Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: jcW3AM95iMR7c++hZMzfByoMX1e0BHEd4QZvPKhqyJY=
Subject key identifier: 36:7A:90:DF:03:41:D2:F4:7E:12:78:D4:17:C7:FD:08:7F:77:BD:4C
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 019881685A263A8441F8471C30B9ED3FEBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: D2
Signing time: Wed 06 Aug 2025 22:02:36 +0000
Manifest this update: Wed 06 Aug 2025 22:02:36 +0000
Manifest next update: Thu 07 Aug 2025 22:02:36 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: BUBPLY4k8M/lDsnr2Bv/BYJ4ADZ9HlI6EqtuRM6lwQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:5a:26:3a:84:41:f8:47:1c:30:b9:ed:3f:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Aug 6 22:02:36 2025 GMT
Not After : Aug 7 22:02:36 2025 GMT
Subject: CN=367a90df0341d2f47e1278d417c7fd087f77bd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:87:d9:b3:6f:f1:79:98:b6:88:8d:02:98:
30:02:04:24:e9:93:ed:20:f7:19:d0:a1:e2:be:27:
16:0b:f8:5b:7a:71:bd:14:57:07:6d:5d:ac:ea:fb:
70:01:b7:3c:83:db:d1:3c:db:6e:a3:38:91:f9:a3:
f9:e6:92:9d:08:cc:40:d8:f0:d7:e8:88:54:02:a8:
1a:f4:8a:4b:40:eb:e8:ef:a6:4e:b8:7a:91:ad:43:
25:02:69:da:c2:55:ef:64:9d:00:e7:85:e6:fd:51:
55:34:f9:96:f5:61:2b:23:ad:2f:79:2b:24:b5:8f:
6e:3c:80:30:72:7d:98:6b:86:88:3e:08:f6:e8:e0:
d8:a1:21:bd:17:c8:58:97:3b:b9:5b:a1:21:21:de:
4f:a3:e9:55:03:49:60:52:72:c2:7e:6a:6e:71:d9:
33:2f:ea:ae:35:74:7b:c1:90:5a:f8:91:a5:1f:ff:
b2:58:3f:10:32:ef:89:04:fc:55:92:8e:5d:48:b1:
1f:44:67:b8:fc:f3:b9:bd:04:fa:4b:29:dd:19:37:
0c:ca:0f:52:c6:81:ab:80:ac:e7:07:76:a1:0e:62:
6d:93:53:9a:15:95:80:bc:63:89:00:43:29:00:d7:
ed:20:eb:05:a7:60:e0:c3:f8:02:18:09:6d:00:b0:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:90:DF:03:41:D2:F4:7E:12:78:D4:17:C7:FD:08:7F:77:BD:4C
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:08:50:46:c4:23:6b:1d:5a:70:b4:58:37:78:46:d7:17:0f:
b1:7a:33:a4:0b:52:4d:e3:f6:3d:19:5a:b0:1d:55:32:29:6c:
47:f6:66:8a:06:a9:d3:da:ae:da:a8:b4:5c:28:51:f9:dc:8f:
5a:32:83:cf:ca:c1:80:a0:21:99:b7:b3:98:0e:78:0b:dd:be:
62:4b:9a:4e:60:56:4d:c3:d4:cd:54:ab:76:8e:c5:2d:b1:4e:
05:48:2a:4e:e7:ba:18:54:5c:6c:dc:6a:88:9c:17:b0:37:a0:
b7:62:d1:21:e2:17:17:9d:43:d2:70:07:ef:42:fc:03:67:c3:
b6:c5:a8:67:fb:c5:1b:f2:b4:00:5a:7f:fd:9f:c2:85:d1:ae:
b6:fb:91:c9:64:5f:4e:01:16:8e:97:0e:f3:c9:a3:35:d1:1a:
15:75:3f:d7:b9:4a:d8:37:25:9e:b5:32:19:b2:c0:ff:42:ad:
9f:e9:3f:0c:52:8a:69:0f:60:2f:26:0e:b9:78:b0:15:4b:ec:
12:37:f2:57:e1:3b:11:ec:3f:49:a6:e2:46:7b:82:8b:ac:bd:
e8:7b:e4:b3:1b:57:2f:6b:9c:47:1b:b1:ab:d7:73:a6:2b:42:
30:e0:99:ec:3b:0d:32:fe:53:fc:5d:ce:80:1c:fd:01:ca:9c:
0c:38:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:42 2025 by rpki-client