Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: R1eXk1Yrx6Q8jRu8pnaTWRC72VPjPhLh3z7gILngAew=
Subject key identifier: 0A:39:82:F1:B4:67:7B:3C:FE:E0:20:62:9E:F2:3D:DD:AE:C6:62:EA
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 019895924657102C91345394FE60507911D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 0DF2
Signing time: Sun 10 Aug 2025 20:00:48 +0000
Manifest this update: Sun 10 Aug 2025 20:00:48 +0000
Manifest next update: Mon 11 Aug 2025 20:00:48 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: lz/LZZ14RY9IwofGZYuKY643kkUzBgAs6NEetJfHmvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:46:57:10:2c:91:34:53:94:fe:60:50:79:11:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Aug 10 20:00:48 2025 GMT
Not After : Aug 11 20:00:48 2025 GMT
Subject: CN=0a3982f1b4677b3cfee020629ef23dddaec662ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:9e:30:45:a1:06:5c:48:e9:7e:85:24:3e:
28:58:52:13:8a:8d:fb:81:8f:de:cd:7e:74:bb:84:
8b:7d:d7:4b:ee:96:9a:d0:b3:bc:9e:b3:6f:fb:50:
89:28:59:28:65:02:bb:94:77:fd:6a:57:4a:d6:1d:
3a:44:c1:bb:de:ca:b1:7a:81:80:de:28:cd:ce:b3:
57:a0:13:38:63:f5:09:ff:d8:c9:6c:11:c4:d6:ba:
64:92:2d:79:e8:45:3c:a3:d6:1d:a3:27:87:05:2e:
62:b8:57:f6:bc:6c:db:af:4b:0a:cc:79:27:c2:a5:
7d:3e:43:42:56:b0:d9:ae:49:2f:07:8a:34:40:e2:
ea:41:14:b0:bf:15:59:72:a0:2c:63:04:a8:cc:0f:
7c:4b:b8:40:3d:81:65:9f:aa:9d:61:e5:8c:cf:60:
60:05:23:da:ec:e4:57:4d:a9:33:99:62:67:6b:0f:
df:44:a0:72:08:da:1a:74:2e:88:57:71:b0:88:66:
df:46:41:a3:1c:3d:eb:ec:0f:10:ad:fb:34:ad:83:
70:dc:71:f2:73:19:7d:d8:41:1b:e3:c1:0c:41:36:
a2:3d:2e:d4:09:65:7e:b2:73:dd:40:78:2a:e8:7b:
4a:7e:51:59:b1:4e:d9:7d:ab:a6:db:a5:71:ab:7e:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:82:F1:B4:67:7B:3C:FE:E0:20:62:9E:F2:3D:DD:AE:C6:62:EA
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:19:29:8f:f5:f6:80:12:be:68:98:9c:ba:ad:a1:45:c8:84:
84:e9:08:c5:5b:1c:f3:1f:93:a0:c6:5d:9f:a2:c2:12:cd:8b:
11:d9:be:14:67:f4:76:62:b4:bf:a1:6a:90:5f:de:39:01:17:
cb:6b:2c:1e:1e:6a:cc:82:81:18:05:3e:f6:6a:7c:4a:de:fd:
d4:47:cf:7f:44:bf:10:8d:26:41:05:c1:c1:47:56:35:fe:98:
b8:01:97:7a:aa:47:b1:d9:00:29:e9:3d:c0:57:80:07:7c:07:
c9:52:7b:6a:4b:d0:7a:97:c1:61:c8:d2:26:60:bf:28:45:8f:
c8:d6:a7:dd:77:fc:1a:2d:6a:ff:7b:b7:41:58:87:40:55:10:
63:00:58:b7:2d:ab:da:79:3e:3a:8b:cf:f7:1c:26:dd:f3:60:
af:14:16:7a:77:56:b9:d1:f5:37:55:87:2f:6e:38:a4:d1:52:
a3:c7:9f:fe:fa:b7:9f:65:ae:60:94:8c:91:8d:6b:4f:ab:2c:
9c:b9:f9:b7:21:ab:e8:bf:86:b7:32:22:fa:ea:60:8d:12:4a:
ad:a8:eb:f9:7a:92:c3:2e:3f:35:27:70:94:ea:4c:a0:ec:22:
fb:29:d0:22:92:0e:74:ed:b6:5d:af:9b:73:d0:90:9f:5a:98:
be:8b:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:17:14 2025 by rpki-client