Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: b2Me/8/94i3qNU7kIIqmG0GWTRu7KIHe+nlv0U3Yqew=
Subject key identifier: 89:98:66:F0:6A:44:E6:D9:31:77:89:D6:84:A5:3C:65:82:96:E3:DC
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 01974A4362A5A8544F5E8BC8BB6F489038DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 12:00:19 +0000
Manifest this update: Sat 07 Jun 2025 12:00:19 +0000
Manifest next update: Sun 08 Jun 2025 12:00:19 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: xEJRi8gMurdVbMHw+wZLFyxPTZAToY2EODURT/3o8ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:62:a5:a8:54:4f:5e:8b:c8:bb:6f:48:90:38:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Jun 7 12:00:19 2025 GMT
Not After : Jun 8 12:00:19 2025 GMT
Subject: CN=899866f06a44e6d9317789d684a53c658296e3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:6e:ff:bb:20:af:e5:50:0e:0c:ef:6c:6f:
9c:f4:26:d5:0c:80:8e:5f:29:3b:b3:e8:9a:f5:7c:
15:dd:f8:4f:3a:df:ea:12:e2:da:57:b3:ff:88:38:
aa:4b:38:d6:b6:83:f3:d7:e7:5e:44:40:b3:64:3f:
b3:24:e3:b2:a1:39:d3:80:45:92:da:b4:e8:1d:2e:
57:09:15:d7:f3:ef:30:4d:ca:b6:fd:d4:6c:03:23:
da:66:b7:f5:54:00:27:33:ee:e0:1a:68:71:89:18:
43:62:89:d3:72:60:47:a8:de:71:4f:d3:89:d8:94:
6a:35:67:82:d5:36:c4:6d:ae:d7:2e:75:e7:e1:48:
69:de:b5:d1:fd:d8:67:74:38:2d:de:47:d8:9d:7d:
92:32:a1:ce:da:16:fe:2b:d3:bc:b6:2e:7b:df:1d:
89:de:7d:44:24:ee:8c:08:86:75:11:0e:82:37:e7:
9f:68:7d:39:f5:b8:5a:0d:02:cc:6b:5c:81:4f:f8:
5e:be:ea:fa:91:d2:6e:5c:b6:2e:9a:53:99:9a:45:
8e:23:7e:d0:e8:d5:84:a2:cf:40:d9:c6:c8:66:20:
fa:53:04:60:21:10:c0:ea:7c:7d:2f:10:be:d1:44:
85:5a:f7:1a:08:fc:23:8c:0e:15:f4:c8:42:ac:0b:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:66:F0:6A:44:E6:D9:31:77:89:D6:84:A5:3C:65:82:96:E3:DC
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d4:8e:7e:8d:c6:07:14:10:1f:20:e8:4e:ae:65:b0:c0:61:
b7:3e:1c:c7:46:9b:21:be:c7:79:35:bd:3f:10:0d:a9:2e:96:
30:ac:fd:99:f0:aa:6d:7f:17:fc:f4:c6:70:1b:82:81:e2:28:
63:4b:29:bf:2a:5d:be:e2:17:b9:19:1e:94:52:b7:56:74:70:
10:09:97:81:10:84:bd:4a:76:b9:e4:a5:41:de:c3:eb:47:32:
57:7b:22:02:a2:71:44:e3:c8:bd:1e:51:a7:09:93:85:18:a7:
37:c0:5b:56:73:53:76:f0:4d:12:73:75:2a:19:c0:0d:44:36:
0b:dd:06:b5:5b:c3:b2:d3:74:eb:e7:df:5d:87:19:5c:75:a7:
8f:a6:77:83:8e:3d:49:e3:95:3c:bc:81:d7:37:5b:92:fc:8c:
46:97:5d:88:e4:58:f3:5b:c7:cf:e0:82:37:85:c0:36:44:b9:
ec:9b:9c:a6:1f:be:12:94:dd:82:a8:68:23:87:14:23:bb:7c:
0b:17:fe:49:e9:ff:01:fc:d9:03:81:29:a3:6a:f3:db:15:cf:
5a:80:d3:8c:bd:14:67:2a:cf:79:d7:e3:48:dc:83:11:9b:fa:
ee:cb:14:fb:37:9f:ba:bb:16:40:ae:5e:c5:44:f8:e4:a3:9e:
e8:54:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:46 2025 by rpki-client