Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: U08HSD+VVHLJ120HbICrlwZ8QsOucRyH3tJE/8hr8ww=
Subject key identifier: 7E:57:6A:BC:23:0F:82:ED:75:7C:93:06:2A:34:CB:B2:D2:17:7C:16
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 0199239FFFFBF3EA69AE50508A2F085C6093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:01:52 +0000
Manifest this update: Sun 07 Sep 2025 10:01:52 +0000
Manifest next update: Mon 08 Sep 2025 10:01:52 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: dzXxNRRik+oejBBGGL55eOr+RlEfdxwJb4hbMgKHCyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ff:fb:f3:ea:69:ae:50:50:8a:2f:08:5c:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Sep 7 10:01:52 2025 GMT
Not After : Sep 8 10:01:52 2025 GMT
Subject: CN=7e576abc230f82ed757c93062a34cbb2d2177c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:75:74:d1:73:18:dc:fc:71:1f:b3:41:11:
02:07:5f:e5:15:1a:fe:c7:2a:71:4d:d1:d8:a7:41:
20:57:28:65:b0:51:a2:68:c1:69:54:0d:ee:bf:1c:
10:bd:7a:4d:0c:1a:69:32:da:be:78:62:69:98:2a:
29:55:d8:5f:e7:87:db:88:43:a2:72:53:b0:fd:8a:
a1:c0:ae:ea:b4:e8:42:70:84:cd:15:25:79:ca:91:
6e:af:b3:89:c4:02:cf:a8:35:fb:52:b8:11:3d:45:
15:a0:f3:0d:47:84:c1:09:c8:f1:89:86:69:f1:4e:
ec:66:8d:f8:03:a8:ff:ff:d4:91:ab:32:37:78:57:
de:b3:fd:e1:dc:f6:fe:b6:b8:d0:5e:2e:48:8f:fb:
a1:bc:d0:1b:14:27:f4:db:73:3b:03:e5:1b:71:6b:
9a:65:3e:34:d2:bb:a0:2f:56:2e:77:11:77:8f:04:
22:52:84:ad:34:f8:7e:53:26:1a:33:ca:43:48:1e:
a3:ef:dc:ae:70:a6:f0:8f:ac:de:94:d4:c0:e3:37:
e8:6c:29:5b:62:13:4b:d9:b7:4d:ac:a1:45:e9:ca:
0f:03:ab:a1:cf:9e:6f:5c:25:f5:f5:41:5f:85:b3:
46:58:ab:48:4f:03:d5:1e:82:5e:1e:9b:b2:56:45:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:6A:BC:23:0F:82:ED:75:7C:93:06:2A:34:CB:B2:D2:17:7C:16
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:69:ff:e7:95:a9:ae:a1:a3:5c:82:ac:37:33:d8:09:5d:62:
81:1f:6e:cc:88:d7:fb:cb:00:7d:4c:07:2b:5b:fe:b7:26:94:
80:a1:36:ce:68:52:47:c3:4c:ce:b8:3b:48:24:56:b5:5b:bc:
d7:fa:6e:42:72:dd:94:2f:6a:ff:c5:b8:04:d9:e1:6f:95:8b:
58:e8:61:4d:dd:b1:d3:ca:5e:c9:45:0b:9d:e5:ba:5b:3d:f3:
4b:50:82:7b:d6:33:2b:6a:ed:f0:ea:d1:c1:40:05:2c:c7:45:
98:e7:cf:d3:c6:7c:4a:3d:fc:58:d8:6c:c2:cf:74:72:a9:7d:
bc:71:fb:1a:dc:f6:1d:f1:db:76:d2:90:b0:ed:31:bd:d7:1b:
18:31:65:e3:a6:94:a5:c6:b9:35:59:f6:5c:a4:f6:61:6b:e9:
4c:92:ff:2c:a7:e6:d8:30:23:ad:95:e7:42:38:6c:21:bb:5a:
7d:b1:5f:34:3c:46:29:ad:49:8d:6d:61:b3:5b:be:c2:a5:16:
41:92:f0:30:c1:94:59:43:19:77:0f:51:f5:55:ee:0c:b2:3c:
9d:dd:13:72:0b:53:6b:68:ef:c2:02:d7:38:07:6f:59:c3:b3:
53:33:5d:9c:ed:de:0c:9e:39:1f:4d:20:84:e2:3e:80:53:a4:
84:d6:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:35 2025 by rpki-client