Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: uARykJ+TVAIzN/6SlvC4JZX1N8H5CnwJR2YheFzeNpM=
Subject key identifier: E4:7D:64:BF:D9:A1:79:48:98:D3:D7:9D:53:24:A9:E5:49:E4:19:04
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0199239FDA72C527372651DDA7D4F1F18396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0EEF
Signing time: Sun 07 Sep 2025 10:01:42 +0000
Manifest this update: Sun 07 Sep 2025 10:01:42 +0000
Manifest next update: Mon 08 Sep 2025 10:01:42 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: VlGLN7i+T9/7V4FUwCzs1l9dbFy9CIGmDVR4mT4wE4c=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:da:72:c5:27:37:26:51:dd:a7:d4:f1:f1:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Sep 7 10:01:42 2025 GMT
Not After : Sep 8 10:01:42 2025 GMT
Subject: CN=e47d64bfd9a1794898d3d79d5324a9e549e41904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:ed:53:d9:20:43:16:8d:71:fe:32:0d:d0:
8c:c4:8d:41:35:c9:09:e7:6f:bb:f0:d2:a1:3c:29:
b2:d9:e1:e2:b0:26:2e:9c:b5:4b:64:b1:d0:56:b7:
70:a7:ca:71:df:04:ae:9f:6b:b7:b2:5e:07:c7:46:
9d:4c:39:33:eb:6d:c7:48:73:ec:4b:67:a9:b3:78:
34:9e:21:dc:5b:21:53:50:66:c7:9a:ba:ab:de:c1:
91:eb:9d:99:ce:c6:1a:cf:76:52:40:16:cd:87:3a:
c7:fe:27:1a:68:56:9c:1a:c5:7e:80:10:93:38:2f:
92:40:a9:f6:ef:88:95:d8:2c:90:61:06:53:e2:ab:
f7:0b:9c:02:7a:ef:ed:59:95:4c:16:e2:c8:10:0f:
b8:ad:ea:6a:3a:e2:8b:7b:fa:e3:d3:09:e9:1f:92:
a7:cd:43:a4:c8:0b:67:6e:32:90:63:94:f9:a3:c7:
b0:27:3e:6f:fd:d6:72:82:36:c8:10:f3:ed:1a:4b:
02:57:a2:f9:33:bd:24:7b:74:f1:bc:f6:08:d1:dd:
db:2c:b5:0d:a7:e0:3f:5c:f1:aa:6a:da:24:a4:bb:
00:9e:87:66:3c:aa:cd:42:dc:fb:4b:0d:42:f2:6d:
37:1e:d7:5e:34:47:65:8c:fe:15:a6:e6:59:9a:8f:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:64:BF:D9:A1:79:48:98:D3:D7:9D:53:24:A9:E5:49:E4:19:04
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ec:11:65:e3:e6:6e:c4:de:9b:15:b1:9e:9e:b0:b6:63:5e:
43:4b:b0:34:2f:56:e3:03:34:9f:84:80:e5:b1:47:19:3c:b6:
86:30:3a:a9:d8:d1:4d:20:56:a1:bf:66:e0:fb:04:d9:ba:21:
ac:fe:80:97:f3:71:a0:2e:cf:52:62:79:48:92:eb:db:d3:25:
81:39:e6:ab:81:69:c1:64:c2:69:e8:26:f5:0f:bb:85:95:3d:
94:2c:8e:fc:76:15:a9:71:56:c7:c5:ee:6b:ea:98:fd:d2:57:
67:06:ea:65:5a:90:b2:95:f7:4d:e0:7b:d1:27:d2:8a:44:d0:
48:fb:88:bd:d8:a3:c8:dd:86:fc:81:b0:67:e7:fe:76:cb:af:
ea:de:f5:91:7f:76:c2:37:08:0e:8e:48:36:bc:b8:d8:92:d8:
70:46:64:1d:1a:f5:22:22:63:cf:cd:1e:14:de:98:eb:e5:5d:
a8:92:c2:e8:8f:63:0e:88:de:76:7f:1c:d9:ac:41:69:bf:30:
d8:0c:94:d4:31:91:b7:9f:3a:6c:be:50:cb:ec:cf:b9:39:ee:
e4:3b:9c:43:8c:d6:95:3a:0b:a9:b7:60:fd:f8:20:75:28:fe:
dd:35:84:84:5b:e3:20:0e:07:7e:73:44:b2:ff:06:a7:39:b0:
52:25:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:16 2025 by rpki-client