Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: lgtV1c9Sv6EAOCpZc79EUDBgbQRcMiYL33T0JTpybQw=
Subject key identifier: 51:EA:C7:B1:9B:18:CE:EB:93:2D:EE:E2:9B:B0:28:B8:EE:CD:23:77
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 0198530D77CAB559C8856011F45EF9443A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 089D
Signing time: Mon 28 Jul 2025 22:00:48 +0000
Manifest this update: Mon 28 Jul 2025 22:00:48 +0000
Manifest next update: Tue 29 Jul 2025 22:00:48 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: Uci8fqMOYgacQFjgjRfg7TV8od7lhPQyHeT38KSKQ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:77:ca:b5:59:c8:85:60:11:f4:5e:f9:44:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Jul 28 22:00:48 2025 GMT
Not After : Jul 29 22:00:48 2025 GMT
Subject: CN=51eac7b19b18ceeb932deee29bb028b8eecd2377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:97:03:cd:8a:b5:ef:b7:4a:b6:f4:cf:e7:
ba:d0:44:1e:51:b1:05:e7:f3:07:78:39:1c:2c:e5:
f8:98:27:33:19:59:79:20:13:5b:9d:67:5e:ea:23:
7e:03:e3:07:6d:7e:62:65:fb:09:08:2e:ac:57:d9:
84:e8:66:a3:3c:08:16:aa:a7:76:62:f7:74:ef:28:
f5:42:2c:ed:39:c4:87:80:45:21:73:28:1f:3b:f2:
8b:98:e1:07:dc:8a:f0:23:17:b0:c8:f8:3f:55:8b:
0f:a5:5a:83:4f:41:a1:2b:f9:fc:13:ad:aa:00:2c:
2a:07:a4:65:bf:37:4a:44:21:07:dc:de:2a:c2:f2:
2c:82:e3:8e:86:fd:2f:3b:ac:c7:7c:91:1c:66:07:
6a:35:b1:85:44:46:b5:42:e1:20:5b:eb:7b:dc:42:
13:6c:2b:63:2d:33:d5:bf:50:af:27:fb:da:66:4a:
e5:4f:84:5b:ab:fd:3d:2d:52:a3:b0:d1:83:ac:ce:
50:7c:ad:a0:cf:e4:f0:13:e3:79:d4:c5:7a:bd:07:
c1:97:c0:a0:72:0b:34:6b:f5:5a:4b:3e:cc:2a:cf:
fb:c3:64:e7:d7:99:26:38:55:16:60:a4:37:e1:95:
8a:0a:de:ee:eb:41:6e:ba:e6:be:8e:86:52:72:db:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:C7:B1:9B:18:CE:EB:93:2D:EE:E2:9B:B0:28:B8:EE:CD:23:77
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ae:07:e6:5f:42:c0:8f:bd:42:59:b7:cd:9b:cf:ab:9d:da:
12:fd:89:72:41:2d:98:2e:44:fd:52:d2:ce:4e:11:2f:c4:ed:
c5:3b:60:aa:2e:5d:27:3f:5a:e6:e4:b5:2a:e1:08:e1:df:9c:
49:5f:5a:fe:b3:df:08:63:25:66:52:92:b2:26:64:1b:56:de:
23:fd:84:59:0e:d0:7b:ea:2f:40:92:4d:d1:b1:90:eb:f2:db:
c9:92:41:76:d6:08:51:54:46:12:79:9f:f4:2d:0d:eb:b8:50:
bc:00:53:b9:9c:5c:d1:51:27:64:65:06:bc:5f:45:59:cb:82:
ab:ef:ee:8b:ba:f0:a8:37:93:d3:81:f8:43:79:b0:1e:b2:ad:
4a:25:72:c4:1d:fa:3b:ba:2f:ad:2d:7e:6c:f8:5c:67:b8:17:
0e:76:41:ff:44:61:b8:f6:a3:7e:8f:aa:3e:87:98:c7:8a:d9:
ee:02:0c:9b:05:a3:13:77:55:3f:5f:8f:45:7c:2a:b5:cf:7b:
91:4e:74:c2:9a:e0:66:7e:0e:0a:c1:39:2f:71:6e:d4:fc:01:
9a:82:47:3f:ed:b8:7c:62:cf:e2:d7:44:ce:a5:31:7a:89:8b:
5c:47:dc:ed:11:16:09:4d:25:5e:34:dc:88:4a:df:07:a1:d6:
1b:d0:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:50:05 2025 by rpki-client