Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: 0eA/OMQ2ir2y+F18KccehyvKj0EZqHJ/rVfUdBZCS0Y=
Subject key identifier: 64:4E:C9:D8:69:4E:7C:72:DF:3B:42:88:0D:34:D7:8D:8E:BD:56:EB
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0198D47257048BB37F7904F7485D2D3AB1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 15D6
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: xYwYjC0OqplYD76zJbVWrNEJOHCHJ8Se7Bz38WQFn98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:57:04:8b:b3:7f:79:04:f7:48:5d:2d:3a:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=644ec9d8694e7c72df3b42880d34d78d8ebd56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:57:d1:eb:e7:ee:88:e8:e1:db:f4:0b:26:
a9:32:b2:f6:b8:fc:5e:b8:87:54:b5:35:3f:94:fb:
dd:93:5d:af:ec:f5:da:8e:b1:01:71:ff:c5:f2:95:
fb:1d:6a:ae:5a:6b:6a:96:ba:16:ef:ea:3d:df:f5:
3e:3c:c2:14:0b:ea:99:14:02:dd:11:a3:eb:75:3b:
a4:ce:b0:22:16:92:d3:3f:a9:96:35:6c:62:2b:7f:
10:0b:63:a2:59:d1:6b:f1:91:eb:e4:66:4c:e9:2d:
92:6d:0b:08:ce:66:91:6e:b5:0e:58:97:1e:e6:fa:
4b:1b:11:f7:f1:4a:84:03:12:77:f1:91:a9:32:f1:
eb:22:12:5f:e1:30:5f:8e:ff:93:71:c9:d7:5f:e1:
f1:96:33:ae:77:b8:0c:ed:c8:38:35:05:18:63:5e:
b8:7f:ec:51:bc:e7:be:0c:c3:6e:e7:76:0d:26:8a:
bd:c4:96:b4:12:a5:fd:1c:2c:aa:cb:78:aa:24:68:
4a:8a:6d:1d:7f:ac:59:c8:cd:d1:78:f1:d8:3f:c8:
07:65:72:b6:14:33:5b:ba:2b:93:78:9c:b5:43:57:
e1:a7:83:2c:63:03:a2:68:83:cc:ce:78:71:5a:9b:
db:03:d5:bc:26:ef:b3:08:da:0f:ad:a1:b3:9c:98:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:C9:D8:69:4E:7C:72:DF:3B:42:88:0D:34:D7:8D:8E:BD:56:EB
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:a5:d9:67:93:67:d2:c4:8f:47:a9:f9:72:de:3c:30:ea:
f2:3d:cc:35:0e:da:1b:40:a0:0e:18:03:e5:ce:6e:7f:c2:15:
8f:b3:1a:4c:25:ba:a3:db:a3:b1:af:61:68:f3:8d:1e:36:12:
45:27:dc:18:dd:eb:b7:31:5a:e5:24:1a:14:68:ec:a3:23:b5:
d3:92:fb:ed:43:45:77:a7:e8:9d:ba:23:e2:dd:21:20:cd:22:
0b:98:58:dd:5f:0b:72:40:de:d1:9a:80:3f:a0:47:d1:a1:00:
01:67:e4:8c:e4:13:0d:3b:4a:a8:4e:dd:20:49:5a:af:4c:2b:
34:ef:6b:53:1a:16:a0:49:0d:43:07:c1:f1:9e:7e:5c:a4:e6:
f3:f8:a3:3a:73:59:33:5b:2d:bb:a2:27:20:15:60:f1:5a:b6:
54:d6:30:33:ad:86:7d:51:7f:0e:c8:23:59:79:2a:44:5a:69:
fc:c4:ed:97:13:8f:4a:1a:28:59:ab:50:2a:0e:b0:7e:f7:14:
1d:22:65:19:db:d8:2c:83:5d:d1:9a:0a:25:c7:17:c0:0c:eb:
38:18:20:af:38:59:93:e1:3e:63:34:ac:1e:de:c7:af:6b:76:
13:36:74:57:cc:04:a3:57:f9:5e:8d:41:f1:52:32:02:72:de:
5d:9f:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:56 2025 by rpki-client