
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: mSICPokiLBE4euzrSsEcmC7PcInwuQmQ63I2QCYJjYg=
Subject key identifier: 4C:CF:F4:11:AB:7C:8B:E4:A1:CD:19:2A:59:6B:1F:7E:F6:3B:0C:4F
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 0199228D16634FDEC8F39783B198C734A661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 0E3B
Signing time: Sun 07 Sep 2025 05:01:35 +0000
Manifest this update: Sun 07 Sep 2025 05:01:35 +0000
Manifest next update: Mon 08 Sep 2025 05:01:35 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: /KR81OxesGBOgdXd1SCXrhu3i1Rb5xss7Z3+GwaDGeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:16:63:4f:de:c8:f3:97:83:b1:98:c7:34:a6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Sep 7 05:01:35 2025 GMT
Not After : Sep 8 05:01:35 2025 GMT
Subject: CN=4ccff411ab7c8be4a1cd192a596b1f7ef63b0c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:8b:b1:25:33:39:6b:0b:21:77:9e:96:9e:
45:e4:98:81:26:12:b5:31:25:9b:01:a1:ae:be:de:
31:b9:69:cc:c4:09:8a:6c:1c:10:89:b8:81:08:9b:
de:fd:eb:38:83:e0:08:5c:a2:49:51:d8:55:69:72:
f4:c3:12:f7:82:5f:92:5e:d1:33:28:74:90:02:d2:
6b:47:4e:77:b5:11:56:91:2d:08:19:99:8c:72:af:
b2:11:28:06:0b:16:ce:dd:b5:d5:5e:fc:0e:79:7d:
96:22:05:6d:e5:79:2b:41:d1:01:87:8e:d2:cf:98:
74:41:27:39:f6:66:b5:ee:95:80:73:04:19:d2:00:
60:df:53:70:16:8e:1a:c4:f4:bd:23:1d:46:15:b1:
3d:f0:03:73:3b:df:36:59:ee:1c:0b:4b:e3:cf:b6:
0d:59:37:bb:35:9a:f8:63:ec:91:fa:8b:27:68:84:
0b:58:98:97:a3:6d:af:d7:2f:4e:64:e4:88:ca:83:
6f:76:ad:3e:10:23:99:f5:02:69:ac:a7:c7:2a:2e:
38:5e:0a:88:40:f2:c3:8d:a8:35:0c:46:b5:96:0c:
ca:45:e8:88:f1:87:95:1a:42:be:69:8e:5b:e2:50:
07:7b:c5:df:25:11:c1:64:87:a7:d6:97:5f:a7:23:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CF:F4:11:AB:7C:8B:E4:A1:CD:19:2A:59:6B:1F:7E:F6:3B:0C:4F
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ab:a8:45:5c:5a:2b:ca:69:f3:52:1e:25:00:04:10:63:e2:
10:3f:3b:7f:43:8b:bf:8d:ef:8a:ac:94:8d:d9:ff:0a:04:8a:
f1:6f:00:d0:9f:db:06:bd:7c:f6:f4:98:9b:98:29:bd:47:05:
ca:a9:3d:73:f4:49:81:34:fc:4f:85:7e:5d:7e:7a:80:e7:1b:
81:5a:9c:a3:34:ff:c1:9b:a1:de:65:0d:c4:0a:ad:ff:4b:46:
56:18:ef:f4:72:59:ec:3c:96:89:9c:bc:da:1a:7e:5b:c3:a8:
04:f4:fe:00:b5:f2:7c:df:51:1c:6f:16:56:cd:9e:b5:99:55:
2d:75:6c:44:f4:72:ee:be:a9:9b:a3:e5:eb:d8:91:19:b6:32:
56:02:dc:a4:42:80:21:3a:68:61:2f:0b:18:05:52:7e:1e:34:
99:57:65:f2:76:5c:1e:fc:dd:5b:ca:a5:09:84:23:39:0b:df:
1a:3e:62:07:7f:77:03:8a:18:24:33:37:36:43:84:86:fa:d2:
c2:62:bc:6d:cf:63:20:af:65:a2:93:f8:52:ff:45:56:85:b7:
15:1a:4f:3e:c5:fc:82:cf:c2:12:30:35:1b:f6:05:32:86:20:
3c:ac:4e:51:b3:a4:58:c9:1e:da:21:c3:b9:94:d5:ce:a2:6b:
63:b3:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:30 2025 by rpki-client