Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
File: 2L2bhs89vBD7aV_xTYu1ShMHsqU.mft (raw, json)
Hash identifier: QJ5RXthPThMPurAqV8f5aLIqyUcB1bdW//sB24zPULU=
Subject key identifier: 2B:A8:49:8E:AF:E1:99:1E:FF:9F:71:35:E8:3D:1E:B3:1E:D9:FF:CE
Authority key identifier: D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
Certificate issuer: /CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Certificate serial: 01974C6946F6A019AF21902A9876CA45CB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
Manifest number: 0CDE
Signing time: Sat 07 Jun 2025 22:00:57 +0000
Manifest this update: Sat 07 Jun 2025 22:00:57 +0000
Manifest next update: Sun 08 Jun 2025 22:00:57 +0000
Files and hashes: 1: 2L2bhs89vBD7aV_xTYu1ShMHsqU.crl (hash: dNogyCdCI88mTmL69Qm1kCqavv0PNPwJdkCa/icgpRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:46:f6:a0:19:af:21:90:2a:98:76:ca:45:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Validity
Not Before: Jun 7 22:00:57 2025 GMT
Not After : Jun 8 22:00:57 2025 GMT
Subject: CN=2ba8498eafe1991eff9f7135e83d1eb31ed9ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:35:7b:2c:1f:16:f1:3c:49:af:a3:00:03:
23:ca:28:82:88:7f:d3:2c:1c:a9:17:df:2b:fc:c8:
67:47:9e:f7:85:e9:6b:d4:f8:2c:48:b2:53:d0:39:
39:05:0b:c4:d7:05:f0:a0:30:92:ff:60:92:17:39:
b0:cc:5f:4e:a3:45:f2:66:87:b8:7f:dc:e8:19:b8:
36:23:ed:f4:0c:a0:b6:75:81:1b:18:12:ee:5a:29:
a9:1a:f3:16:2a:8b:e7:fc:82:81:f2:eb:23:63:81:
f0:a0:32:90:66:ad:ca:77:3d:12:a0:96:f0:33:4f:
5a:7c:70:19:59:75:d9:ab:0d:76:19:94:d1:ec:50:
c6:d7:9b:46:71:14:53:31:eb:71:12:d9:af:69:5d:
ad:09:ba:dd:d6:15:69:9f:b9:33:09:3b:45:c6:46:
34:0f:8b:d7:23:29:1b:fb:04:b3:de:1c:d1:5f:57:
06:9e:1c:36:f1:38:ef:34:76:e7:0e:9c:da:9f:6c:
c0:95:eb:70:19:bc:b0:8a:cd:2c:73:ad:f7:ca:77:
af:26:37:c0:2c:75:61:ce:e2:4f:bc:47:9f:70:d4:
90:67:35:d6:37:8f:82:e0:09:56:0e:e6:6e:c1:28:
8b:7d:81:81:c4:d5:bc:f9:aa:b9:e0:d9:31:66:e2:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:49:8E:AF:E1:99:1E:FF:9F:71:35:E8:3D:1E:B3:1E:D9:FF:CE
X509v3 Authority Key Identifier:
keyid:D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1f:64:39:9f:5a:ad:c4:75:aa:f1:a3:db:15:1d:4b:bf:c6:
90:a8:55:16:88:22:57:a4:b0:34:fc:1a:3b:d8:e0:c4:33:55:
79:7f:6a:9f:ac:eb:60:07:54:34:8b:ff:c4:14:2a:56:57:69:
b0:b8:26:af:d7:e9:d7:37:46:14:11:2b:47:24:4f:31:c7:10:
de:04:1b:1e:22:a4:bb:20:5d:b9:44:6f:b0:d6:2a:00:e2:f9:
ba:33:d2:3b:9f:00:06:9d:87:79:27:28:35:29:e4:e5:a6:2c:
b0:78:d6:15:cf:bb:d2:5d:9e:ab:15:62:cb:f0:c4:2b:44:d1:
c9:92:c8:b6:d0:25:4b:72:bb:15:35:48:c1:b7:69:32:2d:de:
77:76:a3:34:a0:2e:13:4a:ca:1e:1f:ca:1e:87:60:8c:68:62:
4b:85:bd:c8:17:a8:db:7b:e9:53:de:77:68:02:13:b4:b5:ae:
fb:53:fe:4a:a8:ae:be:29:8b:af:57:e0:a9:24:ab:88:ca:ba:
bf:fe:be:88:7c:e3:66:da:07:84:b0:8b:1f:73:21:c5:37:33:
c8:ae:53:e2:e4:a7:5c:75:d9:41:a1:5f:15:e2:a7:c6:80:08:
8a:14:a1:4d:43:7c:63:f6:09:af:4d:11:5b:7c:8e:cc:84:af:
30:d2:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:44 2025 by rpki-client