Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: X+EVqFl1LeQc97uZNl++ww5+b2X7iBuqkeIcJgya42w=
Subject key identifier: A7:68:87:53:26:1D:D3:6F:3C:E0:45:7F:3F:2B:D9:B6:81:D4:42:9F
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0196BB5AF6C9F5561DDFF5B6A1525B3DA8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 14C0
Signing time: Sat 10 May 2025 18:00:22 +0000
Manifest this update: Sat 10 May 2025 18:00:22 +0000
Manifest next update: Sun 11 May 2025 18:00:22 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: UrcgKq7KI3XhLr+ecfNUShgFtEvKlMDavBakDWEpCmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:f6:c9:f5:56:1d:df:f5:b6:a1:52:5b:3d:a8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: May 10 18:00:22 2025 GMT
Not After : May 11 18:00:22 2025 GMT
Subject: CN=a7688753261dd36f3ce0457f3f2bd9b681d4429f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:4e:95:fe:9d:19:70:c9:13:33:f5:f8:c5:
84:37:7c:f2:13:b8:84:34:28:45:7b:eb:04:62:e7:
1c:32:9c:69:41:fb:1e:2b:a7:26:4e:3e:9d:1f:92:
b7:80:de:e2:f6:40:4f:47:5e:c9:c0:bd:29:24:40:
a9:17:d5:5e:bb:4c:a2:fe:8a:1a:43:b0:e4:1a:76:
d9:b2:20:71:46:1a:3f:b6:7f:5d:73:8d:32:cf:c3:
5e:b0:6c:a3:9f:3b:f7:cf:76:d0:14:3a:7f:69:ef:
31:de:e4:65:d7:98:6f:5e:0e:70:96:f2:e2:b7:f9:
d9:0c:2e:6d:f2:56:e0:21:a0:6e:62:ce:08:b8:3a:
0f:8c:68:c5:4a:0d:90:c0:38:e8:45:0a:9a:48:f6:
02:c3:30:59:66:54:ed:ed:b4:33:a0:38:02:62:48:
dc:db:4d:d7:7a:a2:d7:a6:3e:92:05:22:89:54:1d:
80:87:a1:88:ab:32:c1:f6:22:10:20:9c:61:9c:2d:
ee:99:29:10:15:fc:11:45:6c:36:d1:48:4c:9e:ef:
de:53:60:76:65:98:d1:d9:df:1a:0c:a7:ce:37:ff:
20:0a:04:d7:cb:ab:f4:5c:8f:01:a6:d8:95:f3:81:
3c:61:d4:2c:85:3c:48:57:b1:92:0a:57:66:67:9b:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:87:53:26:1D:D3:6F:3C:E0:45:7F:3F:2B:D9:B6:81:D4:42:9F
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:3e:06:86:c2:9f:d8:32:a1:4a:24:de:58:4f:de:d2:68:
9d:36:0e:65:34:73:47:ef:ca:71:4c:9c:24:36:56:3e:61:e1:
00:ef:09:99:3c:9e:d4:70:86:e2:d5:ec:dc:72:9f:01:dc:e1:
65:06:b1:b5:a9:3a:4f:51:ba:a3:69:cd:88:74:75:1f:22:f2:
6f:1b:30:16:45:6f:f2:26:18:10:11:44:04:8c:f3:e3:86:d4:
55:14:a1:1f:fe:33:3c:24:20:60:3c:92:e5:4e:32:30:cb:06:
74:80:ef:04:80:1b:fb:ad:e2:41:d5:7f:ea:4f:55:9c:07:65:
e0:c1:87:69:c3:92:17:72:68:8b:ad:a8:d7:95:59:55:94:fe:
04:c6:45:f8:4d:85:0e:da:3c:ed:00:09:4c:70:0f:b1:52:cc:
d4:34:bb:e1:2a:f1:97:90:d1:4e:7a:2d:ed:f4:c5:8f:9b:9e:
8a:a1:54:d0:49:9d:84:2b:a6:62:95:73:7c:a7:c0:54:b8:15:
e9:0d:e2:80:c6:94:b1:6f:57:08:e8:e2:8b:b4:14:21:d9:88:
38:a4:f5:cd:22:3f:b7:79:ff:e3:9e:ec:c7:77:46:e2:69:42:
d3:86:65:7b:27:ba:18:40:2a:0a:ba:54:e3:2d:a9:08:4b:f9:
f0:2b:12:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WvbJ9VYd3/W2oVJbPajqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4
ODBmM2IwHhcNMjUwNTEwMTgwMDIyWhcNMjUwNTExMTgwMDIyWjAzMTEwLwYDVQQD
EyhhNzY4ODc1MzI2MWRkMzZmM2NlMDQ1N2YzZjJiZDliNjgxZDQ0MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCtOlf6dGXDJEzP1+MWEN3zyE7iE
NChFe+sEYuccMpxpQfseK6cmTj6dH5K3gN7i9kBPR17JwL0pJECpF9Veu0yi/ooa
Q7DkGnbZsiBxRho/tn9dc40yz8NesGyjnzv3z3bQFDp/ae8x3uRl15hvXg5wlvLi
t/nZDC5t8lbgIaBuYs4IuDoPjGjFSg2QwDjoRQqaSPYCwzBZZlTt7bQzoDgCYkjc
203XeqLXpj6SBSKJVB2Ah6GIqzLB9iIQIJxhnC3umSkQFfwRRWw20UhMnu/eU2B2
ZZjR2d8aDKfON/8gCgTXy6v0XI8BptiV84E8YdQshTxIV7GSCldmZ5swDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdoh1MmHdNvPOBFfz8r2baB1EKfMB8GA1UdIwQY
MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt
NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh
LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYo+BobC
n9gyoUok3lhP3tJonTYOZTRzR+/KcUycJDZWPmHhAO8JmTye1HCG4tXs3HKfAdzh
ZQaxtak6T1G6o2nNiHR1HyLybxswFkVv8iYYEBFEBIzz44bUVRShH/4zPCQgYDyS
5U4yMMsGdIDvBIAb+63iQdV/6k9VnAdl4MGHacOSF3Joi62o15VZVZT+BMZF+E2F
Dto87QAJTHAPsVLM1DS74Srxl5DRTnot7fTFj5ueiqFU0EmdhCumYpVzfKfAVLgV
6Q3igMaUsW9XCOjii7QUIdmIOKT1zSI/t3n/457sx3dG4mlC04Zleye6GEAqCrpU
4y2pCEv58CsSeg==
-----END CERTIFICATE-----
Generated at Sun May 11 02:30:46 2025 by rpki-client