
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: RHBSxeFfNowyBbq+HIOEEWyPJGsBuNoJy6fat+DZbpA=
Subject key identifier: A2:E7:6B:FD:A4:6D:57:57:41:88:90:1D:B2:2D:0E:5D:0E:38:5C:2D
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 01987FE6DE70C9962834AFFF087583A58599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 15:01:33 +0000
Manifest this update: Wed 06 Aug 2025 15:01:33 +0000
Manifest next update: Thu 07 Aug 2025 15:01:33 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: eQLgFWmE3WINtpag5w0LsUbm9PMFBONZ4AfnHhCkYN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:de:70:c9:96:28:34:af:ff:08:75:83:a5:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Aug 6 15:01:33 2025 GMT
Not After : Aug 7 15:01:33 2025 GMT
Subject: CN=a2e76bfda46d57574188901db22d0e5d0e385c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:95:03:fe:ce:1b:bd:22:5d:86:0c:64:8d:
7a:e5:bd:35:1e:69:05:f9:af:3b:2b:f2:c7:db:06:
31:a9:a0:0e:1c:a8:52:16:0d:96:ca:30:17:05:fc:
31:2b:19:b1:ac:65:b2:90:9d:33:75:12:30:22:9d:
76:38:bd:21:59:5f:c2:9c:36:c3:b6:9d:c8:a7:f2:
35:d6:2c:5d:47:fa:6b:99:21:67:77:02:b8:1a:6f:
a4:90:e3:9d:ad:34:8b:2d:36:35:07:cf:8d:7e:57:
cc:88:5f:b3:a3:1c:22:5e:3b:fe:09:54:f0:95:0a:
9d:06:13:2c:23:80:44:a2:96:c0:a5:cb:6d:c0:05:
34:a9:57:9e:78:5d:cb:7d:f8:ad:bc:59:f3:66:b5:
06:cb:b0:87:d1:12:64:63:02:71:0c:9c:fa:6d:93:
cd:18:9f:94:d5:71:52:8e:b3:55:2d:8f:09:4f:17:
b2:f7:1e:08:f3:e3:57:23:d2:bc:e3:d2:17:cb:8c:
f0:c4:a1:3a:a5:f8:c6:60:e3:4f:5c:5d:05:90:1f:
4e:f6:db:ed:d1:81:3c:ca:47:e1:51:1d:c5:b6:b3:
71:3b:e7:e6:70:7f:7f:de:e5:b2:0c:0a:a8:95:6f:
82:79:1b:53:61:9b:2a:5d:46:00:db:21:b5:96:6b:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:6B:FD:A4:6D:57:57:41:88:90:1D:B2:2D:0E:5D:0E:38:5C:2D
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:fe:97:3a:ba:a4:a9:87:44:fe:24:94:c9:a6:85:d6:a7:
61:04:56:45:4a:91:e3:e5:cd:f4:65:e7:31:f5:4c:f9:c4:bd:
5e:7c:32:39:bb:c4:59:36:8d:2e:2d:b7:d3:cc:7e:3d:42:69:
77:99:e2:5b:77:f3:95:98:d2:e8:f9:55:1e:d4:d0:2f:4a:40:
01:ad:15:b8:a1:c6:1e:d7:8c:d7:1a:36:56:9c:07:c5:85:6e:
99:43:08:09:c8:5a:e6:1e:73:d1:1c:74:79:ca:b7:78:9b:d1:
9a:9b:a1:b2:cf:da:17:b2:bf:0d:70:bc:d8:cc:55:42:f8:61:
94:b1:e1:20:97:61:bd:29:1e:39:2c:ba:44:22:c9:31:f1:96:
00:87:0f:f1:e5:4c:a8:98:ec:18:b8:a9:0a:09:48:47:f7:4f:
15:5f:eb:11:c8:c4:50:0a:58:48:e5:3d:eb:47:9b:ee:57:c2:
d2:b1:0f:2e:32:b4:71:e7:89:2d:fc:7a:75:9e:f4:bf:17:82:
19:ae:97:83:76:d2:a7:fe:06:e8:48:48:12:08:4a:00:da:dd:
06:d0:47:48:80:6d:2d:e0:ee:eb:a1:8d:5c:2c:a3:f2:30:50:
1e:c9:5c:4a:e8:1e:57:b8:28:da:13:7d:a5:28:ea:7e:42:e6:
7c:a5:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:57 2025 by rpki-client