Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: GTjUEOXWFMhUoAy7Ac/u9lvnBLcVWw+HCRc2MBeseT0=
Subject key identifier: A3:5C:79:43:03:37:D3:5B:1E:24:2C:E5:4F:F7:DC:F7:73:85:64:23
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019880C270B726CEDF2EE52FE02B5260AF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 12AF
Signing time: Wed 06 Aug 2025 19:01:23 +0000
Manifest this update: Wed 06 Aug 2025 19:01:23 +0000
Manifest next update: Thu 07 Aug 2025 19:01:23 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 0/6sXJx/xuzFuq5YyZ4uzxMi/IP4jupvv+JzH9xPseY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:70:b7:26:ce:df:2e:e5:2f:e0:2b:52:60:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Aug 6 19:01:23 2025 GMT
Not After : Aug 7 19:01:23 2025 GMT
Subject: CN=a35c79430337d35b1e242ce54ff7dcf773856423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:9d:0a:7e:40:1d:eb:27:eb:3e:76:ce:52:
5c:16:4c:30:37:19:19:53:9c:b7:20:d2:41:34:0c:
3b:da:c7:80:18:8d:fb:4c:24:2a:b6:82:0a:e1:73:
6e:2d:2b:31:d0:9e:e3:d7:0f:11:b4:90:a7:de:2f:
a1:2f:c4:79:99:08:30:fa:4d:18:8d:59:84:a9:27:
d2:9b:21:31:92:59:0f:b5:40:ce:0f:6b:66:b6:c5:
f9:63:69:77:5f:97:ee:4a:a5:4f:4a:2d:c2:64:da:
9b:01:a9:db:ed:57:90:b5:2b:ce:86:0f:6c:cb:ff:
f1:9c:d0:0e:6a:10:41:06:54:c4:7a:96:2c:3c:aa:
25:67:02:30:bb:68:9c:14:5c:98:0c:53:ab:f3:ad:
36:98:e1:18:be:bc:ef:8f:8c:af:2c:c0:e5:7a:e3:
8e:91:b8:3b:97:57:65:82:a6:7f:00:b3:0f:f0:7a:
eb:56:74:d9:0a:c3:c5:6d:c7:8c:85:c0:96:07:06:
de:56:02:30:11:10:89:7d:60:77:e6:e6:d5:48:8a:
bb:a8:e8:2d:41:ab:01:6a:13:9b:b7:f1:83:48:2b:
c3:87:8c:01:fc:7c:38:6f:00:e5:b5:44:fa:57:25:
18:84:28:f7:77:b5:bd:d1:6b:93:a5:2e:bb:09:ff:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5C:79:43:03:37:D3:5B:1E:24:2C:E5:4F:F7:DC:F7:73:85:64:23
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d7:6f:f7:d6:3f:65:a5:19:c2:0a:14:1c:e9:b7:c7:56:18:
af:2c:95:7f:8a:43:4c:fe:bb:8d:6f:2c:88:25:41:16:e7:03:
f3:a8:ea:0c:71:d3:d2:c9:1b:40:10:05:de:c8:b7:e2:a8:ab:
2a:33:68:00:57:d3:05:70:1c:2a:62:6e:f2:4e:ef:21:63:62:
fa:4c:ee:dc:74:ee:04:f9:63:9e:06:ea:25:36:17:30:a0:ce:
f2:81:f7:ae:af:82:13:99:4e:2c:56:2c:6c:73:b3:59:d2:fb:
29:68:19:ab:5e:d2:e8:30:07:b6:15:78:13:48:18:cc:e6:b9:
63:0b:90:1a:59:1e:a7:b8:2f:86:92:97:46:69:f1:cb:71:d3:
a9:43:35:5f:6b:51:45:e9:8d:62:37:ad:69:8c:a1:ef:4d:68:
1d:3b:3f:ca:6a:66:ae:7c:57:5b:a7:3c:09:ac:f7:f0:7c:04:
d9:49:06:b8:e0:a1:15:bf:cc:99:8c:41:31:ee:00:7e:eb:90:
d7:78:2c:62:44:0b:6c:05:e1:fb:81:b1:91:e4:c3:f3:e8:04:
62:49:34:73:ba:14:0e:f1:70:ee:b3:02:1d:bd:7a:49:56:2f:
d7:b3:8b:10:d9:08:d7:93:06:e5:78:cf:4f:9a:b2:be:6d:8d:
16:ce:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:23 2025 by rpki-client