Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: fPR42tu/CSg8sh9qViyLvvRQ7Qn+9XwU9dupTN2xWrA=
Subject key identifier: 46:78:30:56:50:1C:84:C9:6F:6A:B7:2A:B8:4E:FD:7B:26:2E:14:15
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 0197488CF2FAAC0EFDB0C9219DC0197AF259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0B2B
Signing time: Sat 07 Jun 2025 04:01:26 +0000
Manifest this update: Sat 07 Jun 2025 04:01:26 +0000
Manifest next update: Sun 08 Jun 2025 04:01:26 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: ntiI3zGm3luLqrOdtTlNsHJdj4l8dkwaiNcLk9W03V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f2:fa:ac:0e:fd:b0:c9:21:9d:c0:19:7a:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Jun 7 04:01:26 2025 GMT
Not After : Jun 8 04:01:26 2025 GMT
Subject: CN=46783056501c84c96f6ab72ab84efd7b262e1415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:fb:23:0e:a8:48:db:b6:ef:72:ba:0e:ec:
56:aa:f4:64:fe:c2:e8:19:e8:e6:2c:23:d9:1b:78:
e0:61:c8:f6:53:dc:cd:ff:d1:ce:d8:65:65:65:8f:
55:25:8f:1a:0b:9b:04:ce:96:ce:03:4c:d7:96:c0:
f6:9b:e8:83:ad:64:0d:58:84:7e:96:c3:bb:0c:dd:
eb:8b:5b:eb:48:65:a2:03:ce:b4:68:4c:ea:a2:23:
c2:d4:13:9b:55:d6:55:f5:48:e9:65:90:ef:9d:2f:
c5:de:2c:6e:74:a8:bd:bb:7f:b8:2e:5c:d2:07:f3:
10:7a:49:c1:a3:f1:8d:46:ff:d7:25:17:6c:e3:44:
6d:25:4b:1e:3d:5c:a2:1b:d5:c1:0f:67:62:6d:6a:
7d:bb:52:31:ed:76:26:c5:ce:53:52:d0:1b:9c:87:
6c:18:1c:31:14:a2:71:90:f4:a9:07:ff:f3:d7:b7:
25:03:7f:55:14:9f:07:97:7f:2c:37:48:a9:20:28:
04:f4:63:3f:a1:f0:0d:49:88:02:a4:32:88:1f:1e:
1e:1e:0c:ca:64:c7:3d:f9:ec:f6:8c:3e:6b:0b:7d:
80:0a:42:8c:e8:f0:b8:2e:33:f3:fd:52:4f:a9:0e:
44:83:9d:19:88:32:5a:c9:5a:7d:94:a0:cd:e3:40:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:78:30:56:50:1C:84:C9:6F:6A:B7:2A:B8:4E:FD:7B:26:2E:14:15
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:04:df:32:5c:19:0a:35:ae:6a:65:2f:2a:36:20:c8:3a:d9:
83:fc:0a:8b:36:99:f1:4d:ca:0d:63:88:83:a0:c1:d1:96:71:
40:fa:c9:f7:76:da:05:31:0e:e7:29:09:4b:22:82:e8:66:af:
9d:e5:02:2b:29:c3:11:24:4b:16:1e:91:ad:d3:b6:c4:71:b0:
de:8b:cb:83:ad:69:a5:45:00:99:43:f2:fb:f3:02:d5:3f:4e:
f4:87:63:b0:68:2d:44:c9:14:0c:6f:22:1d:25:5b:93:f9:e1:
84:04:a4:b4:f4:61:98:1b:ef:4c:05:9e:01:c1:b9:f2:a0:4f:
78:18:ac:cd:91:0a:27:56:a6:49:fb:f0:af:81:22:15:d1:6f:
b8:2c:85:12:e2:86:ac:ed:18:20:0d:d5:bf:fc:10:03:48:30:
ad:8e:15:b5:eb:49:56:53:a2:48:ec:4a:81:38:89:b3:fd:2c:
bb:03:f0:0a:ba:aa:d5:63:bb:02:1f:1a:0f:cf:e9:dd:d5:7b:
47:a2:14:ce:e6:24:ea:56:0d:9d:07:e0:af:f5:29:45:9f:e5:
2e:cf:59:09:e0:b6:af:aa:5e:e1:75:63:36:cd:46:7f:a4:52:
b2:19:7e:a5:95:e6:2a:7b:70:b8:f3:89:68:73:bb:fd:8d:e6:
ac:94:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:12 2025 by rpki-client