Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: i8/H5nSACTTEaB0VjLsdupwrdDRse3vJCxCFGh+MhXA=
Subject key identifier: D5:D6:F4:78:76:87:3A:FE:0C:A3:84:4D:F7:A3:BF:A1:8D:C5:2D:07
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 0198D472554CC00F80ED3F4743AF33ECEA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 0403
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: irf+krPlaWdivnad1TB1hHvQbQ8X8zYYD6CBpPQf0WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:55:4c:c0:0f:80:ed:3f:47:43:af:33:ec:ea:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=d5d6f47876873afe0ca3844df7a3bfa18dc52d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:9a:1c:7e:75:62:0a:9f:52:12:cc:32:ad:
e8:91:0a:8b:62:0e:34:95:a6:5b:b1:bc:da:5d:3a:
ac:6c:5e:0f:ea:6e:e8:58:fd:c6:c1:3b:2d:25:6a:
cd:55:19:a6:c8:20:68:f3:49:fb:22:85:17:7a:f4:
3b:e2:56:d2:91:29:1c:60:85:a9:d0:e3:4c:2f:10:
b4:8c:0a:92:9f:ab:9f:03:4b:31:06:d9:a4:9e:64:
11:a0:af:28:63:4b:38:9a:7b:90:75:79:ae:ee:de:
ff:a8:68:79:95:b1:74:5c:8e:67:7b:6d:16:c5:8b:
ff:91:47:8e:2a:85:3c:21:3b:ac:c3:58:fd:4e:22:
8b:72:d0:66:a0:d0:1b:7c:40:b9:a4:0f:9f:2a:64:
f2:d0:58:6d:6b:94:91:85:5b:ab:e8:f4:eb:72:8c:
12:9c:7c:61:11:32:5a:d1:96:ab:2a:8d:cf:bf:68:
87:08:01:af:25:b6:b2:d9:fd:56:52:01:f7:45:06:
4c:af:d9:bf:c7:7f:c5:dc:f7:d8:aa:2e:1d:a8:2b:
a7:de:fd:68:6a:c0:b4:13:d5:50:5e:24:fc:2f:4c:
6d:bd:30:45:34:30:0b:39:ae:b5:1e:49:9a:54:a1:
9b:27:f1:c4:b4:24:8a:71:ed:b3:3e:b7:86:a2:7a:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:F4:78:76:87:3A:FE:0C:A3:84:4D:F7:A3:BF:A1:8D:C5:2D:07
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:05:9d:47:23:f4:ac:78:92:f8:3e:86:64:41:18:b7:2f:
fb:74:ed:9b:60:8d:d7:e6:15:4b:14:fd:89:b9:23:45:b2:89:
35:fe:2c:55:ab:06:db:37:38:8a:06:27:dc:91:bc:0c:7a:fd:
61:f5:0b:c2:db:49:98:b6:24:8d:43:30:b9:e4:0f:2d:2a:ac:
8a:95:42:3e:78:a7:9c:76:a8:5b:34:31:56:91:58:36:ab:b3:
02:c8:3e:80:61:53:a3:bd:b2:09:d0:6d:03:d6:f3:86:d3:c2:
b0:6c:9f:bc:b5:83:7a:10:a7:2e:43:ba:bd:92:0b:0c:c1:08:
b3:9f:70:26:66:76:fb:8d:87:4f:e9:fb:77:8e:9d:cc:80:f0:
15:e0:cb:30:ca:f0:6e:73:2a:5c:20:d1:a3:2f:5c:62:a4:e1:
08:e1:64:bc:17:72:e2:00:d5:b9:f4:68:8b:8d:a0:bf:ee:7a:
30:cd:06:28:64:ef:78:8b:b7:48:29:ad:54:b7:2d:ab:f2:06:
8b:b2:28:52:3e:48:df:4b:ef:6a:4f:20:80:b8:57:da:d8:04:
c5:7b:16:9d:b2:a0:a4:c7:3b:40:56:7e:9a:70:aa:fc:49:76:
c8:be:a7:18:ff:e9:bb:af:2c:3e:90:d3:17:17:99:4e:7e:25:
3d:2c:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:16 2025 by rpki-client