Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: kXg0XO4FyZJkq4lGU9Godvs3HerX7p6Z1UgxmybhZX8=
Subject key identifier: F9:5E:44:51:5C:44:59:DD:01:92:6F:DF:DC:2E:D4:45:6A:18:2B:5D
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 01984A41688C66106EB70F5861A3D6970BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 0443
Signing time: Sun 27 Jul 2025 05:00:57 +0000
Manifest this update: Sun 27 Jul 2025 05:00:57 +0000
Manifest next update: Mon 28 Jul 2025 05:00:57 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: Li6tq8mdtsvg7CGTCVBA3AX5fr9bsLqBkeHIAuSJQ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:68:8c:66:10:6e:b7:0f:58:61:a3:d6:97:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Jul 27 05:00:57 2025 GMT
Not After : Jul 28 05:00:57 2025 GMT
Subject: CN=f95e44515c4459dd01926fdfdc2ed4456a182b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:dd:4a:d7:52:77:99:f4:5d:e8:88:4c:26:
6f:64:d7:5d:d4:7d:9d:29:23:f6:a0:ee:01:c0:49:
75:e2:28:7d:e5:d3:fb:34:c7:5f:dc:5c:26:de:1b:
44:84:67:b8:18:fa:c0:c3:60:c7:32:a5:00:88:89:
0e:58:e7:d9:d0:72:7c:44:7f:6b:6d:51:9a:bc:19:
9f:73:fd:67:aa:3d:1d:2b:34:a2:f1:ee:b2:df:60:
31:48:72:fc:e3:80:ca:9d:5b:b6:8f:ba:7a:49:c0:
ec:5e:ad:a1:4f:75:fb:74:d1:c7:c6:ef:c5:45:4e:
1c:50:0c:f6:18:99:8f:ea:65:b5:24:85:8b:f3:e2:
18:d5:73:7e:33:3f:3c:44:00:82:06:c3:89:48:3e:
eb:26:46:af:2c:70:40:db:eb:56:11:a4:9c:04:2b:
42:e5:76:e3:94:4a:8e:06:15:af:27:66:5e:03:cb:
0f:32:00:0f:d7:c4:77:31:b8:2b:cd:8c:e5:d4:bc:
a1:33:b4:7d:e3:3a:bc:a1:58:08:37:95:01:c0:90:
ba:33:b5:e9:4c:7a:11:a6:7b:77:bd:f0:d1:36:98:
70:ef:02:a8:34:25:4c:49:a9:04:e7:95:88:d3:b8:
6f:46:33:fb:ed:c9:d0:e9:5e:0b:f6:3b:82:29:e2:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:44:51:5C:44:59:DD:01:92:6F:DF:DC:2E:D4:45:6A:18:2B:5D
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d8:74:1a:d9:5a:f0:f1:e9:51:9c:6d:70:53:13:31:e6:2e:
03:35:21:52:b5:81:b7:ee:ed:65:5b:19:1f:79:3b:19:27:31:
36:b5:fb:ac:8e:97:c5:76:84:52:ea:68:13:7f:11:c7:08:9c:
e9:f5:af:83:48:75:90:35:4e:98:64:68:d3:37:8e:00:71:35:
5a:9b:14:e5:a7:34:b9:47:0d:1e:d0:9d:e6:86:47:52:9e:c3:
b7:64:8d:dc:ae:70:19:de:18:ac:e2:bf:14:0a:88:58:e9:7d:
7b:05:b7:84:f0:6c:36:b6:c3:ea:67:41:9e:65:e0:97:64:9e:
91:ef:30:e1:22:79:73:92:2a:1e:4b:ee:76:c2:74:a6:8f:37:
13:81:82:ec:1c:81:da:58:4f:08:4c:e8:f0:b3:37:59:57:5c:
58:94:8a:d5:57:db:15:a6:b6:a4:60:6a:a5:dc:af:42:76:02:
f7:c3:e1:cb:6a:e0:bf:41:03:79:52:29:ea:95:55:2a:0d:52:
fb:7e:9d:82:21:e9:3c:a9:d8:37:74:49:4d:48:4c:56:27:af:
1b:ae:fa:6c:ba:eb:b4:50:98:fa:dc:d0:73:6a:39:c0:56:10:
4e:f0:f2:78:9e:ee:4a:35:12:bd:e2:0d:06:31:1b:74:a3:29:
4b:ae:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:02 2025 by rpki-client