Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: wFqwToO7XMD/SaMrEpngOzrURVR7tIc7MNxbsDmlzrg=
Subject key identifier: AC:E3:21:31:CA:5E:9E:5F:78:AB:77:9D:6B:33:6C:FF:DD:82:3F:0E
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 01988CFEEAD2EA77CAE62EDB27DBE878740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 12B3
Signing time: Sat 09 Aug 2025 04:02:53 +0000
Manifest this update: Sat 09 Aug 2025 04:02:53 +0000
Manifest next update: Sun 10 Aug 2025 04:02:53 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: 6V7R6ysWfv3/AwAQFsQsNz0nO5t/MjBBDo25iWzaG+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:ea:d2:ea:77:ca:e6:2e:db:27:db:e8:78:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Aug 9 04:02:53 2025 GMT
Not After : Aug 10 04:02:53 2025 GMT
Subject: CN=ace32131ca5e9e5f78ab779d6b336cffdd823f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:77:0f:a4:8f:d5:1e:12:38:23:5f:a0:8b:
08:b2:4e:b9:8b:c3:88:44:13:6a:00:36:79:88:91:
2c:60:90:dd:ae:f0:16:33:4c:06:23:07:a3:50:22:
7d:07:4b:65:c9:ea:f5:c7:5e:e4:f2:73:06:7b:c6:
9e:fb:60:9c:7a:01:36:be:a9:b2:6a:09:3f:6f:53:
1f:c9:75:1b:e7:53:45:14:5a:7d:bf:1d:18:4d:cb:
af:51:fd:53:70:f9:d9:99:f7:c6:80:eb:ce:50:0c:
c2:98:a8:74:3b:2a:77:c1:4b:4c:64:c3:5b:d6:f8:
c9:78:7c:40:83:92:36:9c:44:57:a4:a3:f5:42:14:
93:b8:ac:81:a5:62:76:57:8b:4e:e6:86:22:7a:69:
c8:92:bd:5d:09:d1:ea:c2:42:af:11:c0:4b:de:b8:
36:68:3c:32:dd:84:e0:70:4b:b8:b6:a1:8a:56:d8:
0f:7c:b0:ec:f0:03:41:a4:87:8e:c9:4e:4b:da:86:
df:d8:8c:ba:1c:fb:08:91:95:ff:8c:27:f9:35:37:
a2:45:aa:55:9e:1e:de:34:3e:8a:1a:d9:4b:34:e6:
7c:8f:3b:d6:1f:f0:42:3e:14:d7:00:6a:51:75:95:
dd:b3:eb:20:8a:fc:12:05:2a:65:b7:aa:59:d2:e7:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:21:31:CA:5E:9E:5F:78:AB:77:9D:6B:33:6C:FF:DD:82:3F:0E
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b0:70:5a:88:f0:82:21:55:94:ee:ae:98:4c:35:44:4b:f4:
50:07:e3:28:ff:74:3f:1b:a9:02:08:b9:01:30:6d:0b:97:fa:
94:7f:ba:6e:15:40:c0:5d:a7:20:d0:d5:12:71:07:ea:5f:f2:
6f:39:bb:10:a6:0c:5a:e5:5e:63:59:c3:b7:16:b8:cb:80:6f:
c3:e3:59:91:7f:d3:0f:06:46:76:08:ad:22:10:b7:5d:a6:c9:
8d:06:f7:42:f5:b6:c4:df:50:ff:0d:d8:e1:08:54:f3:37:d6:
b3:31:97:4d:13:01:18:ee:ac:8c:4d:92:43:dd:2a:43:36:44:
17:91:2b:ec:ba:de:31:12:5c:70:ab:82:3d:0b:ea:e3:aa:b3:
93:81:3f:14:e1:98:5c:f8:9e:cf:cb:89:7a:b8:52:74:ad:bc:
10:90:dd:7e:d1:a2:ff:a2:8c:88:5f:36:02:21:b7:70:1f:3d:
2e:36:74:54:6f:ad:6c:d2:b3:00:28:ae:27:1a:22:a0:02:3e:
71:5c:7d:18:de:72:50:65:c9:cf:74:ca:56:f2:9d:19:e3:03:
58:d4:44:a7:27:d6:2b:31:79:40:ae:e2:69:c8:0b:30:1e:56:
d7:62:b4:0c:a6:b6:20:be:84:78:99:40:43:63:f5:00:d7:65:
a5:51:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:28 2025 by rpki-client