Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
File: 2V_Z-7sug4agu3amyEH8aKfD65g.mft (raw, json)
Hash identifier: 1Jno/w4JA8GDfv9q14kb9xeT37u/SXKiSfIw1p5CgAw=
Subject key identifier: C4:9D:27:DC:D3:C6:8C:5D:7D:81:D9:D5:88:57:23:70:F4:D2:C8:59
Authority key identifier: D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
Certificate issuer: /CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Certificate serial: 0198469AE9E7305873C737DF26EE448A4379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
Manifest number: 0251
Signing time: Sat 26 Jul 2025 12:00:14 +0000
Manifest this update: Sat 26 Jul 2025 12:00:14 +0000
Manifest next update: Sun 27 Jul 2025 12:00:14 +0000
Files and hashes: 1: 2V_Z-7sug4agu3amyEH8aKfD65g.crl (hash: jJWzJ0F7M/1i/W0tFURgVn9SEYtgZIcY5lSHq9uVqxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:e9:e7:30:58:73:c7:37:df:26:ee:44:8a:43:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Validity
Not Before: Jul 26 12:00:14 2025 GMT
Not After : Jul 27 12:00:14 2025 GMT
Subject: CN=c49d27dcd3c68c5d7d81d9d588572370f4d2c859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:d4:95:eb:14:57:c6:f7:60:8c:d4:90:65:
1b:48:dd:b0:e1:b5:27:66:87:4f:53:80:c2:a1:8c:
2b:51:64:6a:15:f9:2b:46:69:17:b4:86:03:83:ff:
88:8f:13:49:be:48:62:ea:66:70:65:76:a1:f8:9c:
f3:a3:8b:99:46:3a:f7:4e:4c:87:41:57:8a:47:76:
67:4d:de:fc:82:c2:00:92:17:6a:00:00:2a:f3:0c:
37:20:5d:ea:e6:9f:38:41:88:ba:9d:3c:de:52:11:
f2:27:bd:c8:07:b2:6f:4d:07:9c:61:5d:49:9a:c5:
aa:3a:0e:d7:58:ff:ef:d3:66:1b:9d:a7:42:4b:7c:
fc:03:f0:b5:8a:32:94:bb:61:70:13:05:0c:be:b5:
fc:f6:c3:df:9f:66:ba:d6:38:9f:12:37:cc:68:ca:
d7:0a:27:60:dc:9e:ef:02:48:2d:0c:09:19:70:f3:
cc:85:f4:84:bf:e5:a6:5a:23:a9:2c:d7:3e:53:5a:
bf:7c:85:fc:7b:62:27:6e:fa:ba:9b:26:d9:09:0e:
e3:66:bb:0b:66:38:e6:be:e7:8c:c0:f6:7d:a6:74:
8a:0f:56:0e:a0:9f:b5:b5:6d:5b:d6:46:05:1d:c9:
b5:70:95:dc:be:30:5c:c5:85:49:7c:b0:a1:97:34:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:27:DC:D3:C6:8C:5D:7D:81:D9:D5:88:57:23:70:F4:D2:C8:59
X509v3 Authority Key Identifier:
keyid:D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4f:45:e3:a4:87:26:bb:11:e0:a4:0d:0f:e7:33:ee:fb:99:
6b:10:04:4d:6c:48:20:c1:ec:4a:64:cd:2c:67:84:e2:7c:12:
98:2e:59:9c:68:9f:a5:e8:a2:0d:99:40:1a:d4:c2:01:3b:56:
cd:47:11:6e:1d:cc:34:51:45:07:17:d9:03:58:b4:11:5a:18:
e4:86:00:3e:10:71:05:1a:32:19:70:07:e2:21:08:64:d8:d8:
96:06:40:4b:25:d7:96:9e:60:dc:66:50:ba:21:b4:f1:11:52:
fb:e5:1e:37:c2:c5:d9:f6:8a:1a:0b:07:0f:73:03:98:24:e0:
0b:7f:39:7c:96:7d:b9:69:ea:3f:10:01:11:55:79:b7:67:21:
7e:b6:fc:29:a1:6d:26:0d:ab:44:e1:5f:c5:91:3e:ee:d6:d7:
39:f3:a4:fd:3f:de:f4:73:d0:a2:90:11:a5:11:fb:38:b1:d6:
30:e2:2d:aa:5b:29:82:8d:92:a0:d4:a0:11:49:96:a6:3c:48:
a1:5f:1d:63:52:c6:d4:a0:d9:81:f3:d8:9c:63:8b:2b:48:1b:
8f:11:b9:4f:8f:13:59:84:dd:79:86:ed:84:89:5f:54:c3:47:
1e:c3:1d:37:41:0b:5a:78:51:02:d5:04:b4:ae:82:d8:ba:cb:
ab:d6:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:22 2025 by rpki-client