Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: pw4opiqAa1i+mgMw6YyVbuCDkWwhikpR+NtlcdG0X7E=
Subject key identifier: C4:4D:EA:5B:EC:C4:16:C9:1E:A9:CB:54:EE:FA:01:B7:44:FF:C8:66
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 0198D5162D252FBE34FF06DF26B19B8E67F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 15A6
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: IA4s46ETCckX+LNv4oTdzRH9OsuPpo+vAfp4xlGs5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2d:25:2f:be:34:ff:06:df:26:b1:9b:8e:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=c44dea5becc416c91ea9cb54eefa01b744ffc866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:ff:c8:a2:52:5c:75:93:05:8e:b2:66:2f:
09:f8:f7:36:af:27:ce:4c:6b:cf:fe:0b:15:97:f4:
bf:c6:8b:d9:7d:25:3f:c4:a4:df:28:16:91:f5:cf:
25:58:7b:36:83:df:a4:30:84:d7:ad:31:c2:82:c6:
5b:e0:d4:26:b1:89:e8:79:29:35:d2:c7:51:e0:f8:
35:31:d1:18:58:2b:9c:e0:be:a5:a8:bf:a8:29:98:
98:0c:0a:dc:e3:74:de:fd:7b:70:07:f3:f9:42:31:
e1:ed:24:b1:1f:6e:09:66:ec:e7:b6:b5:b0:fe:4a:
14:a0:f0:be:a9:25:21:cf:74:52:3f:af:9c:b6:13:
d5:ee:d2:fa:a6:5e:0e:ea:de:6a:dd:b5:d8:40:25:
ae:0e:0b:3c:9a:d6:61:ca:9a:31:85:69:03:7f:c3:
8b:4f:52:cd:10:52:21:4b:fd:b6:b2:34:21:87:10:
f7:72:16:82:ca:13:61:5d:64:dd:10:13:b7:06:56:
71:69:a9:13:5f:e5:2c:59:f7:a4:3b:60:30:56:3a:
27:de:53:e8:17:30:78:61:c4:84:02:68:97:a3:1f:
79:f1:08:a0:73:42:46:fd:71:cd:21:a8:06:47:a9:
44:86:c6:d9:14:c6:f7:6d:73:6a:e1:8d:21:0a:02:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4D:EA:5B:EC:C4:16:C9:1E:A9:CB:54:EE:FA:01:B7:44:FF:C8:66
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:f1:da:54:64:72:46:1e:66:92:f0:a6:12:50:13:6f:cb:
a5:a3:1f:bd:ee:8a:9c:f9:57:0b:9c:e8:64:b7:02:8d:1a:4b:
ae:4e:48:6f:c6:47:3a:4c:09:13:7c:ce:ea:99:35:fe:a8:ef:
e6:00:f5:f9:3e:b9:a0:06:ab:78:4f:26:f8:82:c1:0e:ca:87:
3f:95:bb:46:32:08:eb:a9:99:92:76:c1:51:3d:89:7a:21:d1:
17:00:cf:12:49:64:f9:49:6d:25:36:db:d5:89:c3:03:3f:79:
02:1c:5e:90:58:00:7d:3b:12:d0:43:62:3d:54:14:ff:86:00:
96:84:e2:ed:3f:74:a4:5c:03:fc:f7:5d:09:f3:d7:87:f0:1e:
07:a0:20:2c:4b:19:ac:a4:bd:86:ae:4a:21:68:2a:4a:cd:de:
5a:e8:cd:28:fa:d0:c6:b3:3b:77:2d:c2:a3:f4:76:77:36:d1:
0f:fc:15:8a:de:25:d3:fa:e3:c8:37:6e:c9:a5:5b:d3:26:63:
0f:54:28:e2:4b:31:d1:c8:64:6e:b9:cf:5d:a2:b4:c6:ee:c1:
57:b3:d1:2d:58:63:31:ff:2f:e1:8e:80:ac:ac:2c:91:86:89:
4b:d1:27:0a:1f:69:fe:7c:24:cf:3a:1f:7b:12:d1:b8:89:9a:
a1:b7:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:24 2025 by rpki-client