Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: aZqIUcCw2nhCTm/n6SwZVKK/Hfqw5sznjRe11niewPo=
Subject key identifier: 19:F7:42:4D:3B:5C:DB:69:6E:05:57:81:EA:C0:3E:FD:5F:A3:A2:DD
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 0199228D0CC00E8C7234FFE8B0095C9D3967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 0297
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: wJiyVbYlL4uXJ6d4cE3n3JcVHhWT4EGtROiXsU3or8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0c:c0:0e:8c:72:34:ff:e8:b0:09:5c:9d:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=19f7424d3b5cdb696e055781eac03efd5fa3a2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:c2:5e:3a:8f:84:81:3b:09:a6:ce:36:72:
d2:4d:e5:f7:a6:6b:5f:2a:5c:95:44:d2:61:82:6f:
86:4e:58:08:e5:3b:2d:43:12:cb:95:56:32:de:7d:
6a:c9:9f:eb:5a:f7:cf:7a:c2:42:b4:d5:93:01:99:
e1:95:21:21:65:16:7b:89:fe:b8:ea:1a:bc:b7:40:
5b:88:10:e0:96:4b:b5:c9:f6:2a:b6:87:4b:79:7a:
e2:6b:58:c0:c4:d2:1a:ba:c2:98:e7:c2:20:a8:fb:
6b:9b:d8:7f:25:50:44:de:ed:fa:77:dc:bb:7c:38:
b7:d5:c9:a3:39:6d:3b:54:29:3f:b2:3b:65:ef:c2:
80:dd:55:a7:06:5c:5e:d4:75:fd:04:bd:23:dd:da:
9c:6c:fe:e8:c4:01:20:f7:cb:30:e3:92:42:de:d1:
90:d9:65:88:43:15:66:c9:87:7e:ad:6c:91:3f:fc:
80:9d:1b:46:5d:78:bb:85:5b:d1:13:66:19:7c:b0:
39:2f:d2:30:44:fa:f0:a6:2b:aa:9a:45:3a:d0:75:
bf:8a:07:ed:0f:d3:f1:1a:1f:dd:12:9d:89:eb:ce:
50:98:f8:f6:d1:a9:5b:03:19:53:21:25:a5:af:28:
af:af:37:7d:06:57:24:25:2a:53:7f:2f:57:f7:1d:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:42:4D:3B:5C:DB:69:6E:05:57:81:EA:C0:3E:FD:5F:A3:A2:DD
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:cd:f5:3e:19:60:46:74:75:07:d4:b6:59:5c:3d:99:12:
72:dd:f1:04:55:53:f9:d9:72:5e:05:76:63:34:4f:bb:cc:0f:
7e:01:ab:46:5c:36:24:9b:72:ee:19:b9:6f:62:d6:fe:4c:3f:
e7:f3:62:d3:4c:2d:62:cc:34:bb:0a:55:39:63:b1:1b:73:40:
0e:cd:47:28:b2:78:81:0f:03:87:a7:a8:0a:61:16:03:99:43:
57:b8:65:be:db:b5:ed:46:29:30:f1:24:8f:51:d4:27:83:2c:
ab:1b:9c:7d:b0:8d:2d:6b:82:41:91:78:bb:e4:b9:ba:8a:da:
80:97:55:f0:73:eb:2c:70:5b:8a:01:4f:00:0b:9c:cf:36:40:
b2:04:70:5a:d0:23:b5:b6:1a:c5:ae:17:44:1e:ed:b4:cf:ec:
77:be:c9:3f:ee:b1:52:65:c8:96:77:6a:02:4f:16:7d:5b:fe:
74:cc:b8:a1:dc:aa:95:fc:71:9e:aa:3c:5b:9c:32:33:83:0c:
8f:95:e8:43:a8:cf:01:23:54:38:9f:85:ec:7f:39:91:8a:13:
cc:eb:dd:aa:02:96:36:4c:e5:0e:22:14:94:35:e4:b5:b8:2d:
b5:b3:be:82:0a:d7:ab:91:47:81:c0:2e:0c:da:87:55:cb:76:
a4:af:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:49 2025 by rpki-client