Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: +W0T+gtSN60/PX3wWjpDX77yyjQeeXTXD9PW4lcF/KM=
Subject key identifier: FD:25:35:75:2B:AD:3F:30:CB:C1:3D:30:4E:AA:5B:4D:D6:D5:A0:E4
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 019883562FC2A1D96C004B8480A3F94D1A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0B9F
Signing time: Thu 07 Aug 2025 07:02:00 +0000
Manifest this update: Thu 07 Aug 2025 07:02:00 +0000
Manifest next update: Fri 08 Aug 2025 07:02:00 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: lXdqb1TP3NPByi+7juGvu/4KbmSnPsSph+Wnt+fXMYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:2f:c2:a1:d9:6c:00:4b:84:80:a3:f9:4d:1a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Aug 7 07:02:00 2025 GMT
Not After : Aug 8 07:02:00 2025 GMT
Subject: CN=fd2535752bad3f30cbc13d304eaa5b4dd6d5a0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:ae:33:74:89:c4:61:4c:3b:5a:65:c8:e4:
70:77:c7:4e:30:dc:32:a5:b8:84:b5:2d:1c:8b:21:
11:0e:2c:7d:9e:a2:ac:22:7f:8c:36:95:86:97:3f:
9e:e5:37:4b:b5:f0:19:08:08:0a:6a:6d:3f:08:99:
71:98:12:d4:8c:51:59:21:86:26:c9:0b:76:35:f4:
8b:8f:11:a8:1c:72:92:06:21:94:29:26:b4:a2:86:
88:ae:af:21:d0:6d:e3:a9:be:f0:42:07:a6:38:fb:
93:4a:5c:b4:46:be:bc:e5:f6:35:3d:d3:01:88:4a:
31:59:ca:8c:3b:19:70:3f:73:b3:fe:f6:d0:10:9f:
7d:2c:be:03:51:67:ac:de:94:8a:ca:f9:c0:dc:ab:
de:32:5a:c3:9a:6d:6a:e2:14:73:74:96:76:ef:34:
ca:71:c8:90:21:d9:34:b6:ec:d4:62:c5:30:81:d9:
76:e5:7e:58:61:ff:bd:bc:2e:27:b7:b1:ba:da:10:
c5:6c:8a:6c:5a:a0:98:48:8b:35:bb:64:ed:a8:ec:
7b:0d:d0:b9:49:26:b1:44:d9:fa:0c:ed:fb:5e:f3:
cc:26:25:27:be:d3:e1:19:cb:c2:96:34:d3:43:bc:
af:15:01:b1:aa:a4:1c:48:fe:9b:0f:5f:fc:fd:69:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:35:75:2B:AD:3F:30:CB:C1:3D:30:4E:AA:5B:4D:D6:D5:A0:E4
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2e:12:a8:ba:32:23:7c:a3:83:58:11:dd:44:6f:ee:68:2c:
cd:1e:29:96:1d:c3:a2:47:ec:29:35:30:30:53:d9:80:9d:b5:
32:d2:5b:c9:80:e4:db:b0:a2:62:c5:c1:89:6f:9f:a6:3d:4b:
15:c2:35:5e:22:b1:fc:82:14:3a:15:df:8a:06:b0:9d:c6:b1:
bf:71:0f:6d:4a:8c:f9:70:36:25:7d:35:19:73:a4:2c:8c:04:
d9:cf:54:42:4e:5c:ec:ad:0d:51:f7:90:0a:e8:d8:78:f5:2c:
8a:03:fa:63:25:f4:f7:00:59:54:ce:e6:10:b2:3a:15:81:0b:
93:46:91:f5:38:21:1a:01:44:2f:db:f8:06:98:5a:de:a7:80:
2e:b9:b0:c2:ef:fe:e1:ef:08:e5:1a:73:78:2f:fd:35:1f:bd:
d0:63:92:c4:bd:27:b6:5b:55:aa:0e:ed:76:27:36:4b:31:b8:
cf:bb:88:8e:0b:81:b7:ae:0e:9f:b5:53:7d:8c:0e:4a:8d:61:
dc:25:59:2f:a9:42:9b:c4:6a:f3:8d:73:27:de:a7:cc:19:1e:
df:2f:c7:df:5f:52:75:fc:0d:a4:f8:e5:07:2e:3d:1e:c1:c5:
7a:76:b6:fb:25:eb:bb:48:a3:61:b0:6f:80:db:c9:12:e9:f5:
a3:4b:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:41 2025 by rpki-client