Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: t0WCl1P8GBVcNBFngcyWuUSTF255w1gt33I4eZ5FVwo=
Subject key identifier: E3:74:7E:76:C8:E9:47:07:58:74:63:6F:A8:E3:80:2B:BE:32:79:B0
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 0197B74587D55955F2E47FDDA13F3FF67268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 1512
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: Y3hFASYa76/Ysm64vReJxrFuWJT4Q2nWnm7gfPdZnUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:87:d5:59:55:f2:e4:7f:dd:a1:3f:3f:f6:72:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=e3747e76c8e947075874636fa8e3802bbe3279b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:7d:95:30:6a:84:53:52:8e:b2:25:09:0e:
e0:be:23:1d:84:41:d7:ac:ce:0f:d8:6f:7a:22:f3:
02:ea:1a:75:c0:db:8d:28:2c:c1:ea:66:c9:d6:9e:
5b:32:7d:de:ba:e5:37:3d:38:16:2d:c5:b6:32:e7:
44:1a:46:2a:63:31:f6:c3:c5:7e:33:ed:70:bb:3c:
eb:db:f5:a4:00:0b:8c:95:b2:80:92:53:38:e4:79:
2a:c0:9b:3a:c3:c3:f4:f9:7e:aa:ca:67:62:a8:46:
4c:08:9a:b7:56:fc:f0:7c:67:c5:c0:a2:82:56:d9:
52:7b:eb:fc:00:3c:c3:80:fc:4c:d0:3f:3a:9e:2d:
a1:0e:41:3e:bd:c8:d5:c4:8e:a4:a0:3b:a0:a8:ae:
58:d1:dc:0b:77:7e:de:94:bd:c8:28:1c:c7:2a:2d:
44:35:ed:27:e9:b0:8b:46:41:b7:ad:61:42:4b:28:
61:98:d9:7b:11:45:9b:b8:ef:ed:3e:44:33:ce:68:
5e:f3:92:b8:cc:78:52:c0:3d:3b:c2:af:dc:04:d9:
28:bb:53:33:28:58:ec:fe:7e:ea:bc:53:2b:81:b5:
fd:85:12:ec:09:5d:27:ed:8f:1c:c9:a8:2d:c1:81:
06:30:1c:80:8c:9f:42:23:ca:5a:82:8e:80:44:f4:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:7E:76:C8:E9:47:07:58:74:63:6F:A8:E3:80:2B:BE:32:79:B0
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:10:56:f1:d7:c6:68:ad:eb:41:89:b8:6d:a5:8c:8a:71:
1c:24:af:e2:6f:59:1c:56:f5:b7:f7:dd:10:2e:fb:75:76:b1:
8b:72:7a:75:1f:ee:77:99:18:fc:c7:39:86:9e:dc:a8:f0:7d:
7b:4b:7f:6f:b6:00:a1:78:65:f9:49:1b:f7:a0:aa:7f:c8:6d:
f7:10:24:19:c3:6a:fd:ee:2e:2b:3c:23:90:13:ec:ad:61:b7:
f2:4b:d2:5e:1d:fe:32:15:74:84:80:3c:6b:70:17:35:dc:da:
47:7f:c3:d5:97:31:ab:5b:4c:ef:cf:a0:f4:13:71:c1:24:23:
37:0e:ba:ab:85:48:42:fb:69:9b:b2:b2:87:6c:a9:b0:a4:3c:
05:46:ac:cd:2f:e1:31:c6:14:ef:93:48:3d:7b:d7:58:df:68:
5b:2a:1b:16:9c:37:a8:cd:25:42:60:7b:45:06:29:7e:c7:32:
85:a5:15:82:31:67:10:c4:7f:df:1f:72:a8:ba:dd:22:4b:de:
cf:f5:09:a7:5e:07:c0:a2:f2:47:05:12:79:fc:1e:40:74:dd:
c9:80:bd:dc:ba:5b:55:1c:80:f9:5a:92:a7:a2:c2:d2:b0:ae:
b6:20:22:c4:22:14:82:ef:72:6f:3a:8d:d1:4d:a0:0d:fb:b6:
a8:17:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:05 2025 by rpki-client