
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: ps2U6baBhwRdBtDa7aiJxo6bzcKl520DcTjwiTEFVu4=
Subject key identifier: EB:49:5A:DE:DB:CE:56:9B:FE:AD:90:30:1D:12:F0:A3:70:46:F2:7B
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 0197469DC6636E68B1C8AAD26EE536C28EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0D9B
Signing time: Fri 06 Jun 2025 19:00:34 +0000
Manifest this update: Fri 06 Jun 2025 19:00:34 +0000
Manifest next update: Sat 07 Jun 2025 19:00:34 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: 1sw/mDP/p79GwYAYdXfLi3PcPXsQ6ZE+XRFqmWNFqh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:c6:63:6e:68:b1:c8:aa:d2:6e:e5:36:c2:8e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Jun 6 19:00:34 2025 GMT
Not After : Jun 7 19:00:34 2025 GMT
Subject: CN=eb495adedbce569bfead90301d12f0a37046f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:79:3b:1e:78:58:f9:59:c8:e2:eb:0d:ac:
ff:be:40:4d:6d:1f:a4:05:26:f8:99:83:e8:ee:4c:
4a:bd:da:55:47:3b:b9:98:02:7c:ad:ec:45:50:ff:
5d:6d:48:b5:7c:56:07:48:c8:34:15:fb:45:f8:ee:
1f:62:74:b3:86:d8:66:39:b3:d3:3b:90:f8:bf:34:
32:7d:9b:8f:79:80:1d:67:3a:ae:00:17:1e:b7:87:
b6:c6:38:45:71:9b:f3:e1:99:72:a7:c7:6c:f4:fd:
3a:3f:9e:ad:e5:04:57:72:1e:e4:1e:7a:92:d5:ff:
52:a8:46:26:d3:56:6b:48:24:ac:e8:90:5c:7e:8d:
73:57:b7:66:ee:a1:45:96:23:d0:be:3d:1e:de:2c:
19:26:4c:2a:2a:24:d0:ff:e8:f1:01:b9:80:de:e8:
9d:fa:55:2c:e4:ef:d0:27:ce:59:5d:4b:74:da:f9:
8d:f6:90:4c:07:0b:b7:72:ac:52:70:32:d5:d5:1e:
c0:ef:09:17:4d:eb:13:fc:f1:0b:f2:85:de:f2:5d:
8f:94:1a:13:47:60:89:29:92:16:82:6c:54:20:d9:
76:a2:39:0c:7e:c0:78:11:93:7a:2c:37:68:37:08:
df:ce:e8:c1:5f:40:05:d1:85:4d:13:68:ea:6d:eb:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:5A:DE:DB:CE:56:9B:FE:AD:90:30:1D:12:F0:A3:70:46:F2:7B
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:3c:74:f1:15:79:6a:ad:36:d7:e4:a4:9b:51:f7:05:fe:
38:82:18:2f:ac:c6:ea:04:74:60:8c:a2:b8:17:98:f8:6d:97:
d5:c9:35:d3:8d:02:10:2d:24:fd:f8:f1:37:fd:fc:af:ea:2f:
2f:94:b1:a3:bc:91:ed:c2:9d:a0:1e:ec:26:76:b4:6e:b1:49:
0f:55:ca:3a:83:13:3a:c6:8e:3f:c3:89:62:04:13:48:3e:d2:
7a:f8:73:14:41:92:7c:5a:d0:41:f8:64:61:84:f3:df:33:f5:
bd:70:8c:85:5b:f0:08:18:48:5d:c6:75:a0:f8:98:c1:22:45:
1f:08:79:25:b2:25:fa:ee:64:90:d2:b5:24:9b:37:b2:06:01:
84:42:b8:2f:78:b7:37:cf:f3:5e:0b:ff:4c:23:b6:3f:af:42:
74:0d:18:d0:f6:5e:e6:11:ba:c2:4d:ce:5d:20:0b:5d:e2:14:
fc:87:35:e9:e7:3b:d3:82:87:fd:c9:3a:79:6a:cc:72:43:b8:
0e:c0:7a:16:ea:68:32:ca:ca:75:5c:15:fd:71:94:09:60:55:
7a:40:a6:63:a9:e9:fe:d6:40:ff:31:a1:a2:fd:d5:ab:bc:36:
52:2a:b5:2d:2b:02:72:90:aa:1d:e2:91:0e:b2:b0:0c:cc:f9:
c2:85:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:29 2025 by rpki-client