Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: iZVdHRPSYSBq2gCGAkz4f5IXhCcmKvITa/7HH/gGsak=
Subject key identifier: D9:67:D6:30:83:C2:3C:5E:1A:AE:A5:C1:A2:60:C3:13:EC:AB:F8:8F
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019921B2892545EAC617A147A30797A1DFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:52 +0000
Manifest this update: Sun 07 Sep 2025 01:02:52 +0000
Manifest next update: Mon 08 Sep 2025 01:02:52 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: dyOpaUAKVQ4eMoDLEQ9XmKuLr1JRbHcAlNQ3rjRaXC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:89:25:45:ea:c6:17:a1:47:a3:07:97:a1:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Sep 7 01:02:52 2025 GMT
Not After : Sep 8 01:02:52 2025 GMT
Subject: CN=d967d63083c23c5e1aaea5c1a260c313ecabf88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:6f:bf:a3:44:f0:4f:78:79:3c:f6:6d:5f:
34:c3:44:cd:bd:93:bb:1e:cf:ca:1a:12:81:15:5f:
49:c6:f8:11:9e:06:41:64:93:1b:fa:b7:53:68:68:
12:ad:30:6d:d1:2f:3b:e6:36:f3:e0:aa:18:56:4c:
16:72:2a:e2:91:3b:0d:54:d6:31:23:9f:26:51:35:
89:1b:cc:4f:9a:bb:5b:d7:ee:1c:e1:85:fa:18:5c:
02:db:a0:5b:b2:bf:47:1c:90:65:39:df:ca:b6:67:
e1:df:a2:f7:c6:84:8b:65:5f:09:d3:73:83:70:d5:
89:1f:06:bd:f9:cf:ac:5c:fb:ff:2b:75:24:76:e9:
59:35:bf:08:fc:39:a7:45:9f:67:b8:6b:4a:53:91:
40:b0:9b:4c:0b:83:20:b2:4f:ea:2f:3f:f8:43:fa:
ef:2f:d3:11:24:9d:75:e1:c1:83:17:57:86:1d:11:
c2:c2:0e:ef:c4:9f:3c:bd:09:40:0a:2b:46:ae:d6:
b6:38:6d:60:e3:6f:f0:d1:93:6d:36:69:a7:0e:06:
76:95:64:50:67:f3:bc:76:c1:66:3b:33:5a:61:d8:
71:a2:28:2f:d6:02:58:d0:ff:38:78:b9:91:81:f1:
f0:63:b5:df:b8:d2:f5:fa:e1:7a:a8:2d:33:3d:db:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:D6:30:83:C2:3C:5E:1A:AE:A5:C1:A2:60:C3:13:EC:AB:F8:8F
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:00:1b:55:96:46:6b:ab:42:dd:1b:fc:ce:e6:33:35:55:1e:
8c:23:47:c7:79:8a:34:00:cb:a4:c7:b5:aa:09:ff:85:65:1f:
1b:ba:65:6d:8a:99:8b:c7:2d:42:c7:7e:b2:65:a9:ab:5c:a3:
b6:48:da:9a:29:08:d8:05:c0:15:df:01:52:ce:5f:6b:16:36:
32:21:4c:1b:80:80:7b:ad:b4:39:be:63:78:b4:01:38:02:16:
95:76:4d:78:8e:d6:d5:58:8d:f5:7d:97:04:89:98:f8:88:fe:
d5:36:fb:4a:12:fd:74:cc:38:3b:1a:31:37:a9:f7:c7:09:f4:
60:6e:4f:8f:a3:35:43:22:fc:01:fc:c7:da:9d:2c:52:c6:a3:
34:12:7a:f3:40:10:69:f7:68:02:eb:0c:7f:ee:05:8c:b3:a3:
e3:ec:1f:77:60:a2:72:cf:26:e8:f1:10:41:c2:a8:06:3a:27:
94:f7:de:4e:a6:b4:07:fe:a0:9f:b8:3b:aa:db:b4:dc:9b:0c:
80:84:94:e7:08:29:a4:42:71:20:e5:4d:90:27:12:13:d5:53:
28:fb:1f:28:47:8d:a5:53:ac:1f:bb:22:0d:a8:9f:20:54:62:
78:93:62:e8:d5:45:39:15:45:7c:09:ee:7a:3b:8f:35:92:22:
1b:5e:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:02 2025 by rpki-client