Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: vfk5X8pmo3MY1tbK616pINgA9s804VEjbOWL/PycJSc=
Subject key identifier: 31:B9:52:21:4B:04:83:C4:01:AB:4B:62:97:8B:48:53:AE:3A:DE:7D
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 019897499D6382442FC292E7A5753FC7A19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 15B9
Signing time: Mon 11 Aug 2025 04:00:40 +0000
Manifest this update: Mon 11 Aug 2025 04:00:40 +0000
Manifest next update: Tue 12 Aug 2025 04:00:40 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: iNgCjfcrbrRUCDBYkWBJZNM09oqxZ/YFWUC/0Rc2kjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:9d:63:82:44:2f:c2:92:e7:a5:75:3f:c7:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Aug 11 04:00:40 2025 GMT
Not After : Aug 12 04:00:40 2025 GMT
Subject: CN=31b952214b0483c401ab4b62978b4853ae3ade7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:e6:fa:8c:4f:75:e9:1b:83:32:1e:58:d6:
6f:a8:f8:5f:7f:7c:14:44:e6:aa:a4:0e:47:0d:98:
1c:99:6a:49:46:e7:8b:c9:58:e5:b8:9b:e7:22:bf:
06:7c:56:bc:90:54:1d:11:b2:31:39:e8:57:83:15:
90:db:c6:f5:b5:0e:f3:89:42:a4:24:1f:1e:7e:aa:
4d:05:76:af:dc:b1:99:bd:b8:ef:9a:89:e8:0a:22:
2b:8f:9a:85:82:36:51:c4:a3:8e:9d:6d:fb:4e:fa:
d1:19:f1:66:3f:5c:fd:d4:80:fc:9f:5d:b3:93:28:
01:ff:f4:9b:2e:61:1b:26:c2:c0:b9:b8:7e:c0:5d:
75:33:36:06:dc:e8:8f:08:81:cd:1a:fc:12:a5:4f:
c1:5c:24:c3:9b:5c:95:17:5e:09:f3:47:4b:1c:cb:
fb:43:89:dd:c3:79:94:40:74:37:2a:71:4b:fa:93:
dd:48:fe:fc:ab:91:9f:f1:ef:72:2a:ad:27:48:fc:
c7:8b:3f:98:22:c9:ac:e3:c6:be:a5:f7:b7:78:fc:
ab:80:0b:c1:3c:f6:46:6b:62:10:17:ed:13:8b:c9:
59:82:e5:26:ef:a7:d2:2e:80:ad:71:58:92:71:f1:
6d:0b:60:2e:b7:2a:6f:68:f6:fe:16:c5:d1:3f:76:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:52:21:4B:04:83:C4:01:AB:4B:62:97:8B:48:53:AE:3A:DE:7D
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:74:55:57:08:af:1d:85:d0:ed:4f:3a:6c:a6:0b:8b:36:
d6:c9:70:95:75:51:4a:95:d0:b5:67:64:5a:9c:95:7f:28:55:
f8:02:c0:6a:43:f1:ce:02:f8:7e:ac:7b:d4:e7:e8:11:58:60:
82:a6:bb:d1:69:51:5d:f1:6f:c0:e1:13:fe:a1:ab:b8:cf:f6:
06:39:48:57:00:4b:4a:bf:b1:a3:92:b3:15:72:f6:67:1f:fd:
0f:40:93:b4:41:8a:22:d3:ab:1e:30:de:6d:c0:60:b5:67:a0:
4a:3d:eb:6d:51:9a:70:56:42:1f:42:81:15:0b:fe:71:ad:46:
ef:d5:bc:40:ae:67:75:10:e2:cc:bc:b7:2d:dc:ed:a6:74:76:
e4:22:ff:6b:e4:99:6e:97:17:d9:26:a8:57:0a:a5:25:5a:1b:
41:22:15:7d:21:6f:d7:8e:0c:e1:6a:94:3c:78:43:06:6e:30:
53:30:f9:21:a2:e7:9c:3f:07:9d:03:b2:79:41:e4:46:1f:33:
80:67:f3:4a:79:d8:10:27:1b:20:dc:bf:31:a3:f3:35:5a:f4:
3f:06:e8:fc:c7:52:7f:cf:de:60:44:9e:bb:80:12:be:66:b8:
f8:ff:1b:f9:df:e7:e1:53:75:25:d5:d9:4d:f1:d0:23:92:e9:
7e:74:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:28 2025 by rpki-client