Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: 4mOhq8+4fNHyQd4FeTPICtgQe/sQc0rd2qVl5ExTHkU=
Subject key identifier: C3:92:A8:78:8F:B8:7B:C9:BB:14:AA:E6:6B:02:22:8D:71:47:2F:E0
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 0199233125A85BED74B7DFFDE94A7D89F106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: 35
Signing time: Sun 07 Sep 2025 08:00:47 +0000
Manifest this update: Sun 07 Sep 2025 08:00:47 +0000
Manifest next update: Mon 08 Sep 2025 08:00:47 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: 73ZKVgeFjn8EEZbwOJcm76HawESe8ft8Wn8vQtRGWJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:25:a8:5b:ed:74:b7:df:fd:e9:4a:7d:89:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: Sep 7 08:00:47 2025 GMT
Not After : Sep 8 08:00:47 2025 GMT
Subject: CN=c392a8788fb87bc9bb14aae66b02228d71472fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:57:37:c1:ef:f8:0e:24:f6:0b:e9:8e:9a:
84:84:e0:57:4b:60:fb:53:32:4e:e0:53:e0:8b:f1:
a1:f7:4a:00:9e:6e:7b:15:d6:3a:6a:e0:5b:b2:85:
f5:63:60:96:ae:14:10:22:62:a3:3c:50:9d:03:72:
36:2f:9f:16:76:8c:6d:20:fe:03:1f:08:09:fd:d2:
82:93:e0:3c:ef:ad:30:17:7e:98:7d:56:e1:25:85:
e1:b6:df:73:51:6a:55:05:73:b0:98:e4:05:8d:7f:
f1:f9:5e:08:90:01:4a:af:22:15:34:1a:7f:d6:ef:
30:67:2a:90:0f:fd:29:aa:69:dc:c1:25:cc:9f:84:
2d:dc:1d:ca:78:00:2a:43:0e:f5:2e:db:0c:0d:f8:
b0:b3:cc:cb:74:2f:d3:25:9b:c6:d1:2d:44:d3:8c:
ba:22:17:31:07:92:ba:67:f7:15:7d:8d:56:71:e5:
30:e0:a8:0b:b2:99:f7:9c:8f:c4:4c:a1:f3:9f:f4:
ec:be:ab:95:8b:64:18:48:77:92:fd:f6:e7:40:9f:
e4:04:75:eb:79:e9:91:68:e0:ed:a8:2f:fb:39:c6:
14:df:25:b9:2d:c1:56:be:1a:42:e3:a1:fe:84:54:
94:bd:29:ce:9d:be:b6:60:67:a6:48:0c:59:63:29:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:A8:78:8F:B8:7B:C9:BB:14:AA:E6:6B:02:22:8D:71:47:2F:E0
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1f:27:a3:e8:54:63:e3:a4:ce:ce:e2:53:28:1c:d2:20:4a:
ef:84:5b:fa:62:aa:82:db:1e:42:23:fe:01:13:9e:cb:83:6f:
46:57:cf:27:56:c4:95:c2:26:31:53:1b:ef:9f:c4:18:13:68:
3d:de:8f:92:42:ad:eb:9c:3f:80:8b:01:54:02:2c:a3:cf:24:
a3:76:f8:71:d0:54:0b:65:82:36:3b:85:61:4a:3e:07:dd:3c:
7f:3c:45:5b:70:0a:fe:fa:94:2d:6c:c8:ff:2a:ac:7a:36:76:
24:5c:8b:4e:05:df:a7:93:95:2e:6c:17:9e:c6:80:81:6a:a8:
95:86:a7:a0:49:70:e2:a2:e4:38:ed:2d:75:fd:97:29:02:6d:
6d:5e:ae:c1:56:1c:8f:05:d2:52:3e:e0:82:7a:cf:13:1b:70:
72:df:03:f4:4e:92:e3:e0:37:63:6b:90:e6:2b:22:d6:7e:f5:
75:41:75:12:b3:00:b8:c6:65:09:11:08:07:f9:08:c2:08:20:
f0:c5:16:0a:42:1c:3e:2e:7f:7f:ab:57:0d:89:0c:98:29:a9:
25:5c:2a:e9:ef:66:22:93:70:1d:48:77:59:63:86:5d:28:9d:
9a:10:33:65:93:f2:81:81:65:97:5e:b5:bf:3f:c0:87:a1:39:
1a:05:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:15 2025 by rpki-client