Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: Oa/MNt612DKANItkFZuykkQTELjyrBLEtDBvTHl4wJU=
Subject key identifier: 17:37:11:29:92:2F:9A:47:B0:24:13:77:5B:BB:FC:8A:B4:8D:59:71
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 0199239FAEAD970FAAC4D5930A8A12FB9ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 1096
Signing time: Sun 07 Sep 2025 10:01:31 +0000
Manifest this update: Sun 07 Sep 2025 10:01:31 +0000
Manifest next update: Mon 08 Sep 2025 10:01:31 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: p5VuMY1zvWUJ4Hx3O4/Fpz5NusfEslRByDDqrkqIA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ae:ad:97:0f:aa:c4:d5:93:0a:8a:12:fb:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Sep 7 10:01:31 2025 GMT
Not After : Sep 8 10:01:31 2025 GMT
Subject: CN=17371129922f9a47b02413775bbbfc8ab48d5971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:2e:16:7e:7e:de:99:59:f5:e1:2f:a7:0d:
55:71:ca:62:47:55:b6:e3:33:3f:08:a9:ce:46:c0:
15:89:0d:82:26:fc:e1:53:8b:b8:0a:d9:60:d9:d0:
57:05:cc:c9:31:c8:1d:ff:91:2b:4b:ba:0d:02:41:
9c:ed:8b:6f:02:75:6b:fb:83:94:5d:bb:24:2a:58:
24:4a:2f:42:22:7f:fb:51:aa:73:39:32:69:e3:5e:
ea:be:69:9c:40:50:47:7d:eb:e2:ba:16:58:78:f4:
00:19:f8:6f:c9:16:c5:ea:49:f0:52:01:48:c6:bc:
2a:30:6f:17:5f:5c:ec:b7:1e:42:1a:4b:d9:76:e9:
50:27:52:e7:fb:76:86:43:59:5d:db:da:c7:ad:09:
1e:38:2f:6e:6f:e8:f9:44:df:9b:f4:2d:19:e4:d2:
bd:7b:61:77:2b:cc:e5:57:ef:a4:80:1d:bb:63:e4:
5a:0a:07:cd:9b:c9:88:58:51:67:e4:ff:84:b0:0f:
49:e6:a2:66:58:bf:47:c9:16:e0:8c:9f:28:58:39:
eb:5e:0c:22:6d:c3:44:9b:a5:70:2a:99:af:69:bb:
b2:c1:25:d5:e6:87:ed:37:36:e9:65:3b:f3:b2:69:
03:1b:46:d6:02:07:78:a3:ff:fa:fe:bf:9f:b7:d7:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:11:29:92:2F:9A:47:B0:24:13:77:5B:BB:FC:8A:B4:8D:59:71
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:6f:29:e8:a9:b6:2e:06:a6:35:96:4c:6e:d3:8b:fd:b3:
04:0b:a1:48:db:14:c7:c7:98:cc:73:d7:81:ad:1f:36:a2:42:
8a:bb:c9:5e:3a:a8:6d:d2:94:67:9a:ba:23:33:af:32:17:e0:
7c:aa:3c:34:6d:d9:9b:65:c8:77:39:28:bd:9a:ba:3f:cf:a9:
d5:ff:63:e2:6e:86:02:eb:c8:3e:00:d8:cc:0e:4a:52:41:74:
1f:c3:46:e9:f5:50:f1:05:f5:df:e1:ec:c0:79:f9:f2:44:c5:
1f:17:78:8d:60:00:ae:33:ce:c7:a1:9d:89:81:0e:5e:57:5e:
e9:1b:ff:dd:54:ca:a7:14:db:67:b1:0d:81:a6:0a:d0:41:6c:
eb:5c:a0:c9:ba:61:b6:73:e3:bf:27:40:88:0f:b7:2f:71:3f:
2d:e6:a0:f5:e0:94:bd:ab:0b:f5:14:a4:89:86:30:97:cf:c2:
2d:7a:43:29:02:b9:ad:21:2f:50:ba:1e:3d:0f:92:d0:e9:f6:
2b:72:b2:d9:a9:d1:fb:23:a5:99:3e:cb:19:70:1c:de:03:91:
02:c9:0b:c4:92:39:af:95:ad:b0:f1:1a:cc:1a:46:99:fe:5c:
97:a5:ae:fc:94:82:23:3c:0c:66:3e:68:b0:d6:b8:c7:4d:99:
d0:df:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:20 2025 by rpki-client