49:34:ab:ab:05:57:
8a:a1:ed:2f:ce:65:ff:75:d5:d6:64:8f:36:c2:30:ba:04:a3:
4e:5a:67:a8:dc:6d:dc:09:bd:0c:d5:1a:cf:8a:ae:e4:8f:fe:
8b:34:85:5e:62:28:fc:de:cc:ae:1b:b3:2a:2b:b5:3f:68:ea:
4d:f6:ae:c1:84:6d:6e:15:fa:a5:aa:8d:33:db:70:f5:05:c5:
13:7f:cb:6d:a3:22:b3:09:d0:dc:61:c8:05:99:ce:88:23:a0:
78:f8:cb:b8:35:31:aa:4a:f7:3a:ca:6a:f6:b0:a0:2f:4a:ee:
a8:6a:57:66:75:e5:bc:17:63:dd:53:7a:78:4f:fe:0a:0e:d4:
30:be:18:d7:07:46:40:39:f2:cf:c0:4f:4f:03:bb:4e:47:f7:
79:c8:b9:bb:fa:6a:fb:7e:e6:a7:5d:27:c2:6d:48:27:2f:4c:
a8:eb:29:4e:71:4d:3f:fc:e6:ee:51:5d:e2:ad:66:ea:23:f7:
1c:9e:12:98:b4:f7:85:c0:4e:8d:b5:71:98:52:3c:b8:46:1d:
a1:ae:06:0a:5a:74:0b:65:56:2a:0d:bf:40:08:0a:4f:c2:db:
42:97:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:47 2025 by rpki-client