Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: 2FrOmqThzmYcfpLYKBK14VIaZiSwGOKKn8ZWxzqOd0Y=
Subject key identifier: 67:B2:E9:A9:5B:DA:9B:EB:7D:B1:F4:3D:D4:F8:4B:8A:D4:E2:90:93
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019916F5E45FF694615AC98D664565CEC24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 05FA
Signing time: Thu 04 Sep 2025 23:00:37 +0000
Manifest this update: Thu 04 Sep 2025 23:00:37 +0000
Manifest next update: Fri 05 Sep 2025 23:00:37 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: hgTtySJN0mXEmrXMzcUyRxrRzIvzggST3bsT9ONo438=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:e4:5f:f6:94:61:5a:c9:8d:66:45:65:ce:c2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Sep 4 23:00:37 2025 GMT
Not After : Sep 5 23:00:37 2025 GMT
Subject: CN=67b2e9a95bda9beb7db1f43dd4f84b8ad4e29093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:16:02:3a:22:5f:ce:78:37:3c:ea:68:86:
73:af:8e:f0:e4:54:6c:e2:31:14:6b:ee:6a:9a:ea:
6f:fe:67:2e:5f:97:97:dc:04:29:55:cf:81:b8:fb:
e3:21:23:a5:84:81:c5:7f:c5:92:94:97:88:b2:06:
39:62:3b:e4:04:49:80:11:c3:2e:23:1d:35:f6:03:
f9:ba:ea:95:1b:c3:d3:39:e1:0a:cb:89:99:3b:d6:
e5:5e:fd:ea:3b:2d:33:da:da:37:f1:74:0f:9a:6b:
db:8b:83:5c:c4:80:09:66:d4:b1:f9:7b:84:c7:36:
ac:92:99:35:d1:d1:af:90:6e:7a:d2:a2:a3:37:1e:
a0:17:a6:83:c7:5e:10:1e:37:48:d3:37:bc:8e:47:
ef:bf:d7:53:f2:7d:44:c8:b7:00:ad:d4:cc:49:14:
a1:db:c2:78:f9:fd:a2:c3:36:14:9d:1d:c7:b4:91:
0b:bb:e9:07:a1:f3:0f:a0:28:c5:1f:56:cf:b3:10:
8d:03:ff:6c:b2:bd:32:7e:c3:eb:db:fa:98:aa:9f:
b2:ae:64:47:ee:4f:13:47:6a:f8:8c:d7:69:c8:20:
b4:d8:64:e9:dc:55:ca:ed:02:98:f3:44:2c:75:6f:
28:c1:5a:15:00:a5:84:cd:fd:2c:c7:e2:5c:83:e8:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:E9:A9:5B:DA:9B:EB:7D:B1:F4:3D:D4:F8:4B:8A:D4:E2:90:93
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:75:b8:a9:6b:58:31:94:f7:45:2c:50:8f:9f:7f:78:df:5c:
5c:86:1c:d2:8b:d6:35:2d:b1:5a:fa:c1:61:c2:08:b2:4c:73:
74:bc:d3:e3:84:9b:80:42:d6:03:bc:0a:5b:87:7e:51:14:e4:
b5:2e:7c:f6:3a:eb:af:50:15:78:e0:02:c0:e8:67:55:25:a3:
2a:5f:bf:91:3c:c9:78:16:2e:19:cf:ac:fb:3f:79:e9:7e:2a:
75:98:1a:3d:b8:8e:d2:32:58:9a:6e:60:12:45:0a:e0:a8:01:
ae:89:21:9b:2d:5d:6c:51:06:6e:05:dc:f7:b8:d8:17:b0:f2:
bf:c5:ef:7b:b8:58:ba:e7:00:c9:17:b3:84:d9:4e:15:2d:bc:
c6:cb:1a:81:5e:b9:71:d8:39:31:82:c2:b7:46:82:ce:4f:a5:
d2:38:c6:dc:37:04:dc:66:fa:63:ea:46:7f:bf:39:cd:70:7e:
1f:52:e7:9d:de:29:ad:11:05:94:65:48:1b:35:a8:a5:db:86:
c2:b6:78:8f:f9:06:c3:be:5d:8c:4c:11:48:24:46:96:16:a9:
c9:12:91:11:6f:36:4a:b6:b8:a3:e8:7e:00:f3:5f:43:c4:e0:
0c:b3:34:f3:48:d6:61:ed:eb:50:fb:b1:2c:ad:cc:74:43:46:
c6:f9:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:53 2025 by rpki-client