Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
File: 2lPr-vXBh42KIqk44XMqigdxTzU.mft (raw, json)
Hash identifier: ciusButaH3wbE/99MA/z/Ya3j6hdhqgSXO/nOhgcwDU=
Subject key identifier: EF:2B:17:FB:A4:20:0B:36:04:7E:D8:8E:57:A5:B8:2B:49:7D:00:56
Authority key identifier: DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
Certificate issuer: /CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Certificate serial: 01989034F22D424915E9CFA0E5BDA9F96955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 19:00:45 +0000
Manifest this update: Sat 09 Aug 2025 19:00:45 +0000
Manifest next update: Sun 10 Aug 2025 19:00:45 +0000
Files and hashes: 1: 2lPr-vXBh42KIqk44XMqigdxTzU.crl (hash: dLue1j9WR1jhdkpq4XFuAUBr95iqUNenl1lHPkiP7vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:f2:2d:42:49:15:e9:cf:a0:e5:bd:a9:f9:69:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Validity
Not Before: Aug 9 19:00:45 2025 GMT
Not After : Aug 10 19:00:45 2025 GMT
Subject: CN=ef2b17fba4200b36047ed88e57a5b82b497d0056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:a8:ab:4a:55:49:b9:f6:0a:ed:e4:82:92:
f4:ca:16:45:3b:44:86:45:cb:15:00:af:ea:2c:6d:
ea:be:27:cf:25:e8:67:ab:c5:08:1a:0b:6d:06:3d:
c0:d8:75:33:0b:5f:ab:fd:c8:33:b0:d6:e0:62:d6:
ec:c0:de:9c:86:47:56:39:70:34:c3:44:c8:04:d1:
40:c3:b2:d3:13:f0:7a:0f:24:95:b3:48:be:86:ba:
c2:5f:c1:9a:33:03:b7:36:de:df:f3:e2:02:2a:c0:
b3:18:3e:a9:41:7e:5c:95:e1:b3:90:0f:43:e8:07:
d5:56:ee:6c:0d:10:bd:44:47:f5:09:ab:0e:b9:6a:
74:4e:c4:c4:58:3d:f0:8a:c4:22:ce:04:f2:59:99:
a8:3d:3e:f6:27:c6:35:cc:d6:6e:6d:6a:38:6f:61:
bf:d1:65:a2:ff:e0:3d:f8:5b:7a:9b:ab:a8:18:ee:
a4:d7:e9:49:b7:77:29:da:82:f4:c5:8c:27:47:33:
6f:74:3b:e3:13:20:c4:8d:fc:4e:9b:1b:38:81:d9:
8d:35:2d:0f:92:53:40:20:da:32:e8:cb:e6:11:9d:
d5:3c:b5:04:fe:b1:14:c2:36:e3:4f:12:26:5c:d3:
d9:cc:96:0b:95:03:16:cc:bc:f9:cd:5f:e0:14:44:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:17:FB:A4:20:0B:36:04:7E:D8:8E:57:A5:B8:2B:49:7D:00:56
X509v3 Authority Key Identifier:
keyid:DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0c:3e:12:c1:7d:75:ed:c8:53:0c:e4:78:3e:cd:0e:ac:66:
24:09:e7:93:70:46:23:43:68:e2:f6:df:01:08:ef:19:d6:8e:
8a:98:39:12:8f:e2:84:9e:fc:83:df:3a:7b:bf:0e:5a:26:53:
36:fa:5c:cc:c7:12:75:e1:82:00:8f:74:6f:d2:db:10:ec:29:
e7:00:37:22:99:44:51:b6:5f:0c:96:a1:2c:f5:a9:64:01:11:
4a:1d:b3:b3:6e:2d:c7:de:e6:01:96:be:d6:4b:d8:8d:9b:c0:
7b:af:c7:48:81:e5:95:cc:01:36:b1:bc:9d:74:f9:85:99:33:
5e:78:11:73:df:60:7a:fb:b7:a2:48:9c:39:d6:08:1e:43:fe:
3f:a4:11:bf:33:03:5c:7e:69:8c:4a:d6:ba:60:a6:4a:a1:1b:
b9:46:42:02:4f:fe:92:31:3b:3d:78:a9:68:58:27:cd:6b:f2:
f2:56:39:98:62:c7:97:a2:09:ad:ba:18:33:71:b8:d7:3a:19:
80:1c:3a:ad:9e:c0:77:75:06:3f:01:1f:11:c1:82:e3:e0:48:
66:67:1b:98:7c:94:d6:66:1d:54:22:34:e7:00:11:84:24:20:
33:11:f2:e6:03:f9:90:b3:4a:6a:28:dc:db:b0:f0:73:fb:f6:
c4:3a:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:15 2025 by rpki-client