Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier: BipP4f/BfqOGFP8yODrlb2wBU42GO7Iy+dfsPs+W4s8=
Subject key identifier: D2:0B:C4:E2:77:4A:0E:A7:25:22:EB:29:6C:4A:65:EA:89:76:2F:CB
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer: /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial: 0199239F26A892ED8D87B43040907202DEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number: 05CC
Signing time: Sun 07 Sep 2025 10:00:56 +0000
Manifest this update: Sun 07 Sep 2025 10:00:56 +0000
Manifest next update: Mon 08 Sep 2025 10:00:56 +0000
Files and hashes: 1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: Rhs5NC+Gkfy7Ruiu6felgYTGjRKsV4wDdRMU0Qwkc3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:26:a8:92:ed:8d:87:b4:30:40:90:72:02:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Validity
Not Before: Sep 7 10:00:56 2025 GMT
Not After : Sep 8 10:00:56 2025 GMT
Subject: CN=d20bc4e2774a0ea72522eb296c4a65ea89762fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:61:14:30:79:ee:f6:9d:9d:14:94:3c:d8:
6d:d0:c0:40:0c:a4:c5:55:b8:fd:a4:d6:8a:2b:0c:
b8:e3:a4:0d:0a:1e:e4:79:e3:01:77:32:5c:99:1d:
12:e4:88:46:14:2f:5c:f6:56:fc:69:61:f3:13:8d:
60:95:b1:d2:46:f3:d6:b1:73:88:e0:0c:c1:2c:33:
7c:47:10:2c:8b:b7:2a:22:ed:b3:cb:0d:2b:3f:1d:
f8:7e:7e:39:00:ba:ed:d2:dc:02:2e:10:36:bc:c4:
30:1f:39:4a:05:93:e9:c7:02:b3:7a:c1:d2:b0:7d:
44:6a:aa:9a:3d:8d:62:d2:8d:9e:0d:62:39:a2:32:
99:c4:cf:bc:b1:32:c7:3e:b2:db:70:22:07:9b:f8:
0b:24:9c:b9:f7:b0:84:a9:4e:c7:a4:de:42:d0:fc:
da:16:a5:8d:4d:ad:e1:25:46:81:fb:53:8b:98:fb:
91:b4:f0:55:38:64:5f:1f:f0:ad:2c:bc:9f:3c:01:
ac:e8:38:b5:3c:0b:9c:22:fb:dd:c8:1e:a1:55:dd:
01:6b:e2:60:eb:57:14:f2:f4:58:8b:1a:03:ff:99:
c8:02:6d:7c:16:62:8c:78:03:89:29:6f:c1:20:a1:
b2:29:aa:b6:7a:a7:9c:6f:d6:8d:5e:88:2b:2d:18:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:C4:E2:77:4A:0E:A7:25:22:EB:29:6C:4A:65:EA:89:76:2F:CB
X509v3 Authority Key Identifier:
keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:30:d2:76:b2:ee:4e:84:79:f9:41:30:96:e9:93:6c:68:6e:
93:c8:df:ac:72:8a:1a:f2:4d:7b:49:ef:c1:db:fb:24:14:27:
f9:b4:9f:3e:08:11:a9:ec:c0:bf:e3:94:e5:7c:f2:8f:44:ce:
66:25:9b:01:29:d6:4a:9d:1a:01:05:22:4e:20:0f:79:91:e2:
9a:73:2c:52:80:c3:46:15:94:a5:c5:5b:90:89:3d:76:bf:69:
11:80:e2:02:62:7d:6a:f2:2f:68:8e:cf:33:b1:85:4a:8b:8c:
ee:16:06:54:7c:b2:e0:cf:37:b0:57:70:f9:93:87:84:2a:06:
bd:90:98:79:0b:13:9d:81:0c:b9:bb:9b:ef:c4:4e:dc:21:08:
27:38:7a:e4:c9:9c:47:fe:64:b1:c9:13:8b:fa:a5:37:ad:0c:
2b:bc:f5:14:ca:8c:5b:d2:25:ab:f8:04:bd:12:14:8a:e1:23:
b4:19:6e:12:0a:54:43:41:23:6b:88:e1:87:96:60:22:ed:8b:
e4:2d:f6:70:81:e1:68:62:db:b0:f4:d9:8a:62:3a:8b:f8:c8:
fb:c6:4c:2e:75:b9:72:74:86:98:98:7c:89:7b:b9:7b:11:c8:
e4:b6:e9:ab:4c:28:7f:ab:fe:03:93:20:a3:43:39:1a:fb:b4:
09:d7:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:46 2025 by rpki-client