Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: er2KTD48bQYGSnkbIMbym8mfBubWpAq6haXeNGn5F2E=
Subject key identifier: 8C:ED:98:79:EA:92:BD:02:0D:C0:AB:3E:D8:AB:39:F6:69:EA:D2:E9
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 01974C68AEECB1F044C8E4A4C2EB427DDD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 136E
Signing time: Sat 07 Jun 2025 22:00:18 +0000
Manifest this update: Sat 07 Jun 2025 22:00:18 +0000
Manifest next update: Sun 08 Jun 2025 22:00:18 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: XWSYzrf+oR9JhXq80VSdPXHqRbMoI7MvUGKqBHc3md0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:ae:ec:b1:f0:44:c8:e4:a4:c2:eb:42:7d:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Jun 7 22:00:18 2025 GMT
Not After : Jun 8 22:00:18 2025 GMT
Subject: CN=8ced9879ea92bd020dc0ab3ed8ab39f669ead2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:9f:b5:12:c6:b1:9a:6b:84:b2:aa:ba:28:
5d:4c:8e:a5:56:e8:1b:ab:82:bd:f5:1b:ca:cb:81:
a3:b4:07:a2:9e:e2:eb:bb:bb:26:78:0c:68:d3:76:
3e:ce:ef:c3:e5:f3:34:3f:6e:fe:00:77:49:13:84:
34:79:3e:66:a2:42:cd:00:b1:12:45:33:5d:e0:ec:
7a:bf:b9:0f:14:ba:67:a0:15:8a:9a:37:4f:45:1e:
81:47:2c:87:5c:4f:30:e8:3c:9d:bb:c8:5a:35:96:
20:27:6d:a1:2f:97:9b:d1:41:a2:15:38:69:74:5a:
e0:ed:91:b1:60:cf:bd:5d:84:2e:50:15:d0:63:53:
2a:a6:63:a4:0f:f9:78:03:53:80:ba:4f:da:a2:4d:
b6:40:a7:c6:73:df:18:08:4d:ac:7e:eb:f2:6e:fd:
da:11:30:06:a4:a5:ef:ae:65:aa:1b:8d:65:6b:a6:
6f:78:ea:0c:35:7f:79:58:85:09:e4:d0:d6:08:3e:
a2:c7:f6:77:5d:f5:5c:45:a1:0f:18:91:bf:7f:25:
11:fb:e1:95:25:31:64:9b:d9:ab:22:50:ea:a3:da:
5b:65:13:10:23:da:87:17:0b:21:fe:57:15:cd:98:
a7:b1:f6:22:c1:f1:4d:53:7d:5f:3d:d2:78:66:a1:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:98:79:EA:92:BD:02:0D:C0:AB:3E:D8:AB:39:F6:69:EA:D2:E9
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:fd:b2:8d:b0:09:50:51:ad:e2:c1:f3:f9:14:30:4b:0a:
e1:12:74:52:68:96:dd:4d:9e:59:b0:cd:89:5e:75:ec:35:f7:
9c:c1:7a:95:33:df:f7:0b:e3:f4:33:b6:f5:60:ff:70:74:17:
ae:11:df:8d:2c:ce:3a:7b:3a:46:f0:d9:05:15:a3:c8:6c:74:
c7:ab:87:41:ba:70:fb:04:40:6b:80:79:62:fb:1e:93:d8:be:
13:07:3b:9e:3e:fa:d4:03:2e:f2:75:18:12:f5:de:6f:26:64:
1d:50:1c:93:66:ca:da:7a:b2:c2:04:7f:f1:73:a0:9c:6c:6b:
20:f8:02:02:26:9a:ac:e9:e2:02:ee:4f:51:0c:fb:b9:b0:ad:
d9:52:37:b0:9e:e5:47:0f:bd:49:a9:e8:53:0c:ef:c6:04:79:
6f:95:f8:c8:7b:0a:cf:96:9b:55:a2:40:d7:e0:31:a8:4c:61:
f5:07:ac:9d:b3:45:a9:0c:c2:37:9d:ff:fe:ff:ea:67:27:23:
30:6f:2c:25:2d:b2:34:b1:24:68:08:88:70:52:2b:f0:80:3b:
e5:fc:a5:61:ac:ee:d1:ef:5f:65:1b:95:9d:ff:24:30:25:3e:
69:6f:9c:6e:e1:05:d7:8e:27:f4:4c:a9:ae:24:68:64:5d:32:
26:a5:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:24:03 2025 by rpki-client