Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: En8EtKlgtGdtMfVglBwR3EXHe3uud1ZFLEP4X6PFFwM=
Subject key identifier: 4C:90:62:47:2A:AB:AE:B5:18:15:12:3F:A7:2A:A4:B7:B4:9E:18:B3
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 01974A4387C9F224AB5E7CB04E04249850E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 150A
Signing time: Sat 07 Jun 2025 12:00:29 +0000
Manifest this update: Sat 07 Jun 2025 12:00:29 +0000
Manifest next update: Sun 08 Jun 2025 12:00:29 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: BjaxPGDCNjX4n6JgKzT5XQkqkdkgNSkP08lO7a+3bUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:87:c9:f2:24:ab:5e:7c:b0:4e:04:24:98:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jun 7 12:00:29 2025 GMT
Not After : Jun 8 12:00:29 2025 GMT
Subject: CN=4c9062472aabaeb51815123fa72aa4b7b49e18b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:99:f5:01:b3:02:47:d6:df:35:54:ff:f6:
25:75:52:a0:6c:60:47:90:fa:43:e4:88:43:e9:35:
42:a9:e0:8d:a6:e0:53:85:65:de:8e:94:19:9e:b0:
a2:94:43:e7:37:62:61:cc:b3:9a:6d:40:37:b4:26:
f9:5c:26:36:36:1e:e2:b1:aa:21:bd:44:5c:1c:a7:
f0:58:be:00:8b:f1:38:ec:00:95:3b:a1:51:53:82:
e5:2c:28:60:a9:16:e1:35:93:00:68:62:e9:6a:4e:
e3:fe:37:4f:b3:fe:a2:91:e2:4b:3e:eb:9d:77:6e:
60:1b:0a:a2:12:81:cc:df:8e:ef:dd:5f:b1:72:6c:
4c:6d:ee:2b:ff:41:a4:4e:bd:21:73:d7:1d:cf:04:
d5:68:64:53:fc:f6:35:fb:f5:94:63:56:71:99:65:
d8:f8:37:d9:29:d2:5f:38:ad:2b:49:ac:12:e3:95:
04:e0:dd:44:ed:13:43:35:35:e0:34:43:a6:96:e6:
ca:d9:ac:12:ab:14:b8:4e:90:46:1a:2b:3c:bd:5c:
9d:87:0f:5b:b5:1e:55:09:6d:62:0f:a3:9a:bb:88:
05:c5:75:20:bf:46:25:ea:51:2e:a5:51:f0:77:34:
b1:a6:10:1b:8f:be:98:9c:65:54:ba:1c:65:df:21:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:62:47:2A:AB:AE:B5:18:15:12:3F:A7:2A:A4:B7:B4:9E:18:B3
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:3d:24:a4:38:14:90:d7:d1:34:79:9a:47:48:e2:55:76:
2c:83:82:d8:43:b1:e4:c5:1a:e9:2c:f3:f0:5c:93:d4:7c:54:
05:c9:fc:85:0a:28:9e:d7:8f:17:5d:13:06:4b:65:bb:f3:4a:
ef:a8:e4:9f:0f:c4:34:fd:7f:c5:37:6b:0b:8d:0d:76:cd:53:
c6:3d:92:99:fd:90:91:25:0f:c7:b5:04:d1:ca:80:08:ce:dd:
94:81:f2:c6:96:df:7d:4f:0f:f0:b5:e7:62:a8:83:81:c8:69:
e5:fd:1d:42:9b:f6:0f:41:8d:14:4c:ee:3a:02:fb:ff:4a:8a:
e8:ca:bb:e1:20:ff:8b:1f:b3:50:79:91:a8:d2:be:86:bc:31:
9a:ee:6c:35:c5:35:e9:19:bd:10:6d:b6:d0:fd:f8:de:17:22:
05:fc:51:08:f2:a5:41:c9:bf:1d:5f:ea:c2:4c:e7:4e:c2:9e:
fc:8a:cd:b9:96:2d:52:ac:9f:43:ad:90:ea:89:30:7e:23:40:
29:b2:92:f0:fd:b7:0d:db:4b:52:6d:f6:ec:41:48:d1:ec:6b:
50:b1:83:be:dc:64:09:a2:c0:27:0c:6c:36:5c:e0:76:ad:b0:
02:94:dc:cc:39:c7:67:1d:b1:f6:1f:1e:3b:8c:49:7b:79:ac:
57:13:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:31:00 2025 by rpki-client