Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier: IlPs9boSdzKS23zQmMaPvnTdey9Own2/HxIPTAuc0R4=
Subject key identifier: EB:2F:F2:A7:D3:6E:C2:85:13:0B:6B:61:75:F3:74:73:AD:C1:B2:38
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial: 019749686D133F9DC49C7B8B7EA78F297102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number: 02B9
Signing time: Sat 07 Jun 2025 08:01:09 +0000
Manifest this update: Sat 07 Jun 2025 08:01:09 +0000
Manifest next update: Sun 08 Jun 2025 08:01:09 +0000
Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: uGMGaN54twFqojKU/3nEFUjhe6b5WaHPlaBLeErKOVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:6d:13:3f:9d:c4:9c:7b:8b:7e:a7:8f:29:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Validity
Not Before: Jun 7 08:01:09 2025 GMT
Not After : Jun 8 08:01:09 2025 GMT
Subject: CN=eb2ff2a7d36ec285130b6b6175f37473adc1b238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:68:1d:cb:c3:ac:c9:ed:9a:5d:d1:b0:76:
0b:69:b5:94:bd:ad:00:d2:41:54:de:df:c5:b7:bd:
f0:4a:47:ac:9d:9c:dc:d1:b3:f1:42:6d:9f:dc:70:
40:9a:b7:3b:12:24:a7:1d:29:c5:08:d7:27:65:4e:
5c:f6:7e:2b:40:5c:cb:ea:a0:6c:0b:63:b5:d6:26:
1e:e2:e2:6f:bc:a6:eb:05:b4:f6:3b:d0:ae:d0:0b:
26:38:83:96:95:1e:a1:0a:6d:17:36:fa:ac:8e:1e:
47:f7:54:af:7b:37:c5:ae:f1:c0:3d:7e:78:a5:67:
b4:da:1d:e6:91:54:d7:a6:64:bd:8f:53:96:a2:b9:
d3:0b:c5:1d:ca:fc:e8:e8:d2:89:f8:5a:b2:13:c7:
59:af:d0:6f:75:73:f4:9c:29:60:06:1e:03:b3:72:
6a:99:33:ce:7f:a6:4f:40:b6:c5:89:34:7a:5a:7e:
19:51:f8:03:a8:01:6d:55:6f:02:49:a8:86:43:66:
e1:e8:3c:7d:c6:56:36:70:ca:7a:c4:ea:69:fc:49:
53:61:f0:33:1a:18:85:7c:08:e2:47:af:a0:3b:8f:
a8:3e:95:67:93:65:d3:2e:35:d8:b8:6a:27:ac:e8:
09:9c:3f:db:30:d4:5f:19:2c:3d:cf:a2:88:2f:81:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:F2:A7:D3:6E:C2:85:13:0B:6B:61:75:F3:74:73:AD:C1:B2:38
X509v3 Authority Key Identifier:
keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f2:79:d1:89:5c:c7:cc:43:bc:f7:29:bb:69:90:03:ee:5e:
ae:91:b0:1d:38:b4:66:c4:6d:97:c5:04:c8:f1:ac:09:51:24:
71:22:32:f9:bc:3c:7e:cb:d0:12:be:32:7c:3e:15:aa:1c:42:
75:06:54:31:db:de:8a:b3:96:5c:f2:25:e2:18:13:f6:81:fc:
dd:4a:8e:17:a2:1c:f6:6c:d3:f1:0b:3d:b0:09:b7:bf:ec:13:
95:91:b6:72:49:cd:78:fb:93:06:7e:50:3f:87:62:fa:f7:d7:
9a:69:53:da:43:a6:57:a8:d2:ac:38:63:48:b2:3f:57:69:1a:
b7:96:95:8c:80:87:6c:d2:82:b7:7b:b6:12:52:fb:a3:45:c1:
27:a1:ab:93:10:a5:e1:e3:f9:f1:05:de:e2:b9:ab:21:bb:87:
dd:fa:46:9b:15:b1:26:7a:34:10:c8:b2:ed:15:25:ac:1e:50:
aa:8b:31:f1:d6:7d:b7:84:55:9c:3a:ec:40:59:af:a2:83:a7:
ee:97:d7:9a:91:e4:2c:e9:ca:66:89:b6:a2:c5:6b:0f:6b:5f:
0b:33:8b:9a:d6:9c:e0:ac:0a:9a:88:26:e8:a5:69:00:27:01:
ff:7f:d8:c5:94:5c:b8:1c:55:b5:b3:80:42:4e:a4:33:63:ff:
a0:87:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:12 2025 by rpki-client