
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: gbiqAphvRSQ2A2JWyEBqQ4i0tq6ZbOPcp76og1+C7Jc=
Subject key identifier: EE:D2:59:BD:B1:F7:12:3A:29:51:25:7C:A4:20:C8:E7:FB:BA:B8:91
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 0199FBEAED3B1149D2E574FC355A594EDAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: YV/Nsis7gwsGPDMO9c/3f8PYMj6s2CHO6n87IInqAls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ed:3b:11:49:d2:e5:74:fc:35:5a:59:4e:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=eed259bdb1f7123a2951257ca420c8e7fbbab891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:9d:8a:98:b2:62:2a:3d:c6:00:c3:df:26:
5f:42:2e:c2:0d:0e:f2:9d:df:cd:ae:8f:82:d3:71:
19:5e:ec:28:cf:ce:d5:10:86:ef:83:31:f2:7f:80:
43:29:c8:15:e6:ac:19:86:20:00:a4:e0:47:68:1d:
88:8d:fd:a0:54:4b:ba:8c:3d:35:73:00:93:cf:04:
8f:3b:49:1f:19:55:58:87:46:39:c1:05:65:76:02:
38:76:d1:b3:2a:7f:9d:d3:65:c7:26:06:10:92:68:
8d:40:56:88:51:53:61:c2:90:f4:68:6d:00:7e:ba:
c8:d0:34:85:7f:8f:e6:ac:04:c9:3b:c1:76:ac:1f:
fa:ac:7c:a1:2b:25:4e:1d:95:8e:47:78:a1:d9:af:
a3:ab:22:bc:6f:65:9c:6a:d2:39:db:1d:e4:fb:c1:
10:aa:ea:e8:58:eb:40:15:01:2c:e9:f6:fd:55:ca:
8c:89:2d:38:1b:fb:ec:b9:0e:92:3c:ac:bc:5e:1b:
59:d3:c4:b0:e0:1f:22:29:f9:c8:50:1f:f4:b8:b0:
52:f3:cb:20:02:39:e4:13:18:b9:ff:42:8a:89:7f:
d6:14:c9:df:f7:57:97:a9:0e:28:b1:a0:23:0d:63:
d2:34:7a:6c:24:6b:76:78:d0:15:02:d7:ad:85:35:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:59:BD:B1:F7:12:3A:29:51:25:7C:A4:20:C8:E7:FB:BA:B8:91
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6a:c5:44:49:d9:d4:08:9d:ff:f6:1d:07:34:4a:af:6b:9f:
79:74:07:ff:4f:30:45:26:bc:0d:fe:ad:fd:ee:d3:0d:1d:c6:
cf:be:d1:02:fc:d2:0a:52:a6:f8:e1:c3:94:cd:a1:a1:7e:37:
54:64:12:14:ee:e5:ab:13:ee:15:25:f8:5a:0c:41:37:ea:96:
df:f0:0c:3f:ea:11:58:8e:8b:40:70:bd:97:9c:69:93:39:69:
87:5e:b3:48:d9:d1:17:ce:07:d7:b8:40:de:63:3f:e6:a1:87:
fa:91:ab:3c:1f:d5:9c:0d:29:a4:e1:43:96:05:e0:1f:bd:d0:
7e:be:ff:74:94:b8:c4:14:fd:17:cc:1c:01:d1:25:06:55:ec:
b7:80:35:c6:34:e3:31:e8:96:89:02:31:ab:a7:17:7f:d1:2e:
0e:a5:b2:b0:83:78:88:ec:96:d1:b1:23:b3:32:3a:4e:19:2b:
f5:82:47:85:39:9f:6a:98:b7:5c:1f:1b:15:d8:02:f6:74:5b:
c2:ba:dc:72:ee:01:98:f1:43:f5:b0:4a:4f:82:f1:99:93:d9:
2f:6e:19:fa:13:12:a0:80:53:47:9b:0b:90:11:b2:83:40:85:
5b:da:de:1e:c0:b3:f2:1d:2d:5e:ea:f0:c0:be:47:84:dd:a4:
22:00:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:17 2025 by rpki-client