Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: bwsL709wfLWs6kbkfWrJeMwn2MH4Bn88niCojCdi91w=
Subject key identifier: 45:3B:F6:DC:14:71:A7:82:E5:74:2F:1C:F4:87:E7:E5:98:1F:A2:32
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 0197B7EA478EBE04C0C93E6C20E62D9D0C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: B2
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: fknsvqmngoGLu7HFqWOeU2LMkD6Q91NYV8F2c22oDlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:47:8e:be:04:c0:c9:3e:6c:20:e6:2d:9d:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=453bf6dc1471a782e5742f1cf487e7e5981fa232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:57:c2:63:a1:30:37:30:7d:bf:0e:77:87:
c8:35:de:0c:cb:d9:de:51:27:d1:25:85:21:aa:76:
56:70:6e:d0:4a:c2:fd:93:74:fc:76:a5:12:7a:3a:
62:93:6a:6a:26:73:ea:57:36:f1:80:47:cd:d2:1d:
2b:38:17:d7:b8:88:a4:d7:b7:a3:e5:54:f4:9f:15:
6d:2c:c8:2e:9e:65:18:7f:3c:5c:32:2d:93:0c:1c:
81:26:71:c0:42:1c:8c:20:3c:e0:f0:d2:2a:12:a2:
ec:88:8c:d8:c0:61:f9:1c:41:5c:c1:8a:0c:84:0d:
fc:a3:f7:8c:4a:99:20:a0:46:a6:08:c9:a3:79:d0:
c3:5c:62:55:1e:81:9e:f0:c4:b1:7f:89:9b:16:cf:
67:04:a2:ee:e3:92:7c:5a:52:e8:2f:64:28:82:e5:
7f:fe:46:aa:35:bb:83:3c:0e:73:3c:66:7b:ae:74:
92:6e:af:aa:be:4a:1c:ce:c4:2c:0b:dd:ff:5f:28:
a1:be:2d:19:e0:84:ee:0b:8b:f7:fe:59:a8:56:cc:
92:ca:f7:6d:0d:a0:40:7a:9c:c0:34:25:4d:14:86:
97:43:55:b0:d9:22:0f:4a:d0:15:86:3c:31:20:d0:
f8:23:75:2e:9c:cf:3f:b3:25:30:cb:7f:93:ea:78:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:F6:DC:14:71:A7:82:E5:74:2F:1C:F4:87:E7:E5:98:1F:A2:32
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:65:e9:53:8c:da:ca:97:8f:43:1f:ff:8d:d4:8a:5a:d5:
b2:ef:2c:6a:05:5a:01:29:49:60:b1:60:72:3a:52:af:52:14:
63:0c:33:95:bb:68:09:ab:a7:5f:22:8e:bf:85:da:22:7d:db:
da:07:b2:d7:f5:ad:8f:d6:56:32:95:7e:a7:cc:d2:7f:8b:b1:
43:8a:0d:d0:c0:eb:ff:63:73:43:d7:85:8f:30:d7:49:bb:cf:
0a:64:18:c9:b4:5f:7b:1d:c9:5c:df:23:1c:5d:08:2f:74:ab:
38:c6:37:b7:d7:05:f1:6a:5a:45:42:72:5f:b0:16:07:d0:d2:
9d:68:03:b9:7d:2b:56:c7:d8:d7:a3:fb:09:10:45:40:b5:70:
fd:e4:c1:4b:74:d2:35:15:88:34:9f:2f:18:eb:6b:45:58:c5:
42:39:79:b3:c1:11:f6:3a:2a:2d:4d:2a:d9:ef:e5:0f:c1:df:
95:a8:4a:59:54:72:b7:74:48:44:28:5b:89:a4:27:68:52:9f:
d4:a5:1a:31:d7:2f:3b:9e:85:d4:e7:85:a7:86:cf:7b:e5:c9:
6c:f6:f3:66:a5:6c:c4:d5:5d:a1:88:89:93:3a:47:df:0b:77:
f0:98:25:94:86:8f:83:d5:2e:45:ca:7a:0a:37:38:b6:fe:1a:
93:b1:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:07 2025 by rpki-client