Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: 7fsJTaPxUcd+vRNhCV9raNp0m0pds3rbMvrbh5Hpiak=
Subject key identifier: E5:FD:35:3B:DE:5F:52:FF:44:57:9B:5A:68:45:F6:F9:63:51:24:C2
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 0197BBC74533D2076C105E7D2CDF3AD6DCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0B0D
Signing time: Sun 29 Jun 2025 13:01:28 +0000
Manifest this update: Sun 29 Jun 2025 13:01:28 +0000
Manifest next update: Mon 30 Jun 2025 13:01:28 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: GpUYd9+bLudLPGfjIYpXPj7RKBUPgKKEMFFt6EziH18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:45:33:d2:07:6c:10:5e:7d:2c:df:3a:d6:dc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Jun 29 13:01:28 2025 GMT
Not After : Jun 30 13:01:28 2025 GMT
Subject: CN=e5fd353bde5f52ff44579b5a6845f6f9635124c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:15:d3:2b:cb:cb:cd:a5:24:be:90:ad:bc:
85:ad:0f:d0:15:73:e9:92:4b:ff:93:13:8c:36:63:
43:a9:ee:0e:05:e2:50:9f:79:71:24:8b:63:de:71:
5e:29:95:ad:ba:82:a7:b6:2e:d4:e6:73:8c:71:4f:
ff:09:7f:6d:b2:d2:d0:47:b0:a3:40:6e:21:27:d9:
48:15:d8:49:4b:53:e8:26:bf:e8:76:a1:54:f1:c1:
8f:50:cb:9a:b7:ad:6a:86:a8:23:8d:5b:d4:f2:4c:
ae:c7:79:cc:e6:5d:b2:5b:d3:6f:72:1a:78:12:df:
ad:88:c4:1b:00:61:9b:7a:d4:14:65:09:24:f3:53:
1b:7c:a1:de:ec:9d:4c:f4:90:ad:03:71:5c:67:ab:
df:85:7f:7a:d4:fe:17:12:6e:e6:eb:d1:9f:68:42:
31:da:71:c9:5d:a0:99:da:7d:53:e3:0e:f2:06:4e:
7f:40:5b:51:e7:74:66:38:6f:94:42:59:ba:4a:12:
2b:7a:45:1e:7c:1c:13:0e:71:06:f0:d4:5d:cd:ab:
c3:49:0c:a1:e2:39:df:ab:c5:e7:eb:b3:67:3c:b6:
d1:41:c3:55:5d:47:9f:d9:aa:15:73:dd:af:6c:10:
2a:a5:36:bd:8a:aa:f5:96:33:9d:dd:11:71:5d:70:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:35:3B:DE:5F:52:FF:44:57:9B:5A:68:45:F6:F9:63:51:24:C2
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:d6:eb:07:bd:7b:01:7f:72:81:b3:02:31:53:78:e0:81:
83:5d:99:87:41:26:cb:09:d1:82:f9:bf:c3:43:dd:4d:d9:6a:
60:8c:a6:94:58:84:34:9d:3c:68:ec:7d:82:39:ba:f9:0d:64:
bf:e8:2c:5a:6a:89:d4:ab:fc:bd:c8:4a:59:bb:37:02:7d:3b:
a1:6d:c0:a8:60:2b:2e:ab:c1:4d:84:c7:99:86:1b:22:d2:5f:
df:66:24:b9:f9:21:9b:92:7b:00:e9:00:34:44:26:f6:f2:f8:
3b:36:03:ab:24:cf:6e:c4:49:d3:d5:dd:84:48:c4:7f:ae:8e:
bb:68:23:a1:23:af:42:77:d6:b7:b8:45:35:a0:2d:f8:86:f1:
a0:c3:00:63:76:dd:91:65:4e:70:d1:ee:b7:0b:5f:05:04:a4:
a5:c2:0b:9c:af:7f:4c:07:e1:e1:79:8e:e8:c3:13:1d:eb:d8:
e9:cf:92:69:9a:ab:df:0d:12:76:4d:3d:21:ab:1d:9b:1c:91:
75:08:6e:dd:2a:e6:77:74:97:cf:54:53:b4:f7:7f:77:12:10:
e2:d2:8c:25:25:5f:67:75:a5:ab:a0:5f:35:eb:4c:5a:2c:41:
c2:7e:6e:2f:e6:06:ea:3b:ad:a5:e1:4f:f5:3c:1c:53:f8:c9:
6f:1a:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:38 2025 by rpki-client