Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier: pwt3QfLxt2iHSrqHtaHluUd+nLWsRTSiDtCVYZGS9aA=
Subject key identifier: 01:5E:1A:A0:CC:9C:37:1D:21:CC:EB:70:07:41:01:A9:16:19:9B:63
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial: 0198A23C99A6DD2D091DC08CE79CCBC3A67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number: 099E
Signing time: Wed 13 Aug 2025 07:02:17 +0000
Manifest this update: Wed 13 Aug 2025 07:02:17 +0000
Manifest next update: Thu 14 Aug 2025 07:02:17 +0000
Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: nwmNYuHFCFEOgXkSg1jONW4Ea99lTtRuhzLALrNvxlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3c:99:a6:dd:2d:09:1d:c0:8c:e7:9c:cb:c3:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Validity
Not Before: Aug 13 07:02:17 2025 GMT
Not After : Aug 14 07:02:17 2025 GMT
Subject: CN=015e1aa0cc9c371d21cceb70074101a916199b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:66:2f:00:cd:cf:11:93:85:d8:ff:cd:1c:
f9:84:55:67:4d:ca:86:83:46:17:63:b1:76:c3:9a:
95:a2:da:82:b6:88:c7:f2:7b:97:4a:99:46:f1:3d:
14:bd:f0:f7:fa:aa:03:4b:38:fc:73:60:6b:25:29:
3e:eb:54:09:3f:51:57:84:3e:bb:90:8d:fc:08:f0:
96:c2:67:0b:64:a6:70:e2:33:6a:21:5d:4a:27:03:
ce:1c:bb:a9:88:bc:5d:8b:db:d5:21:eb:fd:14:46:
ca:1a:ae:76:c5:9a:53:b2:99:60:30:98:39:b2:1c:
5c:b3:8b:df:10:47:05:32:3e:33:bb:ac:a5:14:99:
69:83:f2:f1:0e:66:67:ed:4a:0e:91:fb:e0:e7:39:
4b:d8:6c:04:4f:7d:78:5c:46:3b:c9:d7:1c:15:b5:
e4:17:82:61:68:d4:c0:96:96:c8:ea:f9:a8:2f:08:
9f:e1:5f:6a:07:e8:5d:3c:60:21:49:80:9c:fb:7a:
c6:04:91:8c:cf:e3:89:20:86:54:92:94:e3:36:c8:
78:ad:de:35:90:c1:cf:60:11:4b:c7:5b:e8:48:c8:
46:7b:01:de:17:28:c1:ae:d2:1a:e6:c0:59:69:79:
0d:fe:2e:38:c7:f0:1b:b3:6a:e9:34:6a:45:67:08:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:1A:A0:CC:9C:37:1D:21:CC:EB:70:07:41:01:A9:16:19:9B:63
X509v3 Authority Key Identifier:
keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c8:4e:7c:f6:c7:c0:d7:44:01:c2:6a:38:01:dc:4a:22:f5:
f6:b2:97:d7:e0:4f:c2:d6:a3:ba:57:e7:81:26:46:5b:aa:3b:
e2:53:44:01:42:d3:e8:d4:00:7b:be:3b:88:23:55:e8:c3:c9:
00:a4:27:9b:ca:00:b6:08:8f:b8:39:bd:11:9a:ae:4c:27:d6:
ad:46:ea:b1:2a:13:72:94:ff:cc:09:77:77:6d:3f:12:87:25:
6a:18:30:22:10:76:06:1b:f1:17:3c:00:77:55:be:de:61:51:
03:62:bb:ce:df:6c:69:a2:15:bd:d6:f1:8a:71:10:b1:93:c0:
6e:c6:eb:00:35:bf:e6:67:71:75:f0:aa:c5:e6:24:cd:7c:5b:
f2:a4:cf:c3:0c:1f:c8:cd:8d:56:3f:61:d2:78:63:92:75:a8:
59:e5:22:1d:ce:6a:f4:3d:ad:7e:cb:a6:13:79:96:93:a8:3d:
b7:ac:7a:d0:fe:9e:84:3b:38:76:af:5e:6c:ae:a3:94:5c:03:
37:c5:06:42:40:06:7a:ac:71:3a:4e:77:69:a9:44:a2:cb:1a:
19:a5:73:2b:a1:be:95:e3:51:0b:6c:56:ee:58:5d:81:0a:44:
23:e6:b6:8f:51:bb:a6:01:07:eb:60:88:10:e3:6e:63:30:64:
f2:84:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:45:49 2025 by rpki-client