Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: woDbh6D7DCuhK/6BYV15BLOJ2k9TIrPnawJpKC1NO28=
Subject key identifier: B6:49:6B:7E:FA:82:EA:BF:AB:B0:D8:20:35:DA:17:B7:4C:D7:CC:00
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 0198892119B48D778B1B26383029B9650EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 03DC
Signing time: Fri 08 Aug 2025 10:01:44 +0000
Manifest this update: Fri 08 Aug 2025 10:01:44 +0000
Manifest next update: Sat 09 Aug 2025 10:01:44 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: p/YMj7k8gop/OccMjWJ3pq32fv6Siiukp2r9gLT2sfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:19:b4:8d:77:8b:1b:26:38:30:29:b9:65:0e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Aug 8 10:01:44 2025 GMT
Not After : Aug 9 10:01:44 2025 GMT
Subject: CN=b6496b7efa82eabfabb0d82035da17b74cd7cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:01:db:ff:14:80:7e:e2:97:e5:23:3d:40:
58:af:03:9a:5f:c8:11:65:29:14:1d:89:d8:bc:6d:
70:51:6b:9a:32:67:e7:e0:54:8d:19:5a:1b:a3:dd:
88:9b:3b:1a:e2:16:b6:d3:1d:d7:b1:e2:65:f6:d2:
02:92:2c:4b:a6:03:9e:4c:e4:c8:5e:fa:07:23:1b:
74:3b:0c:dc:5d:07:4b:86:99:71:68:fd:75:d0:8f:
07:1e:f2:55:f0:ad:d1:48:73:cb:a4:d3:7f:78:de:
c5:1b:b4:7d:1e:f5:5e:5d:ba:cc:38:39:3a:60:58:
f4:24:8e:55:ad:5b:79:d1:25:90:3b:a9:7d:56:d7:
c7:6b:f6:c8:60:b4:b7:f6:0f:a3:d0:68:ca:9b:9f:
a2:bb:bc:86:6c:34:7b:40:cf:f2:36:12:5c:26:d3:
43:24:32:da:f9:e4:4b:97:2f:ec:73:fa:fd:8b:4a:
67:ae:5a:3d:12:28:48:d4:e3:2e:d7:08:c6:b0:dd:
9a:6b:f3:6b:5f:ad:c5:29:36:bd:5a:79:0f:94:a6:
ea:99:91:1d:2f:5c:1f:6a:1d:d3:0a:cf:07:a5:1f:
01:c6:8c:01:e2:32:2e:93:9a:94:f3:0a:85:76:ed:
83:a9:41:32:cf:9d:46:36:b4:7a:f9:9f:3b:2f:02:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:6B:7E:FA:82:EA:BF:AB:B0:D8:20:35:DA:17:B7:4C:D7:CC:00
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:94:c0:61:06:e1:96:0c:07:da:d6:20:34:f1:7c:57:fd:
96:32:74:3d:3c:a8:56:35:ce:36:c8:36:cb:e2:cd:0c:a6:09:
41:a1:27:1d:2f:1d:43:04:e8:dc:07:d6:97:27:1f:75:e8:cd:
7a:40:5d:7d:e8:13:7f:79:41:da:2f:54:ed:95:08:7d:ea:f9:
13:a3:9d:21:6f:02:ab:79:37:97:b1:7c:02:2c:1d:08:46:eb:
21:73:9e:df:a9:3f:4a:31:de:d9:d4:47:16:64:e7:44:46:00:
75:c9:d9:45:5e:3a:7e:78:d3:fc:5f:bb:55:70:30:4b:bf:b2:
24:b1:5c:ac:44:3e:d4:2d:d5:f7:a7:29:3c:55:75:ae:c2:c7:
3a:83:a7:31:4c:60:09:af:df:ca:f1:06:bc:1a:f2:da:c3:d2:
dc:55:99:99:43:35:af:75:dc:82:88:71:15:38:56:53:30:70:
c0:2e:c0:0b:cd:f9:f5:fd:ae:7e:b1:e8:45:d5:73:a5:e6:3b:
29:08:cb:ce:bf:de:cf:94:b7:7e:f9:00:08:98:ba:3e:7a:da:
ae:4e:44:2e:e6:dc:58:50:06:d8:c0:6c:c1:49:59:0a:7a:f3:
ff:23:5a:48:0f:f0:10:54:f3:da:64:4e:2c:96:15:39:a5:8f:
da:e1:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:35:11 2025 by rpki-client