Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
File: 2wy7NfYw1Aytd1B_2r03_e3BIQM.mft (raw, json)
Hash identifier: LqAhIMyDoY3rTBaUSuorosNBV8WircO74Oe3MC9tFvE=
Subject key identifier: E0:D5:6A:CC:9B:C5:2C:80:A3:07:23:46:65:0D:59:67:99:D9:BC:6A
Authority key identifier: DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
Certificate issuer: /CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Certificate serial: 0198A04D9D4283AD3683F35615E348938A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
Manifest number: E2
Signing time: Tue 12 Aug 2025 22:01:37 +0000
Manifest this update: Tue 12 Aug 2025 22:01:37 +0000
Manifest next update: Wed 13 Aug 2025 22:01:37 +0000
Files and hashes: 1: 2wy7NfYw1Aytd1B_2r03_e3BIQM.crl (hash: ymWwmqvNE7+NUEcv3z3IYPW8vtHXDksbOvaxgMx1Oh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:9d:42:83:ad:36:83:f3:56:15:e3:48:93:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Validity
Not Before: Aug 12 22:01:37 2025 GMT
Not After : Aug 13 22:01:37 2025 GMT
Subject: CN=e0d56acc9bc52c80a3072346650d596799d9bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:c6:04:03:d5:e5:d8:f4:e4:d8:18:77:5d:
a5:08:10:4a:aa:63:53:e4:59:28:20:15:91:b9:60:
49:0d:cc:f3:df:1b:56:f6:40:0b:91:5f:a7:72:ce:
ad:e3:64:9d:eb:18:51:0f:ae:7a:bd:63:b4:93:47:
f5:21:f9:12:9a:32:ff:94:f1:2e:99:73:59:70:f8:
34:84:ed:21:82:3d:9b:82:54:a1:33:a8:2d:96:c6:
10:4b:7a:fc:d3:6f:a0:8b:7c:14:37:11:16:c1:64:
36:4d:f0:d8:dd:14:88:60:55:6d:e5:73:95:c4:e1:
50:c7:17:ac:13:a2:aa:a9:a9:cb:c9:59:61:6f:61:
66:9b:3a:93:c9:f3:23:84:7f:ee:71:56:78:d6:86:
00:c1:1f:89:50:d4:6b:7d:00:47:eb:2a:d3:9c:a3:
b4:d4:92:20:de:34:72:91:5a:d5:0c:aa:d6:a9:82:
1a:cc:bc:f5:29:22:56:d4:05:fd:7f:61:10:f8:51:
4c:88:69:4b:86:c8:9c:8a:72:26:4f:e8:69:5c:08:
30:ee:d7:0f:76:1d:3c:8b:2b:23:bc:9d:b5:8b:62:
19:0c:02:99:1c:8d:7d:12:fe:a9:a3:4a:50:42:1b:
ae:c1:7d:31:8a:d5:58:d8:51:dc:12:40:8e:a9:1a:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:6A:CC:9B:C5:2C:80:A3:07:23:46:65:0D:59:67:99:D9:BC:6A
X509v3 Authority Key Identifier:
keyid:DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:5c:9d:9b:3d:d0:30:00:98:cb:48:2a:d6:e2:95:05:98:
08:b3:77:f0:82:66:d3:c0:3a:8e:cb:de:bf:c2:71:83:fe:8a:
08:5d:77:a9:4a:ba:78:49:66:78:fd:b4:71:9c:4b:40:67:da:
a3:2a:93:5d:3a:b3:82:83:af:bf:bc:4e:c2:76:47:ef:14:7f:
6b:b6:a6:be:cb:90:0e:8a:b7:f1:77:32:61:c8:82:4d:92:66:
df:cb:eb:f8:1d:1c:37:51:83:8c:96:b8:35:59:6c:dd:8c:45:
5a:a9:d4:f8:4e:f0:98:1b:12:33:64:a6:81:1d:b5:da:e3:69:
2c:85:ed:90:68:6b:fd:79:ca:c1:ef:80:8c:3f:cb:fd:ca:be:
cc:4c:6d:55:ca:19:8b:2a:c7:8d:ed:95:3c:cd:fe:94:17:26:
28:da:9c:c9:6b:7a:85:c8:72:38:f6:aa:88:75:fd:9a:e5:f5:
db:9c:65:51:45:d9:83:61:42:29:d0:7e:a4:ac:c3:1d:86:e9:
4c:80:aa:69:b2:17:26:8c:33:65:bd:6d:39:2a:85:a0:07:88:
b0:4f:83:ca:3f:28:f3:43:11:38:20:88:a9:02:c0:e3:a0:8b:
3d:5a:6a:6a:cf:d6:0a:d9:6e:4c:e6:4a:7b:89:3c:1a:3d:ff:
d1:12:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:42 2025 by rpki-client