Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: GTcJyGw4MEKmM/LNi6WcxXDPUkrgGdrW/svrvB8rHHQ=
Subject key identifier: 7A:D3:F7:59:79:A5:21:C0:2E:86:50:86:2B:3D:E2:7C:54:94:5D:66
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019A1EAE3F149663E17AC5AC155B0F63457E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 1681
Signing time: Sun 26 Oct 2025 04:02:07 +0000
Manifest this update: Sun 26 Oct 2025 04:02:07 +0000
Manifest next update: Mon 27 Oct 2025 04:02:07 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: bBYhhoPHVhcqEnq4zAA+Xu+z1ChF1SXx7FlMXqqx7P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ae:3f:14:96:63:e1:7a:c5:ac:15:5b:0f:63:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Oct 26 04:02:07 2025 GMT
Not After : Oct 27 04:02:07 2025 GMT
Subject: CN=7ad3f75979a521c02e8650862b3de27c54945d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:cb:d4:d3:bc:35:ac:9a:bc:53:f7:fd:6c:
a7:c6:17:5a:a3:09:16:2e:07:9f:04:6d:7f:4d:2f:
09:26:90:97:3b:7c:38:60:1e:59:10:12:6d:c5:aa:
5e:38:a0:c0:0b:b4:00:00:55:23:ba:b8:0b:b1:55:
44:03:f2:7d:ac:d2:29:94:b6:51:a3:d6:ab:5f:36:
3e:a6:91:ae:51:9c:0d:3f:74:24:bb:82:fc:48:08:
c5:95:3c:79:a6:e5:6b:56:52:a0:3e:42:9a:57:c2:
b2:d3:1d:04:73:cf:0a:4b:8d:d3:86:e2:dc:c2:02:
01:bb:7f:b0:61:3c:f0:cc:59:04:a3:5b:44:80:dd:
c5:67:8c:18:67:cc:e5:ee:aa:50:3e:7c:7a:79:a5:
26:be:20:5e:9d:0d:77:48:ed:4d:2b:e0:7c:80:49:
38:35:0d:dc:d4:89:da:e0:1a:9c:c7:39:68:20:66:
cf:3b:89:0e:35:22:ca:1b:72:da:67:7e:6f:f6:47:
4e:4f:54:df:a2:de:12:5b:b5:05:6a:5f:25:70:67:
d3:41:4c:c5:22:cf:c9:34:c0:72:ed:16:58:3d:50:
ec:f5:5e:0f:2e:c2:bd:be:b9:00:ed:80:b3:eb:f9:
3e:f2:c1:8b:8b:d8:63:5d:cb:02:2d:76:b8:53:42:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:F7:59:79:A5:21:C0:2E:86:50:86:2B:3D:E2:7C:54:94:5D:66
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:50:3c:79:74:af:89:6c:f7:e6:0f:7d:cb:03:ce:e2:2c:48:
cd:53:68:c2:7d:b6:c5:4e:33:81:2c:d6:fc:d9:0a:2b:e5:06:
96:fe:f3:6b:1a:29:f7:dd:1b:74:f5:6a:d3:3d:74:b3:46:3f:
ad:9f:2d:3e:ee:91:4e:75:ab:ff:dc:27:e6:7f:1f:87:0f:6f:
bd:f8:7a:74:0f:8b:65:6e:48:09:1a:48:0a:4f:1f:f1:be:85:
5d:12:fa:9d:e2:0c:3b:2a:8e:50:d2:38:df:a8:48:21:74:8d:
af:18:38:34:2b:a3:ef:f6:75:0b:5d:cf:78:32:99:34:db:1e:
b0:12:ac:87:50:18:f4:0d:1d:83:82:e5:1f:06:79:d1:b2:f4:
b6:d6:6a:68:39:f3:9f:12:e0:c1:18:d2:36:95:64:3b:39:e2:
e6:67:08:9c:47:c7:a6:81:e1:7b:9d:24:58:7e:f0:4c:1e:2c:
a2:b3:a4:c3:99:89:e7:86:de:32:29:d5:ff:4b:ea:f3:d2:56:
c6:04:1c:c8:06:83:23:e8:e7:68:8d:52:97:c1:51:78:95:a2:
f4:71:ce:51:83:1c:35:e9:70:bc:cb:62:b0:c6:72:45:58:73:
b9:7f:92:07:30:93:bd:46:e6:6b:e3:c7:62:30:da:35:55:e4:
b6:32:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:02 2025 by rpki-client