Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: HychoZQ+LviRPfMthaQGFb1VG5Pibd8enpzz8bE8v1A=
Subject key identifier: 65:D1:51:27:7A:55:AE:FA:D9:24:F7:C9:23:39:BD:B5:1C:4C:F1:7D
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019893360DF169C0F8E972BB3C88ABADAB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 127F
Signing time: Sun 10 Aug 2025 09:00:49 +0000
Manifest this update: Sun 10 Aug 2025 09:00:49 +0000
Manifest next update: Mon 11 Aug 2025 09:00:49 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: YkK7hRn5saXcb8k1DeqZ5SMFvkIN280mrfX2BnmR89M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:0d:f1:69:c0:f8:e9:72:bb:3c:88:ab:ad:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Aug 10 09:00:49 2025 GMT
Not After : Aug 11 09:00:49 2025 GMT
Subject: CN=65d151277a55aefad924f7c92339bdb51c4cf17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:55:4e:61:5e:e7:f7:f0:48:85:c5:3a:9b:
f1:e6:74:97:e7:e8:0f:02:ca:9d:4c:f1:0a:17:04:
f2:f7:35:cf:bd:4b:de:f5:3e:85:02:3f:fa:97:f1:
83:96:35:cc:ec:5e:84:0c:c5:12:92:c6:90:4e:f2:
57:21:ac:d7:c3:92:f1:21:fe:77:e7:69:bb:3e:0f:
d2:11:d5:73:5a:5e:2a:76:d4:d8:00:0e:17:f5:da:
88:c6:31:36:d6:36:08:03:0a:bc:64:5b:98:20:3a:
cb:da:29:e7:b0:58:93:5f:74:99:4d:e3:fd:b0:ba:
6d:56:ca:e5:74:39:5e:e2:9e:a3:ad:d5:cc:9a:a7:
50:90:28:42:30:7b:54:e1:54:bd:52:88:a5:c3:7e:
66:88:64:d9:d0:a3:c3:66:39:3f:8d:a6:32:65:93:
3c:22:17:6a:47:a0:b8:0e:c4:c5:61:d2:6e:23:f6:
40:83:cb:bf:62:8e:48:18:50:21:3f:14:6e:62:b6:
69:b4:d9:01:c7:cd:00:55:9e:c5:49:65:e0:04:63:
50:c7:21:62:ff:94:0a:e8:90:d4:8e:96:1b:e7:73:
d2:65:ed:3a:6f:12:6e:ea:9e:6a:9b:c8:1e:c6:98:
67:0e:b2:1a:78:48:09:38:c1:c8:2a:1f:ce:ee:6a:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:51:27:7A:55:AE:FA:D9:24:F7:C9:23:39:BD:B5:1C:4C:F1:7D
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d7:07:6e:64:11:0e:54:15:0c:b9:1f:bb:a6:d7:2c:b5:6f:
ca:17:6c:10:26:d7:de:0c:c0:bf:31:49:65:f4:80:a1:61:1a:
33:62:fc:2c:95:54:fa:6d:ad:39:83:a5:8b:79:0e:f0:23:b0:
54:2c:ba:ab:e0:12:4b:85:dc:14:88:60:fa:1c:3b:69:b6:4d:
b0:b3:f3:64:94:e4:53:63:1d:83:5f:94:05:96:0f:fc:13:11:
1b:ae:84:a9:be:3b:19:f2:8f:2c:db:d3:13:43:8e:25:40:d4:
dd:23:1c:63:95:ac:5b:33:aa:6d:68:92:05:6a:b4:db:af:80:
87:20:37:1a:bc:31:2b:32:c0:ea:73:8c:aa:2f:ac:29:b3:7b:
4b:e0:ce:e2:c5:27:cd:24:b7:af:de:06:d3:8b:46:dc:fc:29:
90:9d:c7:c3:1b:b9:66:63:fb:22:eb:df:c7:27:fe:30:1a:6c:
ef:57:c0:34:a1:5a:fc:1f:98:0f:bd:2a:dc:84:22:24:88:89:
e0:54:8e:ea:0f:0e:f7:fc:c3:8f:60:2b:33:6e:6a:ec:8c:a1:
dd:29:ec:eb:7a:70:20:a8:68:cb:30:55:f8:05:25:6f:ec:b0:
fb:de:d5:2e:34:4c:4b:0e:96:0e:71:22:c9:b6:df:c9:1f:a9:
0d:19:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:46 2025 by rpki-client