Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: RalFVeo09PBmB5ORh9ejG0Xwodwtq7JV7QSEhwNO7Ts=
Subject key identifier: 28:B3:CB:3C:AD:D6:76:15:DE:2A:D9:AD:1C:CD:9C:C0:1F:EA:63:C0
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 0198477851CECF2FF3CA21C310C1A77030A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 0CE1
Signing time: Sat 26 Jul 2025 16:02:04 +0000
Manifest this update: Sat 26 Jul 2025 16:02:04 +0000
Manifest next update: Sun 27 Jul 2025 16:02:04 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: YOS1HbDgUyvFEr7sFp0XxEzZpsWWsjYfIXQzje+grDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:51:ce:cf:2f:f3:ca:21:c3:10:c1:a7:70:30:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Jul 26 16:02:04 2025 GMT
Not After : Jul 27 16:02:04 2025 GMT
Subject: CN=28b3cb3cadd67615de2ad9ad1ccd9cc01fea63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:2e:c0:90:c1:6d:8d:ea:74:89:fb:1b:68:
cb:07:ac:4c:58:6c:7e:6c:ec:bb:4f:4a:6e:df:93:
16:25:8c:7a:54:d5:8b:4d:04:4d:ed:31:2c:db:01:
48:90:50:c9:c4:e8:43:48:fc:b0:1d:bd:12:77:04:
d2:af:9e:ee:19:bc:5c:d5:0b:46:2d:a2:f2:a6:d8:
2d:16:66:ec:51:e2:a1:ff:c1:a0:55:d4:33:1c:24:
04:23:28:aa:bd:40:48:8d:de:bf:81:0b:f2:4e:31:
f7:ca:59:06:a5:e1:c4:65:a9:33:eb:6d:09:c3:72:
d4:2c:a4:70:b5:52:7c:63:a9:cf:7d:40:df:1d:4e:
05:1f:93:94:a4:42:84:34:52:d3:31:9d:4c:5c:84:
6b:c1:e1:b9:f5:9f:6c:3c:3c:f5:3b:51:4b:04:ad:
bd:20:54:56:77:c1:2a:c1:6c:5a:9a:6b:ec:51:98:
bd:27:1c:26:84:e6:12:ad:33:6d:d4:8c:35:20:42:
b1:16:f6:b9:f4:bb:b9:48:24:7c:bf:00:64:20:26:
c1:06:8e:83:79:57:1f:f3:e3:bf:32:3b:22:fe:56:
99:d7:63:95:d4:a6:d5:db:07:d5:38:67:44:c4:5d:
d3:bf:26:31:21:71:3b:1b:f1:5c:88:89:ec:a5:bd:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:CB:3C:AD:D6:76:15:DE:2A:D9:AD:1C:CD:9C:C0:1F:EA:63:C0
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:58:dc:5a:ac:45:26:87:aa:62:7c:8e:fa:3b:9a:b5:a7:
61:a2:7d:c2:b1:32:f2:97:c6:2f:74:68:a3:30:7f:9e:37:e9:
b4:94:ca:1f:4e:0c:d6:93:3b:a4:c7:83:7e:e1:f0:fa:9d:4f:
9c:4f:8a:f0:7b:35:54:e4:a6:99:35:6a:c6:51:07:0e:20:fc:
17:e6:8c:3b:c1:34:60:59:d7:9c:a6:db:09:42:4b:60:4d:d4:
42:55:26:91:ff:59:96:76:de:af:99:ec:dd:29:c6:7d:f1:44:
9f:f7:49:02:20:8f:75:99:32:73:a7:72:8b:54:6b:71:04:c0:
40:ba:d3:e9:a4:af:a0:b9:f4:16:9e:a6:98:81:a2:51:86:64:
d7:5b:5c:38:f1:41:8c:6f:1e:45:18:11:f0:96:aa:17:47:e1:
d6:d4:67:a0:e3:e2:6c:40:fc:2c:70:bf:bf:8c:a3:8a:fc:9c:
ea:d6:93:4e:41:83:8b:aa:6e:9b:64:c4:8c:89:f7:8f:c4:54:
14:7d:0b:fa:65:83:30:f8:1a:f0:ab:6d:d9:6d:0a:ed:b5:d2:
f4:9b:cf:07:80:f4:2d:64:df:4c:29:9d:eb:27:ba:e0:c2:31:
9b:5b:20:c7:12:7d:a1:60:13:2c:66:72:6e:90:e0:b3:e2:6f:
17:f8:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:03:47 2025 by rpki-client