Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: o1cfUVGqz7cnY6I3mncTlQ9WcsSGCDODyoToMwtYPFY=
Subject key identifier: F8:0E:B2:10:39:C5:70:AD:2A:C2:7A:7D:4B:5B:37:AE:DE:2B:64:1D
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 0197496856199C02FA282182359159E3A157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 129E
Signing time: Sat 07 Jun 2025 08:01:03 +0000
Manifest this update: Sat 07 Jun 2025 08:01:03 +0000
Manifest next update: Sun 08 Jun 2025 08:01:03 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: vYmSE5s/dProVWAED7jw7lndTouK8is8DpJkbeQv5WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:56:19:9c:02:fa:28:21:82:35:91:59:e3:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Jun 7 08:01:03 2025 GMT
Not After : Jun 8 08:01:03 2025 GMT
Subject: CN=f80eb21039c570ad2ac27a7d4b5b37aede2b641d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:93:bf:c6:ee:63:1a:c8:fa:39:03:47:c8:
86:95:f4:9b:5b:1d:97:c4:64:6b:b9:cf:5e:27:57:
cf:64:ee:ff:9d:69:a3:ea:41:1a:0b:60:c3:c6:64:
7b:c3:0a:9f:56:bc:a3:3a:35:13:31:5c:1a:e3:ec:
7f:b6:cb:1a:00:34:81:2e:00:cb:f3:6f:2c:2e:87:
46:09:c5:26:64:d2:8f:8d:64:a7:2c:15:23:31:a1:
76:a8:aa:f8:96:ed:2d:6a:2a:00:b2:48:c4:59:98:
ec:4d:97:a8:b3:da:78:48:d9:e6:62:8d:dd:d0:fa:
a7:da:2e:99:75:eb:ee:8e:85:73:ad:c4:a1:64:49:
20:72:0c:90:be:91:0e:52:a0:53:18:89:f4:29:7c:
43:da:95:3b:08:4c:8f:09:25:6f:35:04:cf:c0:bc:
14:66:32:b6:8a:fb:4f:49:92:27:f5:34:19:ce:80:
da:11:4f:00:5f:e2:15:35:e9:46:57:c0:85:16:27:
fd:a5:44:3f:d9:00:7c:65:37:90:ff:2c:65:ec:8b:
22:71:4b:cd:b6:2d:a3:a4:98:86:9e:e9:da:d0:c9:
4b:48:47:68:52:88:36:8e:c4:3c:99:eb:c4:1a:19:
98:e9:c2:89:a6:bb:af:02:72:dc:b2:0b:cd:92:7a:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:B2:10:39:C5:70:AD:2A:C2:7A:7D:4B:5B:37:AE:DE:2B:64:1D
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:de:b9:ce:66:a5:0f:84:95:0f:7a:8d:2f:64:0e:86:cc:
e2:a0:65:4e:de:77:a8:95:82:6d:53:ed:5b:38:49:98:0a:8c:
0f:c2:c3:4d:d5:e0:e6:c0:da:a6:69:8b:2a:1d:7c:7b:cf:3b:
71:11:5e:9a:cf:75:82:2a:44:04:bc:ac:42:46:a5:4e:31:30:
31:47:cd:56:eb:78:84:00:b4:21:a4:fe:bd:71:7b:b2:be:18:
d3:8a:1f:b1:69:23:07:b6:05:71:90:85:a5:25:a3:7b:c3:bd:
a9:5c:ab:ce:12:95:72:80:71:96:3d:86:26:36:72:c5:5c:c9:
a5:64:03:85:6f:81:b7:47:f0:a6:8e:d6:e9:82:e0:49:59:60:
ad:c5:aa:b0:77:82:81:b8:83:4f:21:bd:3f:6b:ea:c1:db:d0:
f2:d3:ad:3d:0d:51:4e:f9:4a:de:8d:4d:b0:96:3a:ee:c1:a7:
1b:1b:a9:25:b3:1f:f5:13:b4:5c:4d:0e:b1:42:76:31:0a:57:
9d:d7:4c:92:16:55:21:a1:6f:68:e9:24:cf:2a:6f:cd:86:f6:
09:97:b8:7e:3d:d5:50:c3:5e:1e:f7:b0:35:d9:a0:ae:7d:49:
12:88:13:11:bd:e1:74:92:a2:46:9c:51:2b:5e:98:ee:47:a3:
d7:d9:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:17 2025 by rpki-client