Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: 3deG6i+ArouZ45NzYA1TDIa6txNy9M3BuiBm32+scOw=
Subject key identifier: 9C:9B:42:CE:93:B0:34:75:0E:FC:04:52:BD:61:3A:4D:51:D4:E1:A8
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 019747425468BCAA9F39D36D0FB4D6BD3029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 22:00:18 +0000
Manifest this update: Fri 06 Jun 2025 22:00:18 +0000
Manifest next update: Sat 07 Jun 2025 22:00:18 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: UIy+nAx1yskEGOFeXIUtdApSRAVdFVkknzJ8z/8V61g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:54:68:bc:aa:9f:39:d3:6d:0f:b4:d6:bd:30:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Jun 6 22:00:18 2025 GMT
Not After : Jun 7 22:00:18 2025 GMT
Subject: CN=9c9b42ce93b034750efc0452bd613a4d51d4e1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:9e:97:8d:11:e8:15:56:de:06:1e:7d:77:
35:50:f7:54:24:60:d6:27:7c:dc:97:5d:41:71:ae:
a3:d0:24:96:59:66:8f:58:cd:9e:b0:50:2e:dd:2e:
cb:59:3a:dd:aa:c3:c5:2f:f6:f1:7d:d7:9a:12:2c:
3b:18:8d:b2:ed:bc:a4:80:7c:43:f2:1a:1c:03:6e:
49:3a:e3:ea:fd:18:a2:14:28:10:27:27:5a:3a:df:
48:d0:37:1e:b7:66:ba:8e:fd:78:b8:b6:a6:11:2a:
f9:55:e6:91:09:27:28:22:eb:54:59:17:6f:d8:f2:
a2:45:5d:5b:fc:fd:e8:28:96:93:38:fc:51:ec:f8:
6e:d3:88:51:e1:f1:2f:3d:1f:dc:02:5b:13:c6:cc:
c3:f8:3f:33:d1:2f:f3:29:06:2e:45:92:7b:58:a6:
0b:99:e0:84:f4:bf:ec:d0:ff:98:27:a4:3f:f0:53:
07:17:00:e5:99:61:31:a1:8c:29:e5:53:7d:9a:4c:
17:55:a3:13:f8:14:9f:6d:12:c2:d3:99:c6:27:4c:
cd:3f:d9:3d:be:87:65:3b:00:f8:46:00:94:c1:ec:
01:35:ca:76:ab:98:53:8b:60:98:a9:91:b2:00:8a:
99:e6:bb:a3:f2:4a:cb:27:79:77:58:eb:96:80:c3:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:42:CE:93:B0:34:75:0E:FC:04:52:BD:61:3A:4D:51:D4:E1:A8
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:5b:e8:1c:aa:58:d0:19:c8:bd:c1:1c:c2:63:a7:ef:05:
e1:da:66:85:9b:ac:01:fb:1c:81:7a:cb:0a:2c:f5:c3:c9:73:
8a:8b:65:79:16:49:bb:19:3a:70:f7:4a:38:42:a6:77:bd:7d:
09:16:b4:71:75:f9:06:ea:99:88:61:d3:b2:e5:d2:61:92:60:
95:f0:82:3b:63:dd:2e:dd:13:06:ea:41:63:34:a2:27:40:82:
12:a2:c2:ad:a6:61:2d:15:e3:a6:92:33:20:99:92:e9:c7:cf:
08:a1:4b:1f:64:7c:d9:7c:7d:f5:ca:ee:f6:8c:82:a7:47:a7:
70:2a:f9:0e:5d:c5:44:45:20:36:fc:f9:08:b6:43:0d:08:6b:
de:02:59:d0:31:f5:3c:53:b9:27:09:30:d7:bf:6c:f1:31:f3:
0a:ea:fc:06:ef:4d:fe:5a:fe:7e:e4:ce:46:54:0e:b3:56:75:
24:bd:6c:11:a2:54:c5:ea:46:2b:09:0f:f9:bd:67:5f:93:08:
c5:79:78:cf:f1:75:d7:d5:10:17:65:b4:d5:86:10:dd:23:e5:
3d:8b:2f:a3:ad:cf:6e:1b:5a:a9:49:66:5a:d1:81:a0:c3:f9:
a5:41:da:e7:f5:dd:64:cd:80:04:7d:3d:7a:8e:4c:7d:88:35:
03:be:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:24 2025 by rpki-client