Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: mUvEbcDT7k9tpIMQt83N5k4pgM5pQhbnLVJXiX0oe/Q=
Subject key identifier: C0:76:27:2A:45:B0:3D:1D:92:78:9A:A2:83:33:0B:99:1D:4E:53:E3
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 0198D5BBA8FC185C3FBF53580D0DBDEDE8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: a5Fdt2lESUVtA2+tGij358mccfWpzABo0U5jRWBrvuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a8:fc:18:5c:3f:bf:53:58:0d:0d:bd:ed:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=c076272a45b03d1d92789aa283330b991d4e53e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:dd:19:06:81:27:9e:6e:9f:51:ca:e2:14:
d4:c1:d6:f2:22:7b:ea:a1:26:4d:87:36:e7:bc:f9:
07:1f:18:4d:58:d6:95:54:cb:9b:1a:fa:fb:d3:a3:
9f:c8:75:8f:bf:d4:9c:fd:a6:2d:dc:f1:fc:e0:d0:
e1:f3:98:2e:c9:4b:03:e8:28:8b:44:dc:2d:91:30:
9d:73:9a:6c:ab:74:81:4e:b5:ff:20:38:33:cb:bb:
62:57:66:21:89:ec:9a:60:f1:ba:9c:3a:c9:99:6d:
15:cc:4d:e9:20:f5:e8:5f:e4:e6:96:23:a0:0d:a9:
5e:9f:80:05:11:bf:18:96:3b:1c:85:c6:a9:e4:f5:
6b:ee:25:0c:2b:49:7a:2c:e6:b0:4a:70:76:ff:19:
0c:07:0a:00:b1:06:18:e1:f9:e5:5d:8f:ac:2e:5b:
1e:40:8f:ba:8c:37:ec:05:e1:88:f8:56:95:7c:76:
c1:bb:1f:ef:aa:ff:14:05:18:10:c9:12:bf:66:79:
ce:61:c0:8f:06:c1:c7:43:a7:7a:bd:80:f3:c9:c5:
4e:e4:92:bc:f0:b1:85:80:d8:3f:9c:dc:04:e2:d9:
40:9b:44:dc:a2:2b:f3:1b:11:ae:a9:1b:c8:83:6c:
2c:9e:72:6b:e0:f3:29:0c:ef:7f:7a:14:ff:44:3a:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:27:2A:45:B0:3D:1D:92:78:9A:A2:83:33:0B:99:1D:4E:53:E3
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:f0:d6:e2:21:66:4b:69:23:72:7b:0d:79:33:c7:0a:b8:
01:9b:48:7e:6e:eb:74:80:91:3e:99:00:e4:e9:bf:39:0a:a0:
e5:82:3c:c9:a9:73:c9:f4:e2:b4:f2:e9:b0:78:fb:bc:97:10:
f3:aa:db:d8:4c:f4:b3:23:b0:2c:30:58:f4:b9:a9:8b:e8:3d:
c9:a0:f9:ca:57:f2:02:fb:8f:95:c2:7f:4a:6d:40:9b:c9:fe:
55:67:79:67:c7:8b:58:b2:d9:49:61:57:c0:47:89:cf:59:a1:
d1:fd:6f:e2:1e:56:71:38:8f:a0:23:37:c9:35:3c:76:d2:38:
4a:d5:44:a5:e0:04:0f:59:a3:6c:ad:60:a7:6f:33:fc:21:c7:
f4:9c:94:35:be:7f:c2:41:1d:0f:f0:8e:37:c2:ea:9f:5b:ac:
a0:17:90:53:b4:04:74:28:28:f5:6b:c8:f0:ae:67:ca:75:61:
c4:40:72:6b:5e:7f:64:e7:b4:5a:55:68:de:c9:71:3d:6a:40:
24:96:c8:78:85:c8:96:00:6e:5e:7d:dc:21:9e:23:2d:d3:df:
41:32:cc:c1:06:db:3d:59:0e:b8:84:5f:8d:5e:6b:b1:0e:73:
40:07:2f:69:42:67:5f:aa:84:84:30:7a:41:13:d8:d3:d5:d0:
b0:ee:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:22 2025 by rpki-client