Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: 7Fl7tx97h1tkS2SEcl3tWGdFJ1LYSfKmg3ey0zRFwk4=
Subject key identifier: EE:82:BA:75:43:9E:8E:2A:77:7B:8A:F3:D9:41:11:B8:4C:27:31:8A
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 0199221EEE16ED9726C532D3644B2B366915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 03:01:16 +0000
Manifest this update: Sun 07 Sep 2025 03:01:16 +0000
Manifest next update: Mon 08 Sep 2025 03:01:16 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: 4V9HVdmP2n6g80pLs52sDhKk3hgeStwNNixg8hiyXpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ee:16:ed:97:26:c5:32:d3:64:4b:2b:36:69:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Sep 7 03:01:16 2025 GMT
Not After : Sep 8 03:01:16 2025 GMT
Subject: CN=ee82ba75439e8e2a777b8af3d94111b84c27318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:3a:d3:c6:72:a2:04:83:6b:8a:0c:59:3d:
c8:16:87:1e:ae:53:7a:6c:af:b1:bd:c2:62:b7:da:
a7:dd:34:76:d4:5f:0e:0d:ed:ac:bf:e2:c3:a1:27:
8f:8c:ed:69:54:87:db:2d:f6:ec:f2:82:13:16:d7:
e6:e7:4b:a9:a6:2e:5e:aa:1f:e9:ea:2f:26:22:58:
4d:2b:f2:8e:44:ed:a3:8f:71:9d:e0:8c:b0:ad:6a:
d8:d1:e1:50:50:b1:35:86:e9:d6:46:4d:76:eb:53:
bb:c2:72:55:e6:99:97:f0:57:a4:6a:67:3b:9e:ea:
a7:b0:2a:8f:d9:aa:1c:ab:a9:31:e3:72:4e:09:e9:
5c:a9:d9:d3:eb:3a:18:c9:ad:e2:1a:b1:b6:a6:e2:
f5:59:43:4e:8a:79:a4:83:9f:70:0f:5a:a2:b8:7c:
35:0a:ba:86:65:b0:4f:d5:89:a3:59:bc:94:e8:a0:
c0:0a:a8:95:8b:1e:f9:31:dc:64:c3:cc:6b:5d:ee:
43:a6:14:80:fd:05:d7:f8:d0:2f:1a:2d:62:e9:52:
4e:11:c3:69:8e:37:6b:d8:b9:6b:3f:88:30:c8:9f:
d5:20:a6:c9:e3:93:62:0f:e4:50:06:6c:f4:9b:21:
d3:69:7d:d5:50:38:f5:6d:b9:d4:f8:d0:0a:ae:ad:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:BA:75:43:9E:8E:2A:77:7B:8A:F3:D9:41:11:B8:4C:27:31:8A
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:62:e6:1c:cc:1e:94:cf:68:d6:9a:e0:aa:fe:36:44:4f:
c5:10:ff:8d:52:e1:a8:e2:da:e0:6b:6b:18:99:03:b9:e5:b1:
cc:db:18:bc:94:8e:6b:e0:e8:08:51:bc:67:41:c8:a7:7f:90:
24:80:07:d6:25:7c:ad:11:c9:79:0d:b1:cb:10:5f:f1:9d:cd:
97:29:6b:ed:05:89:61:f8:d4:dd:56:c9:c5:db:18:50:6f:57:
33:01:dd:26:d3:35:06:ba:e4:0a:50:d5:3d:5d:bd:29:02:5e:
7d:2b:35:2a:f9:d7:00:20:5a:a4:21:55:c3:89:b9:8d:eb:4e:
25:30:ae:ff:b3:4d:7f:2e:4a:0a:aa:41:cf:91:27:ad:e3:6c:
97:f0:bb:ca:02:92:4e:fb:eb:78:1d:ad:4b:ba:c7:c4:ad:39:
46:89:9a:c5:fb:15:60:49:6e:c1:b9:a2:99:ed:53:0d:9e:ac:
fd:34:dc:e9:c0:c5:1f:3a:0a:00:71:64:34:c0:5a:51:62:60:
bc:5e:47:b6:2a:08:c0:c8:ac:3b:2c:44:4e:b5:34:3b:ef:31:
13:82:31:64:2a:21:18:10:9c:c8:cf:89:72:f4:ed:c0:4a:c2:
f8:51:cb:cd:65:6f:1c:ee:99:7d:aa:bc:0a:13:9b:5a:c7:93:
b5:9c:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:19 2025 by rpki-client