Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: 9Ks+t7bDS4wMVD+9sBoQFp4VUKbFgSBQHZdw5UnEOLA=
Subject key identifier: E5:41:E3:09:ED:0F:63:95:1D:FE:01:59:62:1E:E1:C1:96:E5:0B:92
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019749684AE5E2DD5FA32B6E545636255BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 01A2
Signing time: Sat 07 Jun 2025 08:01:01 +0000
Manifest this update: Sat 07 Jun 2025 08:01:01 +0000
Manifest next update: Sun 08 Jun 2025 08:01:01 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: SCXIOmyTieVdBdgyaeeOts3tJAoxzwvMntcrHsSqNkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:4a:e5:e2:dd:5f:a3:2b:6e:54:56:36:25:5b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Jun 7 08:01:01 2025 GMT
Not After : Jun 8 08:01:01 2025 GMT
Subject: CN=e541e309ed0f63951dfe0159621ee1c196e50b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:c4:0b:de:78:2f:3f:a2:9b:97:49:f0:11:
37:43:a4:2b:85:91:f2:b2:8e:a5:e9:83:25:21:a8:
51:52:8c:b9:cf:e1:98:19:fd:47:18:b0:6e:dc:30:
56:eb:ed:e3:9e:f5:53:74:08:8a:11:32:08:57:75:
15:c6:fa:bd:92:a7:ef:d2:09:7f:83:72:b6:bb:a4:
6c:8a:55:85:52:b8:63:f2:c6:df:d4:23:36:98:af:
da:26:e1:2a:08:26:7b:e5:38:ba:eb:e0:eb:07:8f:
b7:69:fb:0b:bd:5d:0d:5b:60:6d:26:4b:f0:a7:48:
09:00:80:7c:0e:cd:20:06:6e:df:a2:68:87:f6:c2:
2f:0a:bb:33:13:39:88:f9:96:58:ac:8f:78:c0:9d:
57:61:67:5f:5c:4d:cd:28:db:f9:a6:41:b1:51:53:
2e:72:89:d2:b6:06:c4:ae:76:91:30:e5:a5:74:eb:
b4:ba:b9:05:9a:ee:62:60:f0:93:89:80:87:fa:d1:
9e:91:c0:65:02:47:c3:01:f6:2c:01:54:38:b7:f8:
60:10:c9:fd:39:7a:4e:d2:1c:c1:a2:1f:95:cd:2e:
f2:36:5e:16:b0:8a:a4:55:d0:a9:35:ea:a4:58:13:
19:49:cf:8d:6b:a4:05:5a:25:7c:c9:65:44:2b:09:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:41:E3:09:ED:0F:63:95:1D:FE:01:59:62:1E:E1:C1:96:E5:0B:92
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:ab:e0:a8:5b:8c:97:92:e2:05:84:3c:c0:8e:d6:8a:42:
10:93:b4:46:62:ea:50:cc:b6:fe:14:78:4d:09:62:47:7a:31:
a8:d2:d1:ba:7d:d3:d0:2f:99:70:19:21:ed:08:9b:03:0f:c0:
15:7d:b0:51:ee:6e:2d:1a:5b:40:b4:9f:52:43:77:8c:46:2b:
12:a0:38:ac:e1:f9:1f:85:17:6f:4b:3b:05:e5:33:d4:4f:c9:
f4:28:a5:50:17:c4:08:d5:4a:bf:00:a6:70:fb:04:bc:36:ed:
e6:c8:ea:a5:c5:80:b0:64:b2:12:33:d2:31:0b:95:37:b7:6e:
ae:d8:32:7f:f2:06:f6:f4:3d:79:ae:be:75:85:55:47:27:2b:
2a:eb:bd:1b:f8:0c:2b:d3:49:b2:8f:a6:06:f6:b7:d4:c5:51:
92:65:cf:c6:5d:b9:6b:9e:8d:5e:3d:97:66:83:ba:37:eb:97:
e5:31:72:16:07:2a:66:a5:05:bb:b8:bb:83:ed:f4:95:73:2a:
2e:a0:06:39:9a:99:30:ca:d9:65:e9:49:7f:45:29:27:60:67:
fb:36:2e:15:c1:7a:84:9b:5b:24:d8:78:1f:b9:eb:3b:70:77:
23:3e:e2:06:72:a0:f6:d6:7c:46:37:67:5c:7d:b7:10:fb:bb:
b9:2f:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:37 2025 by rpki-client