Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: 3INuEYcaFL6kKyC9hHdpXIQSfsaxhSKhfUGM/7TUM1k=
Subject key identifier: EB:03:7B:72:35:57:B2:FC:3B:B7:76:AE:AE:0D:AD:B0:70:BA:5C:0B
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 0197500EDBCD19ACEA4A6B25831CE59E6670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 033A
Signing time: Sun 08 Jun 2025 15:00:40 +0000
Manifest this update: Sun 08 Jun 2025 15:00:40 +0000
Manifest next update: Mon 09 Jun 2025 15:00:40 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: zcIk9Wa01d2XA0nhPTQZRSUhqmfhKdrW9eWCeDCvEu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:db:cd:19:ac:ea:4a:6b:25:83:1c:e5:9e:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Jun 8 15:00:40 2025 GMT
Not After : Jun 9 15:00:40 2025 GMT
Subject: CN=eb037b723557b2fc3bb776aeae0dadb070ba5c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:c1:07:0c:ff:cd:92:b5:94:31:8a:67:e5:
ca:60:05:f6:27:0e:a3:c8:25:71:49:c1:61:74:d9:
70:59:3a:a9:76:c0:5f:1f:d0:db:dd:99:cc:96:e2:
7a:42:5d:62:f4:1f:23:0b:4f:b2:47:dc:53:73:84:
15:ac:2a:a2:1d:1f:43:df:23:83:c0:20:b8:9e:da:
53:56:86:2a:ef:09:a4:17:23:49:54:4e:bb:0b:74:
76:77:bd:ec:ed:b4:89:b4:c6:d1:5c:6f:7a:35:8e:
84:e7:95:e5:c8:5b:0d:dc:2f:3a:ef:5c:d0:c3:8c:
b4:d4:a0:f3:7d:4b:4f:b4:1a:69:61:86:2a:58:c6:
bd:3c:ee:81:85:ce:c2:6a:05:47:91:51:45:34:55:
71:b8:fa:0b:45:1c:23:96:c1:32:24:cc:b9:f2:89:
c9:59:cf:cd:ca:4d:51:0e:40:c0:b3:6b:85:d9:a1:
7c:c5:50:7f:69:4e:8e:49:21:4e:af:de:92:79:15:
e9:f9:63:83:e9:62:57:a4:51:43:f6:0a:5c:ff:c9:
8f:91:e1:72:54:04:01:50:59:d0:32:f4:06:a6:90:
27:ed:da:25:b8:17:01:c8:24:9c:d6:b3:c7:f7:53:
c9:aa:3a:ba:5e:02:17:78:f9:8b:2d:75:97:72:61:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:7B:72:35:57:B2:FC:3B:B7:76:AE:AE:0D:AD:B0:70:BA:5C:0B
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1b:85:ca:b1:f5:c7:b2:6e:31:b5:a1:0a:39:25:d4:50:ec:
71:fb:84:fc:f6:99:b0:50:ec:fb:2d:16:f6:70:2e:85:0e:a7:
cb:27:af:56:b9:24:9c:e7:b2:e7:cd:b6:03:14:aa:07:d1:cb:
d9:f1:06:04:6b:4c:bd:c9:9a:a4:18:11:f1:c5:2c:02:9a:65:
d0:a6:ce:61:d1:c2:b0:75:8e:7e:ec:59:1a:17:ad:d8:c0:56:
7d:d8:30:6e:03:c1:44:f1:9c:e7:01:8b:7f:8c:3b:42:24:c9:
c8:85:64:43:79:be:53:fd:33:82:8b:48:23:5c:4a:36:df:2c:
62:80:ec:fd:d1:68:4f:b2:de:72:12:da:83:50:8f:4a:b3:54:
92:87:bc:d8:f2:56:43:98:3d:62:14:fe:19:7d:da:9b:d1:22:
c4:0c:ac:06:69:45:a5:54:12:74:7e:39:58:be:c2:1d:f8:c7:
f8:63:c0:05:9f:7b:a6:67:8d:f4:2c:1a:eb:52:3f:14:94:d3:
bb:cf:e6:80:5b:db:39:79:93:91:0f:f8:01:39:5e:1b:27:e1:
eb:2b:93:4c:9e:06:33:17:b0:4a:2d:3f:62:e4:43:42:cb:b6:
af:dd:92:fd:60:be:1c:43:b6:bf:87:31:26:d4:cb:f9:9d:a9:
a8:16:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:01:42 2025 by rpki-client