Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: pnFGBS/laIqnDFKnKMSmbVeJY7N4uiWXxlFcVMmCgQk=
Subject key identifier: 49:B4:F1:54:9D:A3:96:4D:CA:02:A0:E9:24:9B:B0:78:57:E7:C3:36
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 0198D70576B726807DADE185904DC1398327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 13:01:56 +0000
Manifest this update: Sat 23 Aug 2025 13:01:56 +0000
Manifest next update: Sun 24 Aug 2025 13:01:56 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: a/5t6CzP/2HthPluonI7cSQ6Uu8RGl1c2ibHPYaQW/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:76:b7:26:80:7d:ad:e1:85:90:4d:c1:39:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Aug 23 13:01:56 2025 GMT
Not After : Aug 24 13:01:56 2025 GMT
Subject: CN=49b4f1549da3964dca02a0e9249bb07857e7c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:3e:e9:e2:36:3d:d0:2e:f5:36:8e:dd:c4:
81:04:50:11:cd:4d:3a:ff:f7:19:47:a7:ac:fc:c7:
cf:5f:33:ef:7f:30:36:5f:3b:99:03:c4:1d:96:7b:
6e:46:70:ce:83:4a:fc:ec:6a:52:6f:c6:56:a8:b2:
cf:79:54:54:30:72:8d:dd:aa:03:8a:6f:4c:77:d7:
27:e8:60:ca:e1:92:ee:8a:a9:ed:e3:6e:1a:e1:2a:
02:88:36:6d:2a:85:e8:b2:40:a7:c8:b9:79:eb:f3:
5a:ea:32:57:56:ca:da:fa:1c:e9:0f:53:c4:16:c8:
31:c7:2c:65:bf:25:e0:84:7d:78:82:21:9d:a8:93:
ef:2f:15:0d:02:1a:f2:73:9c:ae:5d:3e:44:db:e6:
ad:b0:c4:07:31:3f:3e:79:9c:ce:66:61:c2:2f:16:
c4:bc:fa:f8:82:3f:03:5b:55:3c:13:90:28:f1:2b:
60:bb:3d:b3:9e:23:8e:53:75:60:e8:bd:1e:46:69:
e1:02:c8:54:2a:82:72:7c:25:d8:ef:26:a5:5b:8b:
25:2c:dd:17:5b:41:ce:3f:39:7f:2b:fb:71:0a:22:
cf:2c:65:d9:16:56:60:9b:71:dc:2b:75:3f:35:54:
3f:24:ef:19:05:5b:8a:dc:bd:04:6e:08:a7:eb:4a:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:F1:54:9D:A3:96:4D:CA:02:A0:E9:24:9B:B0:78:57:E7:C3:36
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:f6:e5:e2:25:12:7c:d8:7f:17:b5:ec:54:5f:10:58:4a:
2b:c9:4f:92:e8:ad:45:5b:ab:0e:f5:90:f1:6e:81:3f:33:ae:
66:bc:58:48:7b:72:1a:bf:be:d1:e6:93:4b:fb:a1:75:bd:33:
a2:21:c4:bd:50:cf:eb:27:8c:59:44:4f:c3:0f:2e:a5:28:bf:
e0:1e:b4:00:6f:e0:7b:43:29:87:67:d2:5b:d8:6b:24:2f:a0:
c1:57:19:29:cd:43:a9:c6:80:01:b1:b4:75:ac:41:65:f0:22:
74:2e:7b:98:93:5d:cf:3e:c0:b7:a1:e6:ad:50:9f:b8:71:6d:
ce:6f:08:b6:41:84:64:2f:4a:35:6a:ed:79:89:1a:63:db:81:
92:dd:fd:1a:14:60:7d:fc:97:e5:b1:58:d9:83:f1:67:8c:34:
f3:c2:81:2d:3d:94:f1:4a:36:87:c7:3c:0a:6e:cd:d7:f3:cb:
b6:de:b5:33:94:26:ac:1d:d2:d3:41:99:c7:5f:56:4c:0b:02:
0e:42:19:05:0a:28:fc:6b:00:6c:d6:c0:2c:1d:ce:25:8a:c8:
4f:cd:6f:fe:79:09:e0:5e:a4:61:9c:a7:8c:06:59:c1:98:1c:
67:89:c8:b9:15:27:e9:96:d1:b0:7c:5f:67:72:51:35:6f:0c:
35:21:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:55 2025 by rpki-client