Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: 57QWoMN9Xb650bGjiTkFWXjV3pE3ErqapOUpLA5K1GQ=
Subject key identifier: 49:92:2C:15:F7:EF:A1:38:2D:A0:AC:83:1C:46:A5:4F:09:F5:C4:60
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 019921B1EAFF8B35EAFD095AA9CD26943617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 1300
Signing time: Sun 07 Sep 2025 01:02:11 +0000
Manifest this update: Sun 07 Sep 2025 01:02:11 +0000
Manifest next update: Mon 08 Sep 2025 01:02:11 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: g7+gQFUZbyoqifbs4LOL0F4PHBL5IyvN2IHbFiarrCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:ea:ff:8b:35:ea:fd:09:5a:a9:cd:26:94:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Sep 7 01:02:11 2025 GMT
Not After : Sep 8 01:02:11 2025 GMT
Subject: CN=49922c15f7efa1382da0ac831c46a54f09f5c460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:a4:50:49:42:6a:a9:6e:57:8c:f3:c4:46:
ce:94:b7:69:12:3c:c8:13:5e:db:b4:a1:7b:fa:25:
38:a2:3e:6d:cf:77:29:89:3b:93:7c:82:95:6a:21:
b2:01:aa:1c:37:46:21:61:5e:43:65:68:cc:7d:33:
c9:3e:66:c7:ed:88:8f:b6:30:cd:c0:b7:c5:a1:a1:
c9:e3:8c:76:81:ab:2a:b0:8f:c9:db:0e:cc:57:58:
9e:8d:86:64:5a:9b:5b:bd:3a:cc:c2:25:37:c0:27:
ca:f7:7a:92:a8:54:0b:3a:1b:d7:2e:a3:b3:90:dc:
02:1c:7a:c7:62:db:f9:6b:77:dc:e5:8c:77:35:fc:
bd:45:16:10:30:1b:a1:6c:89:f6:17:6c:62:ee:48:
29:31:ab:98:57:cb:9c:13:88:0f:d3:fc:20:4f:3b:
4b:0f:bf:57:81:46:9a:87:b0:36:87:64:51:3d:3a:
af:b8:74:45:af:e9:56:06:91:98:5a:6f:cc:20:db:
e5:6e:e7:ef:f1:07:92:70:eb:36:5b:d0:c9:6a:bd:
1b:03:6f:a5:6f:6c:35:aa:c3:37:c4:74:2c:8c:58:
b0:cf:b5:8b:0e:c2:78:76:65:bb:76:c5:4f:2b:13:
5a:3b:53:4a:82:d5:1d:ed:7c:2a:20:88:d8:ad:cc:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:2C:15:F7:EF:A1:38:2D:A0:AC:83:1C:46:A5:4F:09:F5:C4:60
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c1:5a:52:ce:cb:85:33:c4:60:eb:8d:e4:a8:ac:49:dd:a3:
05:b9:61:a8:03:df:7a:fd:05:84:7f:e8:c8:b4:30:60:23:34:
69:de:91:de:fe:a8:c6:01:06:dd:c9:ab:d6:5b:70:c4:45:b6:
72:b4:39:e0:8e:22:3a:06:6a:ee:32:d0:bd:99:b4:2d:64:59:
25:4b:dd:7d:1a:b8:3c:92:84:eb:b7:0b:a5:42:24:0b:65:6c:
58:5b:f0:2c:23:c0:d6:36:57:a9:04:6a:22:0b:3d:d4:b0:57:
16:74:2f:6f:2e:67:ff:5f:00:18:a9:6f:a0:78:84:11:6c:6c:
1c:a7:e1:eb:cb:5d:c1:ee:fc:ac:a4:d7:22:2c:4b:b9:0a:ec:
98:67:a7:9d:95:90:73:74:bd:2b:ec:ce:84:83:c5:3a:ec:b0:
da:79:cc:83:67:52:c1:56:0a:4f:20:34:b9:84:77:fa:6c:ab:
e2:e0:d3:60:5d:0d:4c:20:18:0b:e4:d6:ec:7f:b5:7a:cd:72:
05:be:97:c4:a7:3b:ff:3e:84:29:92:40:36:e5:32:d2:56:14:
1f:fe:93:58:ba:40:56:6a:5f:a3:41:a5:a8:3e:05:99:2b:5b:
49:6c:9a:b1:69:c8:60:73:b5:1b:c9:01:47:c9:36:bd:2a:f1:
e6:9f:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client