Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: W0N7U4d+s1Lw8K/qPTsPprg2u0UMjgDgQNRk6ATDy+s=
Subject key identifier: 57:91:46:DD:9B:E6:6C:FC:5F:BD:0C:19:25:3B:C3:D2:77:CE:0C:15
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 0198D7A8F89627B47DB62B1F915A42AB7C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 16:00:31 +0000
Manifest this update: Sat 23 Aug 2025 16:00:31 +0000
Manifest next update: Sun 24 Aug 2025 16:00:31 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: AZc1txb8G0+2UKcwkUljvK3whq/h6J5joClSTLSYr4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:f8:96:27:b4:7d:b6:2b:1f:91:5a:42:ab:7c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Aug 23 16:00:31 2025 GMT
Not After : Aug 24 16:00:31 2025 GMT
Subject: CN=579146dd9be66cfc5fbd0c19253bc3d277ce0c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:76:52:97:b7:aa:8a:ac:ee:8b:5c:27:2b:ea:
56:e5:26:ed:2a:b6:b5:57:0f:e1:2a:94:6e:15:67:
5e:d4:f6:3c:18:f4:bd:c6:8d:c7:8a:65:05:5b:5a:
4c:e4:b6:68:51:fa:8d:36:5e:42:90:0c:af:7b:b6:
0a:9d:fc:18:7e:bd:33:fb:aa:42:32:92:4c:5e:46:
a1:cd:e9:ac:36:7a:94:64:70:62:2e:e7:75:37:d8:
aa:17:75:ab:06:16:ef:c0:7c:c1:1a:32:6d:aa:18:
65:e1:2c:71:d8:92:20:90:6c:ee:a6:ae:39:3c:a0:
6a:56:f1:d5:2d:f9:bc:95:a3:70:9b:77:1b:ef:1d:
71:03:62:fd:17:e1:6b:25:f0:82:d5:79:c8:c2:74:
da:33:e3:68:a6:35:e8:eb:ea:74:de:42:76:7c:b0:
63:27:60:b7:ac:c0:73:0a:e9:7c:aa:11:81:bc:23:
c6:f0:d7:92:1d:2b:f9:4e:89:93:e2:15:6a:6a:15:
0a:31:25:4f:35:fb:65:0d:27:75:e6:3f:7a:2b:d7:
95:9f:59:67:28:b6:ea:5d:51:19:cb:51:88:e4:4b:
3d:39:af:15:46:bc:6a:47:a5:e1:dd:37:dc:60:e9:
6b:b4:66:85:31:0a:e4:a5:df:8e:03:f8:63:12:91:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:46:DD:9B:E6:6C:FC:5F:BD:0C:19:25:3B:C3:D2:77:CE:0C:15
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1e:18:c6:01:e2:ec:c7:70:e6:5f:4a:71:9d:f7:06:05:be:
57:b5:16:4e:b2:4a:b7:bb:2d:48:1f:a8:3d:7d:4a:2a:28:cc:
d8:5b:77:92:f9:0b:2c:b3:eb:08:35:48:15:c1:ca:34:bc:7e:
05:d3:b8:db:22:f0:4b:e9:07:07:10:d2:52:95:53:02:e0:1e:
9b:b5:73:57:ba:c6:c9:10:b1:ee:65:00:e9:0b:91:10:ee:4a:
f0:b7:96:c4:78:e6:b8:7a:f5:86:07:29:bd:74:97:02:dc:17:
83:7a:37:b6:ba:01:ba:57:53:c8:f0:33:dc:b9:0d:b6:ed:cd:
3b:ab:5a:ab:38:2c:7e:3f:16:6e:90:a0:da:0f:5c:2c:66:16:
e8:09:6e:1c:07:a0:e8:42:9f:74:5b:17:b9:42:e2:53:b6:8e:
43:d6:57:31:97:0f:6a:46:e2:dc:57:fa:e3:06:a6:85:c3:f6:
09:a5:05:d1:87:2c:25:e6:14:ce:b0:96:54:3f:51:4d:61:f4:
df:2f:ad:92:f8:52:78:1a:d7:d2:89:73:7e:64:4c:3d:12:2b:
8f:4c:6f:50:dc:80:64:4f:ee:53:d5:73:c4:0e:99:d4:34:ff:
f1:cf:58:24:2d:c5:cd:c8:26:21:81:b8:3f:5e:8d:f0:67:e7:
43:b9:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:30 2025 by rpki-client