Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
File: 2nGl-6KA1tAY7MOp1-WMPGEeav0.mft (raw, json)
Hash identifier: YXIHlHiDOT9vhJcv0OQaECwKrUssgjam2sCn+aNzPBg=
Subject key identifier: 96:6B:FB:A7:07:F6:96:76:53:ED:BF:81:CC:AE:7D:7A:C2:7F:37:9B
Authority key identifier: DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
Certificate issuer: /CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Certificate serial: 01988B0E609A9837860B7C23CB7FE31620F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 19:00:31 +0000
Manifest this update: Fri 08 Aug 2025 19:00:31 +0000
Manifest next update: Sat 09 Aug 2025 19:00:31 +0000
Files and hashes: 1: 2nGl-6KA1tAY7MOp1-WMPGEeav0.crl (hash: HfXSNEFvkfqhwlShmy8O4JET/7Ips5emSRZHP751GsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:60:9a:98:37:86:0b:7c:23:cb:7f:e3:16:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Validity
Not Before: Aug 8 19:00:31 2025 GMT
Not After : Aug 9 19:00:31 2025 GMT
Subject: CN=966bfba707f6967653edbf81ccae7d7ac27f379b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:e3:f9:48:11:96:71:e7:df:97:66:56:aa:
a2:2b:c3:63:91:81:78:df:c8:07:ab:9a:2d:51:20:
32:e4:0a:9a:5e:94:66:c4:9b:da:3a:e1:76:1d:5a:
c7:f5:07:55:a0:82:3b:e5:63:ea:ee:11:0e:5f:46:
00:3a:f7:b1:c9:ff:03:b7:5b:76:7d:4d:63:9d:86:
79:cc:fd:ff:03:c5:f9:bf:8c:5a:52:50:94:04:9f:
c4:31:1c:52:58:8b:8f:06:5c:f9:e0:5d:90:e7:d8:
d9:83:b3:43:61:62:16:e0:b8:8c:c4:4a:64:49:61:
b6:bd:34:3e:23:b6:36:00:09:a6:5b:df:33:6c:44:
f0:73:ed:65:7c:4a:98:3b:aa:d8:3e:8c:44:82:c9:
76:8b:56:72:de:10:07:c9:b9:f2:4d:48:d6:e8:48:
ab:44:2b:f5:c3:c1:de:c4:53:be:ad:b9:0b:14:aa:
74:d6:8c:ed:61:5d:bd:a7:5a:7c:a7:a8:7e:4c:d6:
4d:98:62:7b:3d:eb:73:a6:65:10:7e:40:a6:16:80:
ff:1e:4e:24:5a:93:ae:52:e3:22:1d:97:02:41:a2:
4d:1b:7a:b1:20:3e:ca:f3:f5:36:68:ef:72:46:84:
3b:a9:cd:87:a7:b0:b7:e1:7c:9f:fd:6c:41:45:b8:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:FB:A7:07:F6:96:76:53:ED:BF:81:CC:AE:7D:7A:C2:7F:37:9B
X509v3 Authority Key Identifier:
keyid:DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4b:2c:73:dc:88:56:f5:f1:02:35:ea:27:17:15:52:4f:a0:
0d:a9:b7:e4:f6:a2:66:0e:0f:99:c1:58:e9:0e:7f:86:3d:5c:
6f:cb:0e:c7:96:67:65:5b:23:b8:eb:2c:f8:48:ad:f3:0b:53:
f0:ce:9d:4d:c3:ae:ea:db:29:fc:07:7c:12:70:e4:38:eb:b9:
a4:cd:95:d5:69:0f:6f:ff:a9:4e:32:63:ed:ee:7f:2a:91:e9:
15:38:54:5e:83:b5:dd:76:47:4a:4a:d5:ab:8c:cc:60:6e:62:
d3:e0:d7:d6:af:9a:a6:76:3a:c2:b6:f1:d6:09:6d:95:f2:02:
4f:92:71:93:5c:ec:1d:15:2b:e0:e7:be:4a:4e:1a:81:f5:ba:
40:a3:fb:99:f5:f9:a9:c6:0a:6d:a2:f5:31:ce:93:8a:fe:b0:
9a:db:c4:ba:d6:34:eb:8f:1b:58:34:e0:b5:ad:96:b0:42:d7:
a5:96:b3:f9:91:e6:56:a7:8f:cb:3f:16:0f:ec:f4:83:eb:70:
77:60:8e:de:95:ab:72:dc:60:fd:b4:0d:89:c5:a7:f4:4d:58:
fb:32:ad:b6:22:01:17:48:d5:96:73:dd:e6:91:6d:38:5b:fb:
f5:8b:9b:73:3f:f8:21:39:25:dd:50:be:de:b3:21:4c:dd:7c:
9f:2d:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:15:18 2025 by rpki-client