Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: BNku9WRJby8FrYM+0AhY497EX4yFo4YWvmWogyG7Tgk=
Subject key identifier: AD:F6:4D:CA:BB:23:DD:DA:08:C6:65:1F:5B:EC:BF:5B:B7:B4:44:45
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019923A06D7F3001CA5B465154357CD496DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:02:20 +0000
Manifest this update: Sun 07 Sep 2025 10:02:20 +0000
Manifest next update: Mon 08 Sep 2025 10:02:20 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: ALLxCa5I4waWeOIwMrKSYE7LQCQsQnQ0dNMLBq2ukBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6d:7f:30:01:ca:5b:46:51:54:35:7c:d4:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Sep 7 10:02:20 2025 GMT
Not After : Sep 8 10:02:20 2025 GMT
Subject: CN=adf64dcabb23ddda08c6651f5becbf5bb7b44445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:5e:32:f9:33:0c:3d:15:c5:e6:bb:4b:c0:
4e:24:73:99:46:7b:ed:44:c5:e5:fd:96:e4:48:9b:
1d:be:0b:13:49:fd:d4:ff:5a:9d:4a:6b:d8:53:f5:
5b:5b:3b:40:ff:d6:bd:54:16:e6:83:02:d4:68:2d:
af:43:13:0d:ed:59:90:e4:e7:18:10:62:bd:9d:f2:
cd:94:43:58:53:ee:d0:3c:2c:23:1e:0d:5f:1d:9c:
81:eb:58:81:de:0b:8c:59:4a:53:70:be:26:ee:a0:
21:95:e2:43:26:51:83:2d:79:9a:25:ac:bd:95:6c:
a5:03:8f:e5:f0:b1:02:c9:17:d8:b1:bd:28:cc:f1:
82:37:9e:7d:da:5f:a1:02:3e:1e:b5:5b:85:cd:5a:
69:3c:47:8c:3c:5d:d8:1b:e9:54:80:8c:39:16:85:
e6:d5:51:88:9b:c7:c3:1f:5a:44:d2:f7:61:27:89:
60:cc:e1:c3:fb:af:eb:10:ca:f0:e6:2d:f0:63:a4:
d0:f9:8c:d1:20:38:51:0b:fb:63:c3:21:5e:09:8f:
3c:16:22:92:2b:11:0b:d6:42:0a:59:ad:02:f9:ab:
e0:a8:89:c9:6d:af:93:a3:4b:5c:bd:14:e7:a3:ae:
d1:34:e8:b0:b7:0d:fa:0e:77:f7:d2:65:28:d6:e9:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:4D:CA:BB:23:DD:DA:08:C6:65:1F:5B:EC:BF:5B:B7:B4:44:45
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:9b:54:1e:6d:d8:3d:d6:c8:47:3e:d6:69:c1:94:a2:f7:
68:85:ba:8e:e0:31:49:e3:fc:7d:b5:38:e9:36:de:35:21:21:
e3:3e:39:d1:b6:48:a6:98:c8:69:06:cd:76:cf:b3:44:95:93:
86:2a:7c:de:16:2b:8a:57:22:2d:17:7e:0e:68:71:72:53:11:
11:32:8c:07:15:64:24:19:68:8f:63:62:4c:05:46:11:fd:d2:
f5:40:3c:56:91:30:d6:76:26:66:17:77:a3:7d:26:ad:17:f2:
57:37:2f:26:9e:f4:79:f8:f1:ef:00:11:40:ff:49:fb:fb:ef:
be:9d:54:a5:02:b3:9a:7f:32:9e:1a:e2:1c:a6:3e:f5:70:d3:
b5:14:08:c3:7e:02:84:c4:b1:15:01:32:75:4f:6f:49:24:22:
00:d3:53:13:73:40:e7:47:7e:16:6e:96:dd:ab:6c:f0:b1:5b:
45:aa:50:e4:52:2d:5c:c8:5d:d3:20:60:51:37:6c:5b:54:3f:
07:b6:16:86:64:1f:41:37:ba:77:95:56:d0:24:67:e3:e8:3c:
33:86:86:c9:97:08:f0:02:67:c2:40:39:b0:83:31:08:d5:cf:
7e:ab:99:f1:d6:99:49:0c:11:7f:5c:90:04:5a:d3:9d:cd:99:
b3:ff:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:11:55 2025 by rpki-client