Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: EF3JZTg1kR1WWa4qrRxzock316sIn0YAGNNaVENSStM=
Subject key identifier: 25:E2:BF:57:89:F1:DA:E2:62:46:93:32:F7:31:22:52:0B:90:48:CD
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 019749D5E181EABE402F4853991521D8AE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 10:00:43 +0000
Manifest this update: Sat 07 Jun 2025 10:00:43 +0000
Manifest next update: Sun 08 Jun 2025 10:00:43 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: VVn2tiN41r12bpfuiVhSkCKCTiVM1Mca1+aIzN55h08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e1:81:ea:be:40:2f:48:53:99:15:21:d8:ae:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Jun 7 10:00:43 2025 GMT
Not After : Jun 8 10:00:43 2025 GMT
Subject: CN=25e2bf5789f1dae262469332f73122520b9048cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:bc:ea:a2:e5:8c:49:96:36:9a:f6:4c:6e:
7a:f5:7e:ac:61:99:38:e5:b6:c8:b0:14:e5:7d:33:
05:10:50:79:a2:c6:19:bc:19:3d:01:19:86:fd:53:
33:fd:24:a6:63:04:bc:39:7f:fb:ed:f3:91:5f:d9:
d2:f0:71:0d:2a:3d:69:3f:0c:e0:dc:d9:65:51:93:
f0:88:1a:e5:0b:44:30:ca:30:7f:64:74:32:b2:65:
aa:6d:e0:d2:0e:b5:5e:91:d3:da:78:56:28:2c:6d:
95:16:58:f9:5f:6c:59:e8:0d:96:de:c2:7f:01:f4:
e6:e1:5b:bd:4a:bf:f7:3b:49:73:fb:31:a2:80:4f:
9b:78:22:a1:9b:61:0c:12:a6:e5:08:94:d0:3f:98:
4b:f3:8d:a4:3d:86:a2:1e:29:86:61:2d:98:70:d7:
cf:90:74:46:f6:6b:d4:28:9c:9a:b7:54:ec:80:8b:
c5:55:86:de:62:db:48:5d:a7:08:2d:f4:0a:3c:a6:
53:d4:9d:20:43:65:28:89:3b:51:b0:aa:57:b0:cc:
75:a8:49:08:76:9c:ce:35:0d:62:63:1c:ab:be:42:
27:15:6d:8c:78:52:91:88:86:f0:d8:40:89:d1:c6:
ee:8b:b8:d5:e0:4e:3b:37:1e:dc:33:62:0a:fb:66:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E2:BF:57:89:F1:DA:E2:62:46:93:32:F7:31:22:52:0B:90:48:CD
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:31:d8:30:32:b9:5b:6e:25:d9:cd:f3:c9:43:2d:db:36:cb:
a0:bf:32:79:42:29:c9:b9:d5:0e:22:7f:28:b9:26:81:65:f9:
34:27:de:22:0c:45:58:a2:94:c1:a5:e1:2c:3e:62:93:c8:04:
d3:2b:ac:5e:ce:1e:e6:0f:23:22:9c:0f:1d:1b:13:85:99:fd:
86:1e:ef:5a:73:14:18:ec:2b:a2:48:d6:04:0c:91:e4:e1:1a:
1a:4b:93:b7:80:1f:54:7e:0a:d4:22:91:54:b5:61:df:f1:00:
32:ac:10:28:bb:58:0f:7d:9d:b2:ab:b2:2c:16:56:94:e8:db:
88:b9:5c:1d:ef:d7:42:a7:0b:18:af:ca:ab:08:64:34:07:77:
99:e8:3d:38:28:3e:30:b4:e8:7a:d1:d4:84:56:01:20:4e:f2:
1f:25:c9:62:ca:33:a2:36:d0:86:61:08:28:80:10:98:9a:de:
b7:cb:09:e2:3a:9a:8c:81:c8:37:c4:53:2b:07:23:4d:d5:41:
31:fd:18:ca:b9:1a:e7:90:51:76:ea:db:11:81:3b:c3:cf:81:
12:43:d5:a9:e0:05:48:b5:4c:b9:2f:14:65:87:83:93:f0:f8:
b1:09:6c:12:fa:50:50:c6:2e:9d:89:6f:ee:33:36:02:e4:6a:
29:46:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:34:03 2025 by rpki-client