Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: jFWHWkuyCsL0HWV9xhTi0wzM8e4Rh0bDayYWhot0e64=
Subject key identifier: 65:38:49:33:EE:D6:53:F8:5A:0E:A3:85:28:F3:0E:5D:59:DD:94:C2
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 01987E2F304F27756FBE88786FA04ADB8BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 1579
Signing time: Wed 06 Aug 2025 07:01:18 +0000
Manifest this update: Wed 06 Aug 2025 07:01:18 +0000
Manifest next update: Thu 07 Aug 2025 07:01:18 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: ttjSkTUcI0llRC1hacof9l8WfFS17yWF/TWpfbew+vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:30:4f:27:75:6f:be:88:78:6f:a0:4a:db:8b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Aug 6 07:01:18 2025 GMT
Not After : Aug 7 07:01:18 2025 GMT
Subject: CN=65384933eed653f85a0ea38528f30e5d59dd94c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:9f:a9:fe:44:13:dc:5b:35:2e:58:14:6c:
76:a0:4a:65:dd:2d:30:2f:9e:06:ad:90:b7:82:16:
57:0f:9a:5c:15:97:aa:f2:7d:c6:f6:01:82:f5:66:
7e:f3:b8:55:43:d4:18:0f:65:db:2e:d9:a0:1a:4f:
c3:b6:88:38:b8:aa:56:17:84:af:5c:5b:e9:e9:a2:
c8:77:61:a9:d3:8a:f8:c8:54:69:ee:0a:bd:28:0b:
dd:ac:5a:dd:c8:ae:c1:06:60:af:33:9a:16:72:4a:
40:df:ac:4d:a9:1f:f4:6c:8a:a6:19:e4:42:6a:3d:
00:3b:b9:37:0b:a1:d9:ff:38:71:ad:87:62:d7:4b:
20:37:8e:66:89:36:58:d2:3b:38:7c:4f:1b:e1:89:
ce:cf:57:7f:a1:79:51:fb:77:c5:72:ae:68:f2:18:
fb:74:3d:5f:ab:4f:c9:55:aa:42:87:98:6e:60:c0:
c2:d0:54:a4:ff:df:92:37:5d:4e:45:76:66:e0:ac:
ce:3c:fc:98:ca:4e:52:80:76:55:d6:31:08:49:bd:
f9:bb:8d:71:e1:9a:d6:e8:f6:85:78:bd:3a:7a:e0:
1d:da:be:52:5d:62:f7:c3:42:e9:51:3e:24:8a:84:
a7:32:ee:dd:02:82:76:04:ce:b6:71:1d:0c:b4:28:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:38:49:33:EE:D6:53:F8:5A:0E:A3:85:28:F3:0E:5D:59:DD:94:C2
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:1a:15:06:e1:47:82:0f:d5:bb:c6:ae:2b:db:ce:9f:8d:
70:4e:53:12:59:ba:33:b4:1d:46:75:57:4b:3c:86:35:cf:89:
78:c2:b6:09:23:ab:d4:4f:7d:39:09:8c:c9:4f:7d:24:5b:29:
9a:90:49:f1:ac:91:92:13:a1:54:0c:1c:ec:6c:10:01:bb:a3:
50:37:61:1b:57:f0:26:8c:8a:98:bd:2e:c8:3f:94:38:ab:33:
7c:ee:aa:58:15:29:65:6b:1d:08:9e:e0:12:4c:9e:37:62:72:
dd:2a:b9:68:0e:1f:50:c6:c9:7d:b4:88:da:a2:ad:d9:87:eb:
fc:9f:39:6c:42:07:fd:2e:b9:7c:f2:e1:1e:aa:0d:bb:3b:25:
46:4e:87:61:f3:7a:73:04:6e:c6:52:79:44:43:a9:ea:f8:25:
d8:ae:b2:20:e4:8f:2d:a7:05:94:98:05:36:e8:02:5a:24:01:
46:94:32:c3:93:48:95:5e:6f:ac:b9:10:c6:f0:5a:74:42:e0:
94:1b:6a:80:fa:7a:5b:a6:b0:0f:5b:f2:24:a5:77:34:94:dc:
4e:80:d2:d0:fd:27:ee:c1:24:fe:0f:88:41:c1:93:45:cc:c4:
cd:06:3e:2c:2a:13:0c:bf:88:62:7b:85:4a:05:52:15:f0:39:
20:11:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:00 2025 by rpki-client