Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: bg/OHStjVUK8TPHhNa7nAbq3HlWs6ipzbDAIW2V3MYg=
Subject key identifier: 09:20:C5:E5:A1:B3:57:29:FE:B0:B5:1A:4C:BB:DF:D8:73:3B:A8:DC
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 0197B88EE1D1C9F9EDE5640333706525D9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 05DC
Signing time: Sat 28 Jun 2025 22:01:01 +0000
Manifest this update: Sat 28 Jun 2025 22:01:01 +0000
Manifest next update: Sun 29 Jun 2025 22:01:01 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: slLG9IJXHuGGfh1awza4ue50TunR9alVjG5ijT1mIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e1:d1:c9:f9:ed:e5:64:03:33:70:65:25:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Jun 28 22:01:01 2025 GMT
Not After : Jun 29 22:01:01 2025 GMT
Subject: CN=0920c5e5a1b35729feb0b51a4cbbdfd8733ba8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:dc:a0:7d:3b:83:0e:47:18:70:a7:2c:72:
e8:04:6f:d5:da:fc:df:64:2e:fc:5e:14:12:df:af:
ee:b7:0e:ec:7d:b2:ac:47:42:b9:4c:b9:c2:66:f7:
82:42:5b:d7:35:56:37:7f:cf:47:20:18:f9:e0:58:
02:86:dc:98:dd:c5:38:28:22:d4:6a:2b:ef:9b:14:
95:fc:01:7c:a4:7d:63:0c:e3:a3:f6:74:59:50:97:
c6:3f:ba:7f:a5:87:42:b0:1e:12:c8:07:f4:b5:e7:
70:89:4e:67:be:61:6b:4f:ae:8c:9c:ce:73:ea:fe:
86:eb:8a:fb:f8:99:b9:ce:7a:47:da:3d:bd:f4:7c:
15:d6:33:ab:24:75:56:7e:ab:67:8d:76:45:c9:47:
8d:ee:4c:b1:b3:dd:d7:ab:21:55:16:f3:b3:05:39:
62:78:47:c5:49:d0:93:d6:66:4d:01:50:ad:51:62:
6d:1a:52:4d:c9:83:9d:ed:16:4e:72:5f:33:5a:a9:
04:19:41:07:a2:50:67:68:96:b3:2c:67:5c:e1:a3:
d9:db:55:97:b2:9b:6f:de:26:4c:12:6f:d7:06:97:
af:94:8c:cb:e3:20:18:33:67:e5:57:26:e8:af:86:
99:5c:8a:6a:e7:b4:63:1a:48:47:db:8c:a4:85:ec:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:C5:E5:A1:B3:57:29:FE:B0:B5:1A:4C:BB:DF:D8:73:3B:A8:DC
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8c:76:40:d4:ab:76:f6:8f:18:c1:c9:b1:b6:b8:91:d2:d7:
8a:9b:6d:2d:1f:57:7f:51:50:6c:62:24:fc:b6:0f:73:ae:84:
f3:cc:7b:24:03:ca:c2:d0:76:3e:ec:1e:49:c1:89:37:e3:2f:
5d:e9:ab:7e:2b:f6:7c:53:34:6f:fd:ad:60:33:72:65:88:8a:
fe:7e:d6:a3:51:dc:65:20:a6:ac:ff:4e:34:67:ed:bd:cd:3f:
26:01:e7:f2:2f:83:7f:78:d9:fd:fe:59:ee:eb:da:ce:df:72:
07:b2:3d:ed:96:43:0b:fc:64:0e:80:10:64:94:2e:3c:76:e4:
d0:71:ae:4a:7f:ea:56:ed:e5:21:6b:4e:d1:7d:55:49:60:38:
ff:6c:7a:06:2f:00:5f:5c:89:ec:9f:fe:96:40:dd:35:8d:ff:
c7:d2:c7:a8:b8:cc:5a:13:63:c7:f4:52:4e:50:7e:4a:fb:21:
e4:a0:b2:a4:47:20:38:d1:17:34:e2:0f:92:cc:0b:62:f5:13:
fc:c8:2c:49:1d:00:d9:b4:e0:3e:c8:8d:95:6b:ff:df:03:7d:
2a:73:91:67:0c:0f:9d:73:64:dc:ae:b7:c2:1d:f2:28:95:8f:
b2:42:c3:27:1f:73:c7:71:6b:e5:e5:eb:e7:55:7c:bb:cc:6f:
10:2d:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:46 2025 by rpki-client