Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: Gzb2R2Pf6isCra+t3LvdPAgdtyf2igZLkM116ba5Wsk=
Subject key identifier: 9D:B6:6B:35:F3:84:83:CA:FA:02:88:3E:53:66:50:73:F9:BA:9E:45
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 01987D8B2F57DD138ABCB24E8E0F8743B596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0A6C
Signing time: Wed 06 Aug 2025 04:02:10 +0000
Manifest this update: Wed 06 Aug 2025 04:02:10 +0000
Manifest next update: Thu 07 Aug 2025 04:02:10 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: ilVbKH4FHHznOHpS59qFXs6zYvoB97nYT5jgqVIpgiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:2f:57:dd:13:8a:bc:b2:4e:8e:0f:87:43:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Aug 6 04:02:10 2025 GMT
Not After : Aug 7 04:02:10 2025 GMT
Subject: CN=9db66b35f38483cafa02883e53665073f9ba9e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:2b:86:c2:a4:3a:db:04:e1:c0:f6:a8:57:
9c:62:99:c6:c3:f1:52:9f:c0:43:2a:eb:b6:f1:20:
75:94:ce:eb:90:97:d0:5e:aa:20:e1:e4:b7:c5:93:
c2:d8:e6:53:29:4f:5e:0e:c5:08:31:06:0f:37:d9:
64:b7:36:09:0f:0f:15:f3:00:94:42:7c:09:38:34:
cc:3e:ea:f1:3b:38:43:44:8d:b8:58:b7:e9:89:d5:
b5:53:83:dd:3c:5a:42:d6:a3:4e:d7:cb:b7:85:48:
64:1c:df:f2:65:0f:f1:66:70:f8:88:e7:0e:2f:4a:
87:bd:ff:a4:64:54:69:ab:42:e1:db:0f:6d:c4:30:
5c:65:41:22:3d:37:7a:75:e3:ad:00:14:16:30:e9:
ff:54:2d:5b:0c:f0:c1:e7:48:6f:f8:8e:f7:66:0d:
3d:41:b6:54:eb:22:ac:c8:b3:f0:10:cf:78:a4:84:
99:3a:76:e4:37:ba:5a:9b:5c:13:b3:b5:ba:8c:2d:
25:c2:a2:4a:d6:b7:a2:64:a4:f9:8b:e5:0d:93:33:
61:4c:c1:71:51:6a:2b:ed:ed:4b:b4:41:59:aa:bd:
ff:df:26:12:2a:4c:72:1c:65:75:43:90:e2:78:d0:
b8:67:40:e1:68:f9:ca:6d:3a:26:51:43:d3:43:ab:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:6B:35:F3:84:83:CA:FA:02:88:3E:53:66:50:73:F9:BA:9E:45
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:61:2d:56:98:cb:92:44:50:f9:df:66:ad:21:c2:2a:c5:
62:16:e5:0e:8c:11:cf:13:9c:77:4b:7d:a2:35:87:e8:63:0c:
14:4c:40:85:98:19:ba:f6:d9:f4:ef:fb:1e:1e:78:d3:72:af:
2d:b2:2b:94:66:f1:ab:25:bb:94:21:48:ea:96:10:25:f2:56:
27:d9:ae:1b:25:12:62:05:c0:2d:00:fb:ee:7b:77:87:33:05:
70:18:ac:9a:d6:7f:7e:0f:73:46:4d:40:a6:fe:25:79:94:e7:
d3:50:0c:a9:61:78:83:16:ed:81:18:d9:ef:ee:0f:f0:af:9c:
be:19:cc:6b:b9:36:f6:71:c8:c8:e4:63:01:5a:6f:9c:d7:d7:
6a:34:2b:2d:98:eb:a2:4a:aa:4f:56:1b:17:a6:7c:2d:d3:74:
ee:61:35:b1:20:f7:aa:1a:38:c1:8c:63:99:ad:79:f4:2c:75:
c5:8a:d8:e2:ca:ce:fa:e1:c2:f2:42:80:3f:c9:5e:d2:42:f6:
d2:85:9c:cb:b0:c9:63:0e:ef:fa:22:cd:f1:c7:e5:70:8c:a0:
9f:90:5c:2d:e2:59:28:db:d7:63:ea:67:91:23:e1:72:75:bf:
44:ae:2f:f0:77:86:98:fe:eb:df:fd:5d:e3:8a:1f:49:28:82:
32:93:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:00 2025 by rpki-client