
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File: c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier: FdiO7YD68CzYI7BgsLypH6ndeqIVJ5CBASh4a3Y1Ogk=
Subject key identifier: 2F:C8:8D:F5:24:4A:90:02:7F:A4:8E:D0:31:BF:D8:1A:53:A8:87:B8
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer: /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial: 019881678FDE88C73ED7C5F4A5F562668F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 22:01:44 +0000
Manifest this update: Wed 06 Aug 2025 22:01:44 +0000
Manifest next update: Thu 07 Aug 2025 22:01:44 +0000
Files and hashes: 1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: +gMU8sjVnguuihpGwou3TSlA9mJF0FSjFlieZ9HVB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:8f:de:88:c7:3e:d7:c5:f4:a5:f5:62:66:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Validity
Not Before: Aug 6 22:01:44 2025 GMT
Not After : Aug 7 22:01:44 2025 GMT
Subject: CN=2fc88df5244a90027fa48ed031bfd81a53a887b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:83:75:25:b3:83:1d:f2:05:ad:8c:15:af:
c6:df:bf:f7:61:0b:b5:af:09:67:2e:32:65:1f:23:
22:fd:1a:97:6d:70:fe:d4:9d:30:28:85:d7:2f:ae:
51:bd:08:ea:69:0b:90:cd:44:b4:65:6d:f4:b1:2d:
15:f6:df:5b:4b:19:11:a4:07:ea:92:d1:04:6e:89:
74:7e:33:c4:7b:53:4e:83:4d:30:eb:9f:95:4b:93:
95:56:79:39:25:e9:f2:b0:2a:ab:ef:1e:d4:03:7c:
05:1f:e2:5a:77:28:19:9c:54:09:76:1f:62:94:08:
2c:e0:d8:7a:1f:25:47:13:e8:e5:e1:f0:58:54:6f:
32:a9:8b:2b:d4:bd:e5:a9:a5:e2:76:01:e5:72:bb:
00:e9:17:28:f9:8e:92:76:dd:c5:cc:59:4c:e9:a6:
ad:ce:38:9a:9c:22:40:6c:d9:3a:8c:b5:46:f5:81:
92:1c:08:f3:04:0f:76:02:84:7e:ac:69:8b:ae:6e:
ca:c7:99:a1:ca:b8:e7:33:d9:e9:5b:8a:70:e6:77:
da:97:9f:88:f2:59:32:6f:92:a2:4b:09:c9:4d:6a:
74:a9:ae:52:5c:43:78:62:e7:9f:d3:bc:19:f7:5e:
75:b1:93:f2:c2:e6:41:0b:50:37:7e:02:ab:5d:60:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:8D:F5:24:4A:90:02:7F:A4:8E:D0:31:BF:D8:1A:53:A8:87:B8
X509v3 Authority Key Identifier:
keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:ab:bb:8c:61:4e:6d:c9:ad:74:75:67:cd:61:3d:26:10:
7c:fb:1c:f6:fb:d4:41:b2:7b:c4:5e:bd:b5:59:a1:7c:a1:1e:
c3:e5:b2:64:03:b3:01:87:43:f5:74:fd:7d:f9:c4:64:77:33:
22:26:91:0a:a1:0c:47:53:4a:07:8b:e7:43:a3:8f:6d:1e:aa:
75:5a:c9:a4:78:05:b6:47:2c:a6:97:bb:62:0a:75:fb:55:16:
bc:35:01:94:c5:73:ac:10:b4:3e:30:a4:96:b1:7d:11:e9:24:
19:2c:b0:98:02:d0:a2:99:b3:83:50:90:83:90:7c:34:4b:af:
e0:9e:d2:7e:93:d4:0e:42:21:47:44:59:bb:54:e2:ae:f1:46:
21:bb:c3:aa:ca:1d:e1:9b:af:c7:02:a8:27:26:54:2c:9c:0f:
46:f9:9e:11:4f:3d:6c:06:c4:30:0b:93:9c:76:f5:44:65:a2:
a5:07:3c:e4:37:84:79:07:ae:eb:b1:0f:68:e7:24:7e:4b:3c:
dc:88:44:0d:9a:b6:c8:75:7f:bc:64:bc:0a:56:db:92:b3:37:
02:f4:93:96:3a:4a:ee:14:8e:28:16:61:19:03:43:9c:29:db:
8e:28:ea:f5:ec:ad:39:a3:cc:af:c4:fb:dd:80:63:d7:62:59:
1a:59:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:59 2025 by rpki-client