Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: bMdt8LEZR/tlcN/iVuRCsp+UCZg88p05A2UPGRjlJVk=
Subject key identifier: 37:7D:F7:08:2E:A0:24:D2:78:42:D0:92:03:E7:23:46:82:7F:06:72
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 01985456B7950796A74665415E21F58E7B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1603
Signing time: Tue 29 Jul 2025 04:00:25 +0000
Manifest this update: Tue 29 Jul 2025 04:00:25 +0000
Manifest next update: Wed 30 Jul 2025 04:00:25 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: KAPd5X3/64wKTLtdCstz/eeh/PGr1tGG5WqxFnHgYDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:b7:95:07:96:a7:46:65:41:5e:21:f5:8e:7b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Jul 29 04:00:25 2025 GMT
Not After : Jul 30 04:00:25 2025 GMT
Subject: CN=377df7082ea024d27842d09203e72346827f0672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:82:0c:48:f8:83:f3:1f:91:ef:fc:8b:d1:
82:59:5b:6c:6b:da:10:47:03:6e:f0:9e:5d:70:6f:
e9:1c:5f:dc:b4:55:5b:23:05:a7:d2:8d:94:b2:17:
49:75:14:c3:60:47:81:c9:6a:ad:a6:d3:ea:39:4d:
d4:96:16:30:70:f2:33:b3:da:57:8c:9e:cc:44:2a:
0f:af:a2:0a:2f:0a:c3:a4:55:5c:20:3f:1d:74:5c:
6e:2d:b2:84:23:ad:49:08:30:48:20:eb:22:a1:a1:
ca:40:ba:c8:3d:7b:26:f5:ca:6c:f2:d2:b9:f0:a4:
6c:ba:c5:c2:b3:3f:d8:ab:69:4d:89:a0:ed:4f:fb:
93:7e:30:17:96:38:d2:38:1b:46:59:a0:ae:9b:de:
5f:78:11:24:49:5f:e4:c5:46:44:88:73:9e:35:4e:
06:69:16:66:c8:1f:81:64:af:00:1c:f9:62:9f:67:
b7:93:98:ce:0c:d0:af:f4:13:30:e7:d9:f5:ee:18:
59:35:2f:7a:c4:a7:c2:0e:b4:30:75:39:d5:d9:6d:
e9:ac:eb:30:ec:8f:94:28:19:71:51:49:46:51:33:
99:39:ac:20:86:65:c5:73:6a:13:86:6d:b1:79:6e:
c7:40:9f:71:45:cf:27:b1:91:ca:b6:b3:a7:89:17:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:F7:08:2E:A0:24:D2:78:42:D0:92:03:E7:23:46:82:7F:06:72
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e3:3b:99:48:6b:90:08:53:b0:d5:1b:22:69:bc:46:20:3d:
6a:a6:9a:16:fe:fb:24:fe:73:ae:61:83:c6:9b:05:f2:24:67:
fb:bd:17:e6:7c:c6:33:3e:b9:aa:57:2d:da:77:67:81:31:de:
17:39:da:02:af:48:0a:35:c6:98:b6:e4:e1:73:b8:ab:16:3b:
2c:1b:c0:40:55:20:e3:b9:0e:80:ca:75:24:bb:ce:f0:b7:e6:
5b:a7:18:ed:6b:be:50:95:50:6d:08:c9:bb:c5:80:e1:94:4a:
8f:75:7f:56:e2:ea:49:81:e9:aa:0b:60:b2:c7:7c:20:39:f8:
56:55:43:c1:6f:75:35:d0:10:1c:11:c1:57:b9:92:78:8f:8d:
9d:bc:82:39:0c:f7:7e:2d:bb:7b:01:39:51:72:89:92:25:01:
9f:7e:b3:0e:c1:2a:d7:06:3d:33:df:60:ac:ea:75:d3:32:94:
b4:9f:a5:3e:c0:53:f3:c6:e3:7c:34:13:68:1b:81:30:f1:d8:
ab:e5:73:64:fe:54:a9:c2:a6:4b:f2:52:86:7f:a2:83:ec:26:
42:8c:bf:e4:03:37:9e:11:e7:a5:2b:c7:cf:24:cd:22:76:ec:
fe:de:17:63:7b:92:35:e3:03:18:ab:48:a7:b7:44:a9:70:30:
e5:11:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:33 2025 by rpki-client