
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
File: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft (raw, json)
Hash identifier: Dq2A2SLhh0A7j/HZhUiMghrzSj9fIobKySrqkd4JaEs=
Subject key identifier: 51:A0:47:FF:25:1E:E5:77:B4:CA:93:51:3C:9F:57:FD:6A:A5:89:D6
Authority key identifier: D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51
Certificate issuer: /CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51
Certificate serial: 019922C36BD096FCA209A43E75058492F69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
Manifest number: 010E
Signing time: Sun 07 Sep 2025 06:00:56 +0000
Manifest this update: Sun 07 Sep 2025 06:00:56 +0000
Manifest next update: Mon 08 Sep 2025 06:00:56 +0000
Files and hashes: 1: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl (hash: YLpk/YjPwK5ppDMXJxfKLxEeId3S4n0fDoiUitbwN5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6b:d0:96:fc:a2:09:a4:3e:75:05:84:92:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51
Validity
Not Before: Sep 7 06:00:56 2025 GMT
Not After : Sep 8 06:00:56 2025 GMT
Subject: CN=51a047ff251ee577b4ca93513c9f57fd6aa589d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:51:62:05:59:74:6b:b9:06:0c:bd:8b:a8:
94:3d:cf:da:6a:21:3b:2d:a8:83:55:2e:62:37:1f:
4d:61:3b:a7:13:37:88:ed:d9:57:5c:d4:d0:91:38:
20:5d:79:e5:f7:03:18:f0:54:90:04:2b:a9:32:d3:
32:71:dd:3e:9b:59:dd:ee:bb:8c:5f:2b:d9:cd:4a:
ee:d9:96:46:e7:8c:61:91:66:a3:45:97:15:5d:5c:
4d:25:16:3a:f3:ff:4b:90:0d:dc:71:fd:2a:4d:99:
37:73:c6:48:ee:36:de:98:dc:6f:a3:a6:2d:2b:db:
51:52:6e:13:9a:e7:f1:f6:aa:5b:72:95:2a:7d:49:
47:43:59:b9:21:a7:b5:ff:0f:74:dc:98:b8:6e:95:
23:13:f3:81:7b:dd:37:52:06:b3:65:e1:e3:74:ee:
4c:37:e4:44:3b:24:fd:02:00:7f:df:79:09:b4:d0:
64:e1:20:be:c0:ac:e9:18:99:1e:c4:a9:d3:00:e5:
06:c8:a0:8a:9b:1a:d9:41:d0:87:8f:a0:6c:9c:13:
2a:4a:c6:2e:f1:e7:ed:62:5c:b5:07:eb:89:bb:a9:
46:7f:7d:46:03:b7:98:0a:31:a5:03:c8:83:5a:28:
4b:4c:f4:a3:1c:80:f7:5f:16:75:03:2b:d3:38:b2:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:47:FF:25:1E:E5:77:B4:CA:93:51:3C:9F:57:FD:6A:A5:89:D6
X509v3 Authority Key Identifier:
keyid:D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:7d:87:0b:1c:1d:35:41:18:1b:51:17:5d:b4:71:b2:e3:
00:5a:8f:62:ef:c1:d4:e6:e7:73:cb:65:e6:2d:6a:ef:4d:3b:
d9:4f:d2:a5:e8:b7:a9:70:26:aa:ac:fe:68:d2:87:30:1e:f1:
12:48:90:22:6f:d1:aa:7c:04:01:6e:04:df:68:24:65:d1:65:
38:f4:4b:da:b6:6b:a8:45:c0:39:9c:f4:42:86:22:4e:e9:e8:
b6:26:87:61:bb:3f:2b:62:3e:a3:ce:78:67:ed:71:4e:a3:b0:
ea:82:5e:28:e2:5a:6b:89:37:e2:ac:a4:da:93:65:61:f2:fd:
c2:37:3a:ec:a3:e9:53:fd:60:79:c3:b9:7c:9a:72:07:73:e5:
44:8f:60:35:27:b2:2a:98:5a:56:79:6f:73:33:f1:06:02:b1:
60:f2:51:52:91:f9:b2:be:4f:c3:7c:47:fb:bb:12:80:a8:e6:
4a:ca:c0:70:9d:5d:9a:b4:c4:7b:21:08:ad:6e:e9:03:e4:78:
20:b2:f4:43:44:d0:99:7f:ce:08:15:ac:14:26:48:53:ea:ee:
a4:a7:30:16:5b:e1:74:07:ca:19:44:ed:0b:f7:59:a6:0f:3b:
13:1a:66:b6:87:a9:39:f1:ec:bb:66:57:f6:b1:cf:82:52:05:
fc:39:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:17 2025 by rpki-client