Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: hpNy2VQ4pHBvswxsnyddO7wxSbhTTD6WHH6V3EQ6+dc=
Subject key identifier: B8:4A:F0:3F:71:DC:2D:D1:17:E4:4F:41:F3:19:B5:55:23:89:52:B9
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 0197469EBAA63EA4C6D15D3E65A911E32D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 1577
Signing time: Fri 06 Jun 2025 19:01:36 +0000
Manifest this update: Fri 06 Jun 2025 19:01:36 +0000
Manifest next update: Sat 07 Jun 2025 19:01:36 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: hdA4XdD5/YsKXpuM9zCiHcd56IeRPXNQNEbOS/GM0jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:ba:a6:3e:a4:c6:d1:5d:3e:65:a9:11:e3:2d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jun 6 19:01:36 2025 GMT
Not After : Jun 7 19:01:36 2025 GMT
Subject: CN=b84af03f71dc2dd117e44f41f319b555238952b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:1e:13:f2:99:08:af:94:bb:c7:84:d8:c4:
62:4e:6c:ba:75:a7:a6:8e:c7:42:f3:b9:ce:ae:c4:
7c:96:58:01:b9:2a:7f:f7:81:83:51:5b:e9:da:5c:
8a:9e:59:7c:92:03:b1:6a:7c:30:23:36:d8:f9:a0:
9f:58:18:fa:e1:a3:b5:f5:a3:47:59:01:d1:2e:12:
59:71:28:8c:ed:58:dd:68:ee:7e:8b:6c:5f:09:5b:
b7:8a:dc:e9:a0:0e:08:a2:24:49:29:18:c4:d8:87:
58:73:64:3a:bc:30:7b:17:49:70:5e:fd:ae:f5:26:
69:d4:1f:d3:a4:75:e8:aa:39:86:6d:2c:62:96:bd:
74:71:d2:62:dd:fe:90:88:57:3e:f7:dc:c7:38:f6:
d7:c3:f1:ba:dc:0e:52:c5:cc:87:32:e2:65:94:c0:
5b:72:e8:ff:90:bb:67:61:af:1c:3e:57:0f:bc:36:
d9:97:44:c9:29:24:f3:6b:6a:96:df:f0:f7:04:2d:
41:f6:cb:fb:3d:d6:94:f7:35:20:ca:e0:6a:55:c7:
58:de:13:8e:7f:e2:af:e7:07:49:86:4d:58:96:96:
27:79:67:cf:a8:22:04:67:63:8e:ce:9e:a6:fb:16:
37:37:26:fe:b1:4f:53:b5:33:bd:b4:93:64:7b:76:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:F0:3F:71:DC:2D:D1:17:E4:4F:41:F3:19:B5:55:23:89:52:B9
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ba:05:1e:16:ec:3a:ae:fa:9b:3b:81:ae:21:e8:f2:a6:6a:
ca:c4:70:86:74:63:cf:ea:c8:18:06:38:37:4d:b5:a8:d6:92:
8c:31:df:7b:55:1d:10:f4:9e:88:0b:e2:f3:4e:a0:26:fa:52:
7c:d7:7c:c9:3c:51:6e:5f:4d:cd:9a:22:da:5f:09:d4:6b:1a:
0e:d3:e9:47:bc:bd:12:ea:6c:14:fa:32:f3:b8:63:61:2c:e2:
13:a8:d0:e6:a1:a6:02:ce:e3:de:39:70:dd:53:d9:ab:cc:08:
1c:47:b4:2d:9d:ef:f1:d5:e1:ec:63:bc:e2:00:26:ab:a7:01:
f6:6e:b8:f8:c1:53:75:e4:46:04:de:a1:e8:fd:19:11:65:53:
a6:6f:ce:44:5c:30:f6:9b:03:68:91:cc:42:ca:b7:83:84:db:
5e:c6:43:a8:4c:68:91:c3:28:2a:89:fe:be:01:df:77:e6:82:
74:7a:29:81:ef:fa:cd:e5:2e:0b:40:75:b2:63:3b:e0:c8:56:
5e:38:84:6e:3e:26:2c:0f:d2:06:47:33:f9:3d:13:1a:29:fc:
f8:4e:57:3c:e0:05:33:11:fc:7a:99:bd:4b:8c:71:a3:c2:02:
65:cf:1c:22:a3:82:65:ad:11:33:73:a9:52:62:b3:89:f4:7d:
04:1a:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:15:39 2025 by rpki-client