
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File: c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier: fE2Agd+gmhdrh29vRoEXBPL6o37ixoX40RrJoGcvKQU=
Subject key identifier: 0D:DA:5C:84:40:17:FA:8B:1B:8E:45:5F:2E:A3:CF:A4:EE:3A:97:43
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer: /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial: 0197488C5313377AC6F7504C24D4B24E9A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 04:00:45 +0000
Manifest this update: Sat 07 Jun 2025 04:00:45 +0000
Manifest next update: Sun 08 Jun 2025 04:00:45 +0000
Files and hashes: 1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: AHjlN4DMUi9Rn3wCAG5rCS2uE0fdat503LQ23glbjYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:53:13:37:7a:c6:f7:50:4c:24:d4:b2:4e:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Validity
Not Before: Jun 7 04:00:45 2025 GMT
Not After : Jun 8 04:00:45 2025 GMT
Subject: CN=0dda5c844017fa8b1b8e455f2ea3cfa4ee3a9743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:11:5d:01:03:f3:d9:88:47:91:b5:e0:fc:
14:c0:c1:04:ab:23:fd:c3:4c:72:bc:0a:3c:a5:cb:
64:f2:10:82:f0:b1:20:84:a7:99:48:c3:c5:15:11:
40:a7:85:3b:41:7e:26:87:54:4f:f4:67:34:84:64:
64:ed:77:ea:da:28:9d:be:66:ab:7e:8a:c2:cd:fc:
5a:da:ea:38:5c:18:3e:87:e9:cb:ba:e3:66:c0:54:
da:ed:84:ca:76:97:0b:da:4c:6b:ee:9b:ee:98:0a:
f0:9d:3a:de:f8:21:92:70:c2:bf:79:fd:62:f5:e4:
a7:af:99:ea:31:35:9c:14:91:28:95:ed:57:1e:f8:
03:be:36:2a:8b:2e:0f:2a:b0:62:59:5c:21:6d:ba:
f6:50:38:9c:32:58:fb:a5:be:82:8f:7b:b1:68:59:
c1:f7:d6:84:8a:3c:38:9c:d2:90:af:1f:14:85:fb:
c5:db:64:db:f3:b5:38:ac:e4:94:ef:94:f4:cd:46:
7f:82:0f:96:5f:07:8f:46:15:18:c1:e3:f4:69:5e:
fd:c6:92:7b:af:6b:b9:50:c1:9c:e7:da:6d:04:0c:
db:e6:f4:a1:ba:82:d0:da:1d:d8:95:91:ff:10:11:
9b:c2:18:44:6e:e2:13:af:9d:31:64:00:37:0a:13:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:5C:84:40:17:FA:8B:1B:8E:45:5F:2E:A3:CF:A4:EE:3A:97:43
X509v3 Authority Key Identifier:
keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6b:08:b8:7c:2c:21:83:d8:2d:62:f7:0f:7f:76:cf:8f:de:
f5:d8:f8:79:44:a0:6c:03:92:59:53:9b:d9:5b:c2:7a:c1:36:
a9:92:4b:f3:db:33:a8:5a:01:c5:6b:4a:74:87:24:b9:48:ec:
7a:47:6a:1f:0f:1a:dc:d0:99:6e:e0:e1:7d:97:b1:d2:b9:80:
7e:ff:85:00:d7:a9:41:57:fc:7f:97:7c:be:96:2b:46:b5:5d:
a1:4b:ac:7b:d6:71:a9:fd:52:6d:8e:48:1b:e0:8e:a5:1e:9d:
2f:77:94:77:29:8c:bd:d5:b3:6f:56:4a:38:6b:79:a4:5e:ab:
14:0a:72:05:1d:d8:c2:e2:14:fc:88:8f:38:62:88:19:bc:f2:
53:87:f7:3a:b5:5f:13:67:d3:b6:a8:17:51:f0:52:3f:08:bb:
d8:da:6f:13:8c:fa:02:f5:0a:7f:8d:08:92:ef:e3:be:f3:6d:
0d:2d:dd:d1:c7:b9:63:31:bc:4a:33:f8:8e:4d:97:f5:10:4f:
87:35:55:90:75:11:e1:9d:60:a8:d3:f7:7a:88:af:6e:0b:da:
d2:94:3b:07:57:b1:fc:9b:20:3d:18:18:0b:8c:83:38:26:ff:
0f:e2:4f:b8:3c:5e:bb:2e:c6:f1:30:89:2c:cc:b0:dd:c8:21:
30:52:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:58:23 2025 by rpki-client