Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: lhnxwVaMLiYKyp5c3e0pCzFDfffr0OZMMU+83H0c6CI=
Subject key identifier: 33:F5:93:36:D8:73:B1:B7:DA:3D:5A:57:2A:4E:F6:CA:1D:56:7F:2E
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0197B88EAEF830B307F0559E538BF85E30BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 22:00:47 +0000
Manifest this update: Sat 28 Jun 2025 22:00:47 +0000
Manifest next update: Sun 29 Jun 2025 22:00:47 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: Mbsp5MMgeQbhZvlkG+drnA4Qw69zgnjRgsTuwdo2+Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ae:f8:30:b3:07:f0:55:9e:53:8b:f8:5e:30:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jun 28 22:00:47 2025 GMT
Not After : Jun 29 22:00:47 2025 GMT
Subject: CN=33f59336d873b1b7da3d5a572a4ef6ca1d567f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:69:f9:73:73:84:bc:c5:6c:a6:9f:f2:16:
ca:56:01:ae:32:12:35:7e:92:4c:28:f5:f3:d2:f4:
e8:20:c4:89:6c:e2:5c:7a:29:7d:b3:d0:b9:8a:c9:
1e:36:b9:79:96:f3:61:bd:46:f2:c7:4a:48:7d:85:
f9:79:37:b3:3b:ba:f4:bb:2a:ac:ea:63:3c:a0:2e:
f5:b7:99:7d:d9:bf:bf:2f:da:03:41:82:37:97:86:
ac:90:99:20:3a:18:44:f2:89:19:63:c0:5d:b9:76:
b6:a3:b4:fa:2c:26:41:ae:1a:6a:82:f3:1d:ca:5a:
94:07:c2:33:e9:96:62:15:f2:d0:ed:78:7e:6b:49:
80:41:a9:07:06:0f:58:85:f4:33:86:80:18:30:8d:
1a:5b:85:4b:ae:18:d4:99:1d:ad:63:e4:45:b2:3d:
02:1d:bf:18:50:7b:2e:a3:67:08:46:0f:e2:1e:ad:
a3:42:4a:90:8f:50:f4:1d:62:26:03:a8:c3:76:40:
78:c9:eb:15:b1:4f:89:2b:0e:9d:8b:9b:be:e5:36:
b1:e8:1e:73:e2:97:2b:8b:ca:bd:f9:2c:25:58:ff:
9e:10:2e:1c:fa:ce:97:74:33:80:ef:63:5f:ca:05:
7e:98:54:f2:81:8d:97:6d:a4:08:bb:8d:0c:53:a1:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:93:36:D8:73:B1:B7:DA:3D:5A:57:2A:4E:F6:CA:1D:56:7F:2E
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d4:aa:01:1b:da:31:c4:44:c0:42:d5:56:16:84:f3:19:9f:
38:9b:bb:cc:c3:4b:53:a3:b2:66:b6:d3:71:c8:ef:9c:44:79:
f3:e4:43:2a:52:f8:ba:91:38:e4:6d:5e:46:40:8f:2b:eb:c1:
fe:d9:88:9d:41:da:78:94:e5:6d:03:49:63:3b:d2:22:f0:d8:
2d:65:6a:da:91:ca:79:59:33:f1:5b:80:ef:f2:0b:d5:c3:f0:
4b:eb:21:29:c5:b9:35:8d:41:25:16:ab:cf:61:d5:6a:3c:ee:
84:b7:42:e6:aa:8d:15:08:a0:04:d9:ae:30:fc:37:4a:8e:bc:
24:58:3c:62:20:e7:3a:64:c8:72:e1:e7:10:85:b4:4f:fe:db:
4f:d9:7e:87:b8:6b:48:44:f6:bc:16:8d:3d:b1:ae:ee:c6:05:
9b:7e:e8:10:6e:34:0e:91:c0:64:39:2d:59:dd:46:9a:fb:bb:
69:2e:7d:11:37:41:c6:c8:36:d5:ee:b8:25:32:0c:78:c8:69:
98:e8:ee:5f:50:11:7e:e7:c8:a5:2a:10:5f:77:e8:20:c8:17:
27:c3:30:52:01:0f:0c:25:5d:5c:23:a5:db:74:eb:db:4c:c7:
98:bf:42:98:8a:81:5b:a9:9e:5c:a4:50:80:10:7c:a8:85:2a:
2a:6d:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:05 2025 by rpki-client