Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: wPg7qhvRkAN8XH76r4XTKJ6yha2owNLGPTaYKgzTlhQ=
Subject key identifier: 30:4D:DA:BB:C8:D9:16:80:63:71:DF:E5:14:D4:79:DE:2A:56:A7:56
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 0199228C752AE9CDB8A96F0D24532DBDEE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1393
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: o7oWZN23rL+lutfn908aqpqrhe5tjfxw0oRWX8X6VRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:75:2a:e9:cd:b8:a9:6f:0d:24:53:2d:bd:ee:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=304ddabbc8d916806371dfe514d479de2a56a756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:08:8f:a2:bf:28:71:bd:3e:81:eb:dc:6b:
63:f2:80:ff:92:6b:0d:d5:ac:7a:f5:7c:d7:45:15:
c0:1a:ec:db:13:62:ef:f1:d1:5a:20:ee:89:17:74:
8e:87:04:70:45:0f:48:4b:f8:7a:d5:9c:af:17:84:
b7:b2:f4:26:45:4a:97:00:40:59:39:ec:0d:f3:56:
d0:fd:aa:c2:71:c7:bf:c4:f0:20:a1:8e:10:27:09:
d4:06:e5:58:67:47:2f:47:a3:35:3d:cc:26:96:e8:
26:63:6d:a8:58:2c:40:1c:31:9e:51:c9:76:ef:fc:
fa:21:d4:81:21:58:2d:af:38:e5:0a:ac:95:be:3f:
5e:ab:b0:68:7b:5e:70:dc:5c:ff:a1:48:8c:ae:d4:
a0:94:bd:2c:69:c8:91:00:f3:31:9a:d7:b7:76:c2:
c7:d7:76:bd:94:aa:13:7d:0d:67:5d:14:28:ad:08:
f2:af:90:d7:05:35:48:53:ef:26:24:47:75:69:c1:
80:4f:0b:b9:23:87:ed:68:39:e4:2a:36:a0:bd:81:
d9:09:c6:61:4a:04:e5:a3:60:6b:10:db:0e:e5:a6:
5f:7a:46:a6:84:68:82:ce:b5:71:46:5a:c6:bd:89:
f6:5e:ae:fd:68:6f:8e:07:e4:32:84:44:f0:87:12:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:DA:BB:C8:D9:16:80:63:71:DF:E5:14:D4:79:DE:2A:56:A7:56
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:cc:80:fb:75:dd:aa:d7:72:79:78:6d:30:72:24:0d:1c:
15:d9:ae:da:f3:a9:57:90:a2:b6:2a:fe:a5:a0:ad:e9:f9:d3:
d4:1a:a1:ab:8d:d4:f7:1e:00:50:a2:4e:4f:a1:ff:17:4a:a0:
7e:a5:d4:4d:e0:2a:a0:0e:a4:4c:0c:ac:94:64:b3:53:79:77:
50:b2:b3:9a:58:2f:a3:42:f7:2e:da:bc:c5:da:e5:e0:d0:ea:
ec:06:98:ff:25:d0:00:84:ff:66:47:7f:3f:f0:26:7c:42:dc:
1a:a8:93:8e:d7:25:e3:7c:b7:98:15:e0:f8:e7:98:d8:2d:8d:
32:08:cd:4e:05:8b:5e:ff:70:68:e7:5d:25:51:bc:bf:7a:bf:
ab:68:eb:c4:65:47:28:f7:57:53:41:ee:9c:15:9d:ba:45:8a:
94:a2:c2:2f:50:46:a3:e7:1f:0e:31:50:b1:5a:a6:f8:d2:69:
44:2f:24:b2:d5:cf:52:b8:f1:27:88:cb:ec:cf:65:6f:e5:a4:
0c:8d:3f:8f:16:4b:66:13:be:f1:27:ba:74:1d:c2:41:e6:83:
be:e1:93:8f:9d:4e:aa:7b:29:42:10:8d:86:29:82:60:f4:52:
28:04:9d:c6:6c:ee:ba:13:71:0f:83:77:c2:e3:79:14:2c:ac:
2e:6a:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:52 2025 by rpki-client