Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: tVmvzbRPpx/bpuUjekZ7vSj1KGBcWQTtotTqgVhXC9c=
Subject key identifier: D7:71:83:38:0D:84:CF:48:BF:F6:CB:61:F0:C4:13:53:CC:CC:F4:1B
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019922FAFD5921064CB92FCA0F89B8ADCA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0952
Signing time: Sun 07 Sep 2025 07:01:38 +0000
Manifest this update: Sun 07 Sep 2025 07:01:38 +0000
Manifest next update: Mon 08 Sep 2025 07:01:38 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: O7Drc0N0E3T+hJ1soHSvK+UaxS3sj9wN/LbN8iDflbw=)
2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:fd:59:21:06:4c:b9:2f:ca:0f:89:b8:ad:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Sep 7 07:01:38 2025 GMT
Not After : Sep 8 07:01:38 2025 GMT
Subject: CN=d77183380d84cf48bff6cb61f0c41353ccccf41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:9c:67:bb:bf:08:02:e0:05:4a:ee:1f:b3:
87:f4:49:6f:77:dd:e0:82:50:bf:ce:25:dd:9b:f2:
5e:88:9f:fe:cc:70:86:42:e4:3c:db:11:2e:c4:e3:
1a:10:a2:13:8b:ac:49:4f:a3:95:42:33:9f:df:d9:
68:f4:e0:6d:6b:7e:73:fd:d4:b7:18:3b:e4:41:b1:
af:9b:f8:9c:0a:d0:d3:41:f7:6a:f4:53:d1:bc:6f:
f4:55:6f:29:26:f1:94:63:aa:95:11:fe:13:15:a2:
a9:b3:8d:44:0c:67:cf:f5:35:06:a3:c0:12:0a:69:
61:98:ac:df:9b:2c:51:ee:96:75:e5:aa:fd:34:67:
a6:84:f4:1e:b6:76:84:2e:3c:bc:37:ce:cb:9a:0e:
07:e7:d0:8c:10:c4:02:c2:62:c5:65:60:8e:d0:4e:
b7:8b:16:5c:18:0e:88:10:f2:bc:ac:97:ef:28:c4:
af:81:87:b3:42:bc:fd:df:da:71:9f:71:9c:fc:8a:
ec:0c:1e:f7:3a:90:dc:5b:a9:bb:07:49:30:5e:80:
94:35:b7:8c:64:9d:cb:35:e8:99:31:c5:82:92:23:
4a:e0:35:18:0e:5b:2d:65:e5:95:10:6d:ae:8e:19:
03:7b:e1:3e:d6:bb:4a:0b:5b:64:85:c6:81:97:ae:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:83:38:0D:84:CF:48:BF:F6:CB:61:F0:C4:13:53:CC:CC:F4:1B
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7d:eb:ef:a4:03:41:6f:58:f2:00:9d:c6:b9:45:44:0f:4e:
4e:1d:b6:41:08:ac:e8:20:c6:1d:4f:24:93:67:1d:22:d4:30:
2e:55:bd:67:46:de:93:77:1e:2a:3e:3d:8e:86:96:10:bb:db:
74:ac:4a:83:b2:c0:bd:d5:65:8b:8e:f0:04:a7:4e:2e:f5:e6:
41:ec:1f:4f:5c:dd:52:1a:1c:a5:5f:ca:c0:af:a7:50:d0:5a:
71:1b:f3:be:9e:1d:63:7c:38:c0:5f:78:16:5d:cc:00:57:48:
b0:48:50:07:70:0d:f0:40:ed:25:ed:7c:0a:62:42:39:c7:ba:
46:f5:2f:5a:ba:12:d4:1b:6c:ab:fd:44:d2:df:0b:34:21:e3:
12:07:09:28:2a:3c:b3:f0:12:aa:71:96:09:4d:34:15:35:c4:
bb:37:73:ae:89:9d:70:fc:3f:1a:44:93:1c:ab:66:62:55:8d:
1d:b7:92:cf:9d:8d:8d:8a:09:93:a6:e1:16:03:17:94:65:ce:
07:3d:68:f5:ad:09:b9:b3:94:6f:8c:8a:8b:a0:71:6e:2d:a2:
8c:82:7e:ee:4d:27:47:89:f7:22:74:48:24:f8:f9:60:d3:30:
16:f5:20:00:5e:5e:d9:78:c6:ab:af:05:da:29:4d:be:e5:ec:
1a:45:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:47 2025 by rpki-client