Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File: c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier: YiVcBDxaK1P7tqv7MvPPpsnmTn3gfj4B43xQd7fJlUg=
Subject key identifier: 4B:6D:32:52:24:89:87:6C:9F:29:0A:7F:3A:42:91:8D:DE:09:31:37
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer: /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial: 0197B6A056A3779959A9B637B5A9360D45CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: PQnVzYqh/+iz1sBInYMvoThxys4uQ6qUMwlW7r9bie0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:56:a3:77:99:59:a9:b6:37:b5:a9:36:0d:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=4b6d32522489876c9f290a7f3a42918dde093137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:68:7f:45:06:1d:5a:90:02:71:4f:15:4a:
61:aa:90:d2:80:9a:4d:ac:8d:23:bd:23:f6:a2:72:
59:d1:30:02:70:3d:41:89:ad:d6:de:37:c1:1d:cf:
5a:ff:63:24:00:33:3c:06:0e:86:c4:c2:1f:92:41:
fa:bf:f7:18:5f:b8:9e:b4:65:d9:af:69:98:ea:67:
9b:38:e6:51:be:07:1a:29:ae:d3:8f:f6:c7:ed:f3:
28:d0:76:03:50:ef:9c:28:23:11:fd:66:00:eb:34:
4b:2c:8d:cc:7c:7f:dd:04:24:b7:d1:18:35:4c:37:
d8:f0:c0:a8:c4:36:4b:0f:af:2b:ec:e4:b8:0e:69:
5c:10:d6:c8:de:52:94:b6:6a:34:74:f8:c2:01:51:
c4:40:71:96:6a:d9:8a:30:64:e4:2c:c4:b5:35:c9:
1a:f0:91:f4:71:d3:80:e3:dc:60:fd:13:36:dd:bf:
0f:ff:0f:00:58:1a:d2:d8:dc:ad:96:38:17:e6:bf:
ed:23:ab:17:1d:78:a7:d5:ab:5b:04:fa:cd:60:e6:
de:6b:91:5d:c0:4d:f6:f9:5c:a7:29:ac:aa:1f:51:
97:4f:ca:49:a0:65:c3:cc:49:d4:cd:10:33:d7:4a:
db:f4:c4:b1:b2:97:8d:13:8b:26:1c:23:d1:a9:a1:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:32:52:24:89:87:6C:9F:29:0A:7F:3A:42:91:8D:DE:09:31:37
X509v3 Authority Key Identifier:
keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:75:d7:88:cd:f2:d3:eb:9b:9e:2f:6f:3c:73:48:10:17:31:
d8:04:ee:e2:f3:3c:05:7b:2e:02:56:d9:99:2f:06:e6:7b:da:
33:ec:9e:d5:90:f7:6b:94:39:16:29:91:d9:59:89:36:c2:5d:
bf:5d:2e:87:67:5d:76:6b:7b:3c:42:19:a5:cf:7c:e9:c2:77:
ca:cf:26:c1:90:37:25:12:6f:34:c8:28:9c:68:f6:3d:74:47:
f4:f8:aa:d6:91:07:51:d1:61:bb:be:39:e9:01:98:52:27:13:
f2:85:74:f9:30:6c:69:34:ed:54:8f:2c:5e:48:5b:0f:3c:fe:
c3:68:6c:1d:02:4b:79:7b:f5:56:06:6d:88:d5:af:f4:10:34:
ef:85:6e:e3:92:90:07:12:c2:ff:98:51:78:70:6f:1a:89:38:
03:47:ae:9f:85:84:1d:db:64:d2:d2:5d:c7:d7:96:bc:cb:07:
39:5a:12:f8:c4:be:3d:80:1f:68:9d:f4:7c:9c:01:62:2c:55:
66:dc:85:a0:2d:85:8b:22:26:92:ae:29:9c:8e:17:15:fc:85:
2e:cb:05:08:c6:fe:74:6b:07:2d:a1:65:a3:29:6f:6b:c9:98:
64:99:de:af:77:31:1b:bf:4b:23:d0:15:44:e9:72:0d:c9:02:
d0:b1:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:33 2025 by rpki-client