Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: 5fBQ9N4QMI8XcOzXWoU9EiKBppqTA87E2SV09qOXqzw=
Subject key identifier: F5:3A:8E:9A:BB:4C:0A:FF:11:36:F6:9D:89:0C:10:3A:3B:6A:9A:0A
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 019921B28A5F92D624A119BFB80B9C6FE83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 042B
Signing time: Sun 07 Sep 2025 01:02:52 +0000
Manifest this update: Sun 07 Sep 2025 01:02:52 +0000
Manifest next update: Mon 08 Sep 2025 01:02:52 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: dXV0rxJvtNfFGqvK/GBlV9G9ST3CmQJjx+JVeDa2Fuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:8a:5f:92:d6:24:a1:19:bf:b8:0b:9c:6f:e8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Sep 7 01:02:52 2025 GMT
Not After : Sep 8 01:02:52 2025 GMT
Subject: CN=f53a8e9abb4c0aff1136f69d890c103a3b6a9a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:92:28:16:5a:27:76:25:76:82:0d:b0:20:
4a:85:22:6e:3d:61:92:00:6c:6f:cf:98:fb:9f:7b:
af:6f:49:1e:10:ec:47:12:a0:ed:89:be:e3:c3:3f:
79:d3:1a:99:15:25:72:8b:3c:e9:68:31:74:fb:51:
19:4d:99:b3:78:20:dd:cb:58:24:49:b2:0d:eb:d3:
86:81:a1:f8:f3:dc:2d:3f:0c:01:19:b9:39:f9:79:
73:f2:cf:95:ff:6a:54:92:c7:c1:d6:0b:0f:95:63:
8c:f0:d0:aa:2b:af:fb:3f:f8:1d:9e:4c:62:2d:2f:
8e:a7:28:cd:f1:be:47:f4:ff:a9:7a:e0:78:56:ab:
5e:c5:f8:2a:52:50:7d:f1:2f:23:27:ba:b4:7d:fc:
f6:32:55:ce:bf:5e:5c:85:22:5e:79:e8:65:53:94:
f1:d8:06:ef:db:29:c7:dd:0a:fb:0d:81:ad:48:62:
3b:8c:f9:eb:78:47:da:a3:57:6d:98:9d:f7:52:b4:
01:56:fd:08:53:c5:7b:26:99:0e:fb:60:74:f4:3f:
47:29:de:9f:e3:b3:8b:b1:a8:36:6b:d3:67:93:e2:
55:65:9b:5b:6d:c0:1f:bc:f0:84:a0:d6:6c:48:51:
01:b3:b1:c2:b0:80:47:2d:1d:f9:b1:9d:9a:d2:85:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:8E:9A:BB:4C:0A:FF:11:36:F6:9D:89:0C:10:3A:3B:6A:9A:0A
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:27:e6:da:0d:8b:e9:2b:08:cd:56:09:5e:07:6b:ab:74:ac:
ef:6c:03:ac:cf:36:0a:72:5c:95:2d:3d:ae:b2:30:29:9c:66:
05:97:ed:59:49:63:82:06:25:13:71:27:27:58:37:2b:a8:24:
8c:da:07:2b:55:96:dc:24:dc:b2:80:a7:89:0d:5d:47:22:e3:
32:33:db:b7:8f:15:de:1c:a4:ac:4e:5a:4a:d6:10:1b:3a:2a:
bf:be:ce:1e:ea:69:6a:b3:36:c1:7d:23:74:a2:1f:32:1c:62:
fd:de:12:d1:81:5a:5a:1d:cd:39:d6:96:ac:d0:38:eb:0b:c3:
8d:80:cb:dd:f3:22:15:22:82:e7:36:ac:22:c2:2c:7e:fd:3e:
5c:02:df:02:47:db:62:8f:54:87:ff:91:52:29:44:df:fa:48:
02:c8:03:f9:c2:c6:87:83:4a:dd:a5:a9:5e:f1:c2:55:5f:3c:
c5:92:b8:50:e5:71:5a:7a:45:77:85:37:d4:86:84:bb:0b:23:
83:25:e4:cb:70:a5:42:ca:61:96:1b:a7:7b:84:c1:df:af:1a:
a9:b3:80:69:dc:27:f6:b1:45:17:54:9e:da:fc:4c:0b:33:20:
d2:2a:1f:53:f0:26:86:1b:42:59:7c:1b:28:d8:73:af:b0:d8:
95:d4:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:53 2025 by rpki-client