Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: nhkaJsONqGzzklh5t1NTdXO191v3TdE1WaGuC4waqKY=
Subject key identifier: 90:E3:6C:1B:FF:B2:97:65:A6:28:3C:DF:84:12:8B:25:60:E3:C2:22
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0199FBEB372B7192B3A77EE636220C71C449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 166F
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: 56MaU00/ksp1KM02UCs2kGOwjXKYFnkOE/FaO+4zUU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:37:2b:71:92:b3:a7:7e:e6:36:22:0c:71:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=90e36c1bffb29765a6283cdf84128b2560e3c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bd:76:91:4d:61:38:f3:58:75:0a:5c:6c:34:
aa:a3:08:ff:4d:9b:11:3a:6c:f9:8f:e4:5d:c8:17:
32:ec:e0:18:95:9a:5e:06:5a:bd:fa:58:23:c0:5d:
24:67:0e:33:6a:c1:23:9e:3e:8f:2d:10:b6:33:88:
e3:dd:d5:6d:7b:60:e4:73:4c:93:58:e4:59:04:a7:
7a:bf:ab:91:c4:ce:21:c6:7d:6c:b5:e9:5f:87:41:
77:5a:47:83:80:c3:27:96:e9:2a:08:46:bf:72:3b:
58:8f:fd:22:33:db:73:7e:4b:4d:5f:50:97:e2:fe:
90:5b:f9:61:e1:85:c6:ae:ea:16:9b:67:be:82:53:
51:51:96:8e:a6:2d:5b:44:ce:d4:09:db:92:7a:b8:
42:fb:b4:c0:f1:c9:a0:51:7d:a1:70:4c:b8:28:ef:
17:0c:7f:35:dc:02:4f:dd:d0:e9:c5:ba:d4:8e:f8:
2d:f2:2c:5e:a0:49:bd:9b:0a:5e:95:e4:65:4a:b4:
02:d3:50:9a:ef:10:08:c5:71:c1:ab:69:5a:82:d2:
e8:a2:98:c6:36:24:25:7b:ab:f2:e2:72:35:e5:1b:
4a:3f:1c:1a:2a:4d:aa:21:00:e4:c2:2b:a0:db:9b:
ae:78:68:6c:49:e7:5b:c9:8b:eb:41:31:5e:35:9c:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:6C:1B:FF:B2:97:65:A6:28:3C:DF:84:12:8B:25:60:E3:C2:22
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:d7:f7:45:89:53:db:af:0a:77:8a:fd:98:1e:ef:4e:a8:
5b:29:65:66:10:22:8f:db:3d:68:e2:43:3c:ba:64:20:c2:ed:
f9:65:03:83:f5:c8:b1:bb:6c:4b:59:5a:9e:23:af:09:50:9b:
91:c7:ae:cd:3a:db:14:99:40:4d:16:24:70:fc:12:87:36:3f:
53:01:7a:30:91:8c:45:5c:5c:f0:2a:b3:30:8e:65:13:e2:c8:
21:53:22:1a:74:dd:3d:41:73:87:4e:f7:3c:f5:c6:99:5a:a1:
1e:58:3e:b7:d2:59:58:90:1d:e8:5c:80:85:ca:8d:7a:c1:a8:
a2:46:7b:d2:ab:56:6f:fc:27:17:f1:a3:fe:d4:f3:c7:55:4c:
d9:64:f5:51:11:51:8c:8d:23:e0:44:d2:e4:97:77:49:44:56:
cc:a5:02:a6:9c:35:6a:51:56:a7:3f:99:0f:bc:16:05:0c:4d:
e1:27:f5:d8:13:2f:9f:ed:2d:b7:de:d6:38:5d:14:f9:52:f4:
18:76:0d:59:15:bc:6f:bb:58:a0:04:a5:f8:7e:64:21:16:99:
64:9e:5c:7b:19:34:89:20:32:23:78:35:34:1e:20:ca:65:ac:
e0:42:aa:45:43:0c:60:03:b4:0c:92:d6:2b:6a:ea:f6:17:fb:
42:b6:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:15 2025 by rpki-client