Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: WST769Mn/e5DUZZ8Ru+0u0inXna1QpIi0+YDpGhsxvE=
Subject key identifier: AC:C9:0D:1E:FA:FA:11:00:BC:FA:8B:0D:C4:33:66:F9:6B:14:1E:50
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 0198D4DFE06233A348256CF846E49B28E188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: MvvpCbKMGDbgYBFwLM3R7W7cWmUZIV/8w11CJ1sneog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e0:62:33:a3:48:25:6c:f8:46:e4:9b:28:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=acc90d1efafa1100bcfa8b0dc43366f96b141e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6b:d6:9c:85:9d:e0:68:9e:a7:bd:06:f2:09:
06:71:1a:58:52:52:8b:a2:aa:85:50:07:b8:6f:3b:
a7:40:e9:92:b8:af:30:e9:8c:c0:d8:3e:d5:6e:04:
05:a6:c0:f9:12:0a:f5:09:6f:9a:58:1f:46:f8:4d:
92:31:a1:ce:4a:0d:48:7f:06:37:a8:28:1a:9a:14:
31:c3:fd:74:ee:da:7e:16:15:a5:6d:2e:11:14:f9:
c2:a1:ff:4b:de:35:31:81:83:a6:3a:40:22:99:cc:
fa:9e:d1:e0:b6:a8:69:93:39:e4:58:88:48:e0:01:
bb:62:1c:a8:28:78:d9:62:24:5e:bb:f6:46:43:f7:
f8:95:9c:f1:68:c9:ef:b0:f2:d5:94:19:c5:03:37:
59:4c:69:12:7a:26:fc:ea:2d:bf:35:35:15:54:3a:
38:dc:65:c7:49:28:c3:f4:e5:f4:a9:b9:ec:56:ad:
de:5d:40:be:c8:fb:52:76:57:4e:fe:98:6c:a6:52:
f7:b7:ed:58:7c:2a:89:b2:fa:4d:e2:33:7c:39:14:
97:b8:bd:37:53:4e:1c:42:87:24:18:46:c3:5e:07:
9d:31:19:f9:1a:ba:d3:c9:cd:59:44:8b:6f:b3:a9:
9e:24:5c:3b:e1:16:5c:e8:6a:13:24:c0:fa:13:09:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C9:0D:1E:FA:FA:11:00:BC:FA:8B:0D:C4:33:66:F9:6B:14:1E:50
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:65:19:b6:b9:1e:aa:1a:0b:63:ff:83:3d:a5:0f:b4:e2:f4:
5f:91:3e:bb:a7:20:cd:ab:9e:ca:f6:cd:4a:0e:a4:06:86:11:
3e:1d:8a:53:d0:6a:bc:13:65:17:fb:b7:68:cd:62:97:cc:ad:
8a:89:99:3f:5f:58:9b:1c:68:a1:4a:6e:d2:86:52:f1:15:07:
06:b1:43:63:95:1e:65:81:13:24:46:d0:f9:02:a3:4b:d7:c7:
41:59:29:34:fc:14:ea:66:45:ad:11:1e:19:ed:d4:f1:69:7b:
e5:34:b1:ea:49:17:d9:63:43:0f:06:97:f8:80:31:46:75:da:
60:18:5a:50:d8:c6:d7:4c:6f:46:37:fb:73:1b:63:0b:e5:1e:
a4:38:08:d5:f2:85:de:4d:12:61:f9:2a:00:1e:bd:94:da:6e:
38:04:47:a0:8b:e5:de:85:cc:2e:1d:40:7b:6f:7f:8c:d8:39:
90:be:82:3d:14:cb:d0:e9:83:2b:2e:92:71:30:ac:f5:9c:68:
b7:43:56:6c:86:31:58:44:b9:f2:54:3f:c0:48:c2:73:9b:d1:
c8:b5:1f:3d:03:09:61:a4:ce:a9:88:ab:b3:a6:b9:dc:de:96:
7a:d8:ac:4e:f0:67:e5:0c:1f:e0:56:60:2d:2d:f2:a5:e4:b5:
b0:e7:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:52 2025 by rpki-client