Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
File: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft (raw, json)
Hash identifier: 9wICNWgNqX+YiqoOsLQ/ix9ODYas1GzR3soJ/Zec2R0=
Subject key identifier: 74:39:3F:D6:6B:AF:C5:81:DF:82:31:24:37:8E:ED:83:40:37:A1:8E
Authority key identifier: D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51
Certificate issuer: /CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51
Certificate serial: 019893DA87B5BEAD3B79AEA93D758F50E757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
Manifest number: C4
Signing time: Sun 10 Aug 2025 12:00:28 +0000
Manifest this update: Sun 10 Aug 2025 12:00:28 +0000
Manifest next update: Mon 11 Aug 2025 12:00:28 +0000
Files and hashes: 1: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl (hash: bgi+aiHWjbrbSXOLS8PVj72JNtng4ZLKAuUvYXUq1MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:87:b5:be:ad:3b:79:ae:a9:3d:75:8f:50:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51
Validity
Not Before: Aug 10 12:00:28 2025 GMT
Not After : Aug 11 12:00:28 2025 GMT
Subject: CN=74393fd66bafc581df823124378eed834037a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:40:d0:b5:b2:0b:8b:e7:19:59:95:6f:d9:
5f:1c:10:34:a9:ea:75:36:a2:51:5e:f0:3e:fc:48:
e9:4f:16:14:0b:7c:21:15:e0:65:e8:40:83:f9:04:
04:81:80:d2:46:ad:0c:0a:2d:d2:e4:ed:00:9f:5e:
8f:38:88:be:05:c0:45:56:3c:b0:bb:31:cd:ed:9d:
e1:b1:c7:07:ef:84:97:e4:d5:ec:67:03:0d:06:44:
e3:94:2b:e6:ed:c5:e8:ee:b9:90:bb:ea:a2:13:df:
41:ad:2d:6a:b3:69:68:f3:25:27:b9:63:b9:04:09:
23:37:fc:40:f5:cd:f5:68:21:c2:de:79:2c:7f:c3:
0e:a6:8c:1f:38:d3:06:d2:1d:75:4a:75:ea:10:af:
72:61:8b:7f:36:5f:0e:57:5c:2f:c9:d5:28:cc:0b:
08:fe:fc:04:26:c3:a7:13:d8:17:11:24:71:58:e3:
39:5b:cf:79:53:20:94:3e:72:92:8f:e9:69:d8:b1:
b0:6c:9b:6c:16:f8:a8:a2:b6:de:a6:d7:18:ea:41:
15:fa:ec:11:19:d3:a1:01:df:d4:ef:a1:20:23:43:
bb:cd:a2:c5:89:6d:fc:36:45:62:b7:08:fe:99:7c:
2a:fc:a9:dd:4a:10:4c:5d:c3:68:b3:db:32:ad:26:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:39:3F:D6:6B:AF:C5:81:DF:82:31:24:37:8E:ED:83:40:37:A1:8E
X509v3 Authority Key Identifier:
keyid:D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8c:b9:75:3e:9e:8f:2b:a5:3e:3d:67:74:9d:b7:0f:6e:c1:
2b:e5:57:7b:a0:76:20:7d:52:72:35:db:12:b0:95:f1:5e:ae:
5b:24:59:b8:3e:0e:c1:99:99:a6:d3:95:97:95:9c:e6:c3:77:
c3:5a:0b:39:3e:d0:e3:7b:68:0d:d6:ee:1c:ef:9e:66:d1:e7:
7f:66:94:b4:d3:3d:99:87:1f:f8:4d:17:a1:42:c7:89:48:41:
1c:b6:8b:1b:3a:45:08:ab:a0:af:00:13:af:58:d1:00:b9:bd:
36:54:51:58:48:13:75:25:ad:5f:65:dc:34:4d:96:0d:d4:63:
dd:60:a2:43:9c:d9:45:7c:7e:1b:14:16:f9:d3:37:cf:ba:16:
59:df:19:e5:06:ea:8f:e3:c6:27:bd:c5:43:e8:87:96:1e:99:
2a:96:f4:02:70:ee:ff:43:0a:e7:4b:e3:2e:ba:29:6b:76:ec:
6c:e2:52:2a:39:5f:28:ce:87:45:b4:9d:29:f8:6a:3f:04:d8:
a4:7c:e4:80:07:ce:a6:0b:60:f9:a2:90:c2:b1:9f:11:91:e7:
ad:46:08:8e:cd:3d:47:65:47:26:8d:6b:ca:06:fc:f3:10:6a:
10:42:95:df:0f:04:04:22:28:5f:d6:9a:11:05:31:b3:39:26:
5a:b4:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:40 2025 by rpki-client