Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: D0MmWCTMKGYamKbWlMybrAob2oMJcqLf5wSVa4RRSLo=
Subject key identifier: F6:D8:64:04:96:C3:C7:7F:14:59:A5:B0:13:EA:F7:F9:7E:04:71:B1
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 019890D9EB6C73C41058EE5E3AED9A5A1052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 064C
Signing time: Sat 09 Aug 2025 22:00:57 +0000
Manifest this update: Sat 09 Aug 2025 22:00:57 +0000
Manifest next update: Sun 10 Aug 2025 22:00:57 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: bMptIlA5l4ZhDRwtheiyXoL1QlYJdOB9VYzx4QFIbT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:eb:6c:73:c4:10:58:ee:5e:3a:ed:9a:5a:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Aug 9 22:00:57 2025 GMT
Not After : Aug 10 22:00:57 2025 GMT
Subject: CN=f6d8640496c3c77f1459a5b013eaf7f97e0471b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:b9:3d:6a:ed:40:3f:80:18:cb:88:ff:68:
3f:d4:b4:a0:b5:c1:13:97:1d:df:5f:fd:9d:cf:b3:
9a:45:96:0d:e8:63:95:8e:3a:94:66:b6:b0:f5:0d:
8c:ad:39:bc:65:2f:8d:1f:50:d1:04:e3:96:8b:8d:
5d:cb:26:18:c1:f7:df:54:1f:6f:69:14:14:bf:c0:
09:7b:ec:b1:01:ed:82:a2:b2:6b:31:5a:ed:1e:77:
81:e3:1d:17:8a:1a:30:c7:cf:b1:c6:c0:02:e9:42:
69:ed:6e:f5:e6:0c:e8:35:80:77:d3:11:79:7e:c4:
a5:82:39:9e:d8:26:0f:70:c4:14:a7:d8:a1:42:f7:
f9:41:d8:33:07:68:f7:1d:7b:d7:92:f9:80:7e:d0:
ed:7c:3c:b4:b1:a2:c3:89:97:c0:f4:6e:f7:cf:32:
ea:d4:43:07:35:b3:00:03:05:b0:6a:fe:2a:8c:1b:
06:59:a9:5b:2d:b4:94:8d:7e:fd:b3:6f:4b:4e:37:
2d:99:ba:c1:ca:ba:5c:ff:6f:71:9f:ea:0c:e8:47:
7c:53:fb:31:41:fe:63:72:26:53:5f:e0:bd:6f:39:
fc:e5:f5:71:f9:c0:0a:86:c4:54:ab:57:f8:bf:fe:
e7:42:e0:f6:87:e9:c1:ff:02:f1:27:de:9b:0a:05:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:64:04:96:C3:C7:7F:14:59:A5:B0:13:EA:F7:F9:7E:04:71:B1
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:80:78:f8:29:3e:29:1f:93:a4:71:82:ee:2a:61:53:79:8e:
bd:a0:28:e8:11:65:7c:0c:8a:e1:f0:bb:f1:ba:df:a2:ea:7b:
0d:ec:2f:9a:5e:6b:54:48:da:39:27:cc:74:2a:da:06:6d:21:
1a:a8:01:13:71:52:b5:b8:50:42:2b:1b:f1:9e:d6:7a:60:ec:
0f:f6:97:4d:36:10:52:f0:3a:4e:02:9a:9c:51:5f:3e:01:6b:
65:e4:b3:5f:49:41:49:95:fb:a8:32:5c:fa:e9:8b:ac:31:c3:
cf:f6:ce:be:d0:a3:45:85:06:97:4c:a4:b5:96:38:99:54:47:
fc:7a:12:30:c0:1e:4c:a3:c1:64:ce:cc:51:f7:ce:08:9a:8c:
5c:70:8d:19:ef:e6:7d:3f:cf:e7:2d:3f:41:4a:cd:ab:a3:24:
94:67:38:55:a2:d0:85:12:cc:cf:a4:92:ed:c3:22:2a:9f:5e:
62:00:af:2d:d8:e6:d9:a0:15:6d:bd:c1:7e:fa:f2:ff:51:09:
36:71:9e:20:fb:78:d8:7a:04:b9:34:5a:1f:43:73:07:f9:90:
78:31:3e:44:63:b7:29:5b:87:8e:8f:e5:2a:c3:e4:f3:20:12:
6b:b0:fb:47:bb:dd:db:b5:d7:e4:f9:05:73:fa:00:16:07:66:
7c:2d:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:50 2025 by rpki-client