Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: PBBYrKKOu7UJ0QdG6DINvaF3Zs5hYg9qOMuuVB+bNbc=
Subject key identifier: 85:B7:1E:62:6F:53:97:5C:B5:FA:26:A2:CB:09:CC:79:67:3D:0A:3B
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 0198530D6890E715C15D0CC2DF116088B89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0BB5
Signing time: Mon 28 Jul 2025 22:00:44 +0000
Manifest this update: Mon 28 Jul 2025 22:00:44 +0000
Manifest next update: Tue 29 Jul 2025 22:00:44 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: gCliCl3jqzo+6LhQdNMIEacmlt2/P5Cn/qviJGuG4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:68:90:e7:15:c1:5d:0c:c2:df:11:60:88:b8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Jul 28 22:00:44 2025 GMT
Not After : Jul 29 22:00:44 2025 GMT
Subject: CN=85b71e626f53975cb5fa26a2cb09cc79673d0a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:04:ba:a3:e4:84:1b:0f:23:4e:23:6d:fd:
51:eb:26:ca:f8:a2:df:15:04:d0:f5:a7:61:b7:4e:
02:c4:23:c5:53:ed:e5:0d:19:6f:91:19:97:4f:82:
c6:fd:63:9a:99:0e:ee:24:09:1f:ee:a5:56:44:b2:
d9:8a:22:f2:c2:73:5d:23:3f:5e:fb:0d:62:a6:58:
4c:de:c4:cd:08:ac:81:23:b8:67:93:97:30:b4:74:
71:6c:a0:65:8b:92:2d:3b:4f:cb:bb:46:05:eb:8b:
ec:c9:c3:11:48:27:75:7d:11:fe:ca:d0:5f:3a:3e:
26:94:d5:b5:88:89:4a:e3:c7:f1:55:4d:e5:4a:bd:
28:39:59:dc:2d:c4:99:fd:03:89:77:29:84:bd:fb:
4a:e2:07:f4:f7:e9:b2:9a:e8:3c:0f:f3:1f:d8:a1:
47:c5:72:62:9f:58:7e:55:ac:f0:4d:99:a2:ca:25:
22:ea:17:01:0a:68:48:c0:88:3b:1d:81:e3:3b:2d:
2b:66:ea:df:28:66:7d:9a:ed:10:6a:20:52:ef:94:
d0:02:f6:d4:1e:b5:45:43:0f:b3:4a:32:2e:13:cb:
d0:40:92:d7:97:76:94:db:66:89:c3:2c:04:e8:44:
d5:43:e7:cc:d1:0a:d3:3a:c1:e8:2c:9d:cb:91:b1:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:1E:62:6F:53:97:5C:B5:FA:26:A2:CB:09:CC:79:67:3D:0A:3B
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:7d:b9:56:66:23:58:cd:7d:2f:bc:c7:f5:68:86:d6:43:
e8:1d:ed:23:86:e1:73:e7:fd:91:3b:12:d3:15:79:29:b0:57:
b9:6e:15:21:f1:ea:d5:c2:dd:2c:58:e7:0c:9e:cd:49:6c:04:
da:81:bb:7f:01:33:2f:ab:46:41:ce:b2:23:30:1b:d8:38:23:
95:db:6b:79:4f:46:d5:6d:c1:cf:80:29:5c:b1:e7:4a:b0:8c:
50:98:37:44:9e:9a:86:34:e8:d3:cb:6f:e7:fb:8b:20:68:2e:
cb:50:8c:9e:72:e0:5a:b3:b7:89:2c:37:ec:4c:98:ce:5d:f9:
1b:b4:6c:b8:80:2f:da:e4:b7:cb:cc:52:de:2c:4b:f5:d7:03:
1e:c3:c5:4e:9a:a8:8a:7a:5f:ee:5c:41:ca:39:55:99:1c:a1:
8e:4c:a7:46:b0:04:0d:b0:7f:4d:ce:24:7f:ff:6c:37:bb:61:
d2:b9:3b:ce:71:11:44:ce:8c:e6:81:f0:f1:13:b2:5d:7c:84:
a9:4f:47:5e:bb:7b:94:b0:35:ab:8c:b9:f7:36:ff:d7:82:ea:
89:46:2d:b4:16:c0:a2:f5:f2:b9:06:01:3c:6b:6b:48:e1:a8:
48:87:c9:c9:b0:2b:3b:48:69:98:35:91:cf:b5:b6:d8:52:5e:
40:a4:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:52 2025 by rpki-client