Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: Rf+/016MaITsYHHmC+7fHdt3NZ5RKZIFlTty6BNEtVs=
Subject key identifier: 33:4E:B5:B8:4F:45:C6:AC:3E:B1:E1:8F:E6:7F:0E:CE:97:7B:50:91
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 01975045FDFDC82DBA39B5CD6500833D5383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 16:00:53 +0000
Manifest this update: Sun 08 Jun 2025 16:00:53 +0000
Manifest next update: Mon 09 Jun 2025 16:00:53 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: ZMk9umehFFSypIiqtBqQBYlasLNV4luwUyyQpH5pvvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:fd:fd:c8:2d:ba:39:b5:cd:65:00:83:3d:53:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Jun 8 16:00:53 2025 GMT
Not After : Jun 9 16:00:53 2025 GMT
Subject: CN=334eb5b84f45c6ac3eb1e18fe67f0ece977b5091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:f7:83:bb:c5:b7:0b:0b:8c:f1:b2:78:20:
69:83:07:ea:b3:82:b9:c2:d1:8f:d1:7e:0f:77:4d:
c5:ce:18:0c:dc:e8:4c:5d:94:7e:40:cc:1a:a5:b4:
7f:c0:56:8f:9e:e3:de:2c:9b:85:32:bd:be:db:ee:
72:e3:d0:68:f4:81:a3:46:d0:0a:27:f4:64:45:02:
ee:f6:10:40:58:db:72:35:1e:fc:fc:45:38:21:18:
d6:a9:05:c6:29:a3:7e:cb:cd:ee:23:3c:16:51:98:
a4:5a:07:01:d3:6b:11:86:69:2e:72:c6:7b:12:a1:
dd:bd:8e:ef:77:01:31:b7:2a:26:6f:75:53:f7:e8:
e0:ed:e9:b1:2f:a9:0a:da:74:05:c9:bf:cd:9e:28:
53:9e:8d:96:5b:6e:2d:af:6b:e7:d2:07:ef:79:97:
7f:d4:d8:f1:ac:30:c7:03:2f:74:8d:b2:92:e5:de:
37:8a:6f:a5:7e:7d:12:f7:60:66:06:a1:c4:96:da:
fd:53:80:c6:c9:4b:7a:48:88:71:88:86:72:82:4d:
1f:bc:28:84:55:88:8c:2a:f0:c0:1c:a2:11:48:6d:
d7:19:d8:0b:0f:50:81:a8:4e:0a:a2:bb:d9:c0:29:
5f:dc:6c:ea:3a:5b:aa:9a:ed:ba:af:db:52:18:da:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:B5:B8:4F:45:C6:AC:3E:B1:E1:8F:E6:7F:0E:CE:97:7B:50:91
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:49:a0:85:fc:72:b5:3b:e0:ba:6c:e9:db:5e:3e:10:72:6a:
34:81:93:3c:4f:4b:16:89:f0:be:1b:8c:15:fd:93:69:3e:b7:
9a:8b:87:99:84:54:9a:0f:e2:55:48:4b:58:c9:9f:0b:41:ac:
a6:52:39:00:ed:1a:eb:a4:05:a0:42:2e:12:c7:f4:ee:21:74:
cc:7e:3a:e7:7f:ed:44:57:a0:e8:84:d5:a1:fd:8f:77:1c:30:
70:0a:2d:f4:0d:cc:60:9c:da:02:e6:8e:ad:98:a9:01:14:b9:
7c:8a:6b:7f:33:91:ed:ca:e2:d3:4a:53:3a:b8:2d:38:51:50:
df:48:3b:ed:87:3a:3f:3a:14:e1:32:d3:59:6a:8d:71:99:28:
1f:c8:9e:f1:6e:bf:bf:68:53:b0:19:a6:e6:06:56:44:79:2c:
55:6d:60:2c:bb:0a:5c:23:89:82:53:da:4b:c9:48:67:fe:9c:
17:d3:d2:a6:ba:93:a9:b6:17:14:d0:85:9b:39:e8:26:82:2e:
db:61:4b:6f:d9:d1:63:c5:70:4b:92:36:22:3b:e9:4d:0a:ec:
85:07:d4:70:25:f5:21:e2:85:8f:0c:97:43:6c:33:e4:a1:ab:
c5:61:6d:45:52:71:94:05:c5:07:c2:d0:27:e5:98:f3:4d:de:
17:23:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:35 2025 by rpki-client