Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: QVzuy/vlI6PcFACql0cxcU1zbS6a0Id4v/oRswGBhi4=
Subject key identifier: 23:E2:E2:E6:36:A8:0F:43:28:36:B8:A6:12:89:A6:57:48:05:00:2E
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01984AAF46FBACABFB933C9BE42660A98E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 10CD
Signing time: Sun 27 Jul 2025 07:00:57 +0000
Manifest this update: Sun 27 Jul 2025 07:00:57 +0000
Manifest next update: Mon 28 Jul 2025 07:00:57 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: CnQWO3k5QL7+xGNhy32+jOBgliAa/oFQAjQEAqw7WFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:46:fb:ac:ab:fb:93:3c:9b:e4:26:60:a9:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Jul 27 07:00:57 2025 GMT
Not After : Jul 28 07:00:57 2025 GMT
Subject: CN=23e2e2e636a80f432836b8a61289a6574805002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:cb:11:41:79:8d:f9:66:84:f8:3f:1e:31:
48:ae:4a:5b:42:4d:fc:71:a4:c4:e0:29:d8:27:6a:
1e:43:48:36:2d:b5:bb:d3:1b:6b:24:95:ab:5b:0f:
42:ab:d6:9e:9e:99:1b:15:41:ff:23:d5:5d:8b:af:
0a:5c:e0:58:7e:10:63:b4:e2:12:02:07:1b:14:6f:
5d:19:8a:59:86:1c:ac:bf:d8:8f:0c:ea:87:03:cb:
19:8a:99:ab:5a:18:24:7b:e3:07:03:f7:c0:94:1e:
38:7c:15:c7:72:b2:5a:01:c0:91:ad:00:c2:08:81:
7b:69:ed:97:ad:d5:d9:46:78:c6:f0:18:7a:18:12:
43:36:3a:ef:1f:6f:ad:c0:df:98:0f:13:f2:fe:b4:
f9:60:40:f6:7d:e0:77:24:11:8b:9a:94:aa:7c:84:
2f:e5:e5:da:8a:63:62:e3:99:89:bb:0d:c4:0a:9a:
32:45:a5:84:43:37:ec:3a:96:86:a8:0b:49:4c:4a:
01:1a:5e:02:1c:84:15:b1:70:50:e2:d8:ad:37:0b:
3f:1a:93:73:8a:a2:a7:8d:38:32:5c:23:1e:78:47:
48:b3:90:51:66:ba:d3:36:6d:b3:bd:83:28:67:22:
3e:9d:dd:8e:82:f5:61:47:f4:bf:d4:44:96:e2:14:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:E2:E6:36:A8:0F:43:28:36:B8:A6:12:89:A6:57:48:05:00:2E
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d7:61:19:cd:76:8a:ad:09:3f:54:d3:2a:1e:fc:b2:77:35:
ec:b4:f0:72:7c:03:f8:d3:91:06:35:6e:30:39:e8:69:7d:e5:
0d:90:f9:9c:cd:97:25:d1:02:9f:77:5c:e5:77:19:45:e5:5e:
d7:f1:e4:23:fe:f6:35:b4:61:c9:c1:b2:ea:0e:02:ee:eb:1e:
2e:b7:af:ab:39:49:a5:2c:f8:78:f3:f7:95:62:8a:fd:4d:c3:
c1:f7:d1:e6:95:1c:af:47:79:df:ed:06:b2:05:ce:ec:0d:82:
b3:c3:3d:8c:56:72:6e:1b:54:46:85:68:1a:fd:e2:6f:f7:66:
df:ef:dd:64:2b:4d:da:53:37:3d:8a:14:29:25:6b:11:6d:ca:
0d:82:95:6c:5c:bc:d7:05:83:47:6a:f7:0d:54:85:b2:cf:0c:
3a:26:51:7a:b7:be:a9:5e:27:94:d0:fd:3d:2c:0d:50:47:4b:
74:39:2b:06:d5:f2:d2:9d:ec:c8:da:d0:55:b7:2a:2f:37:30:
fd:26:1b:89:0e:01:99:fa:8c:a1:7d:96:d9:1f:c7:91:68:f1:
d0:4f:0d:4e:53:3a:df:7b:48:d8:b5:0a:e9:83:51:8b:cc:00:
83:da:e5:05:d5:12:62:b1:35:4d:dd:68:1a:b9:64:d7:ee:d7:
37:41:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:30 2025 by rpki-client