Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: o+ArCSCPW51H/htVWzw193C64zi9Ap0knvACC/AswOs=
Subject key identifier: 21:45:8E:35:41:BD:F5:37:2C:87:D7:3B:B6:48:34:20:4B:A7:2A:34
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 0197B5FBDAA9931B7254D9A756C3E8C53B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 10:01:10 +0000
Manifest this update: Sat 28 Jun 2025 10:01:10 +0000
Manifest next update: Sun 29 Jun 2025 10:01:10 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: +QYvHFSijLJYKr8k148xMTOGTjheWpWvukngzUvInfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:da:a9:93:1b:72:54:d9:a7:56:c3:e8:c5:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Jun 28 10:01:10 2025 GMT
Not After : Jun 29 10:01:10 2025 GMT
Subject: CN=21458e3541bdf5372c87d73bb64834204ba72a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:90:a4:0d:46:d2:fd:ac:64:84:1b:b6:dd:
02:7d:83:d4:36:f1:14:96:96:4c:d1:b1:1c:ae:63:
54:44:5f:1c:5d:f5:8d:e9:68:dd:97:d3:1a:df:35:
5a:84:2a:cd:a4:88:94:7c:74:bc:94:0d:5e:8a:4d:
2f:2d:f6:79:96:cc:60:10:bb:00:74:2b:fc:46:bb:
ce:fe:4e:9f:c1:51:bf:ea:e5:b7:75:9c:4f:2b:1d:
c5:99:26:f9:ce:cb:0a:35:54:5d:41:2c:30:d7:fe:
84:7e:7f:55:c6:2d:4c:68:ac:17:92:27:6e:c4:7f:
79:44:28:52:61:ec:0e:58:c8:52:3d:3e:9b:b9:3c:
d2:2d:60:4b:b5:a0:92:41:a7:42:b2:74:c3:97:4a:
16:bc:d7:e8:48:e9:99:37:f7:7b:d7:f4:2f:20:3f:
c8:0e:79:a2:26:33:52:a9:e0:b7:20:10:7e:12:60:
3b:10:47:89:9e:81:ad:08:50:e0:74:e0:e5:f5:b5:
3a:46:7e:06:c7:9e:06:1b:13:bf:6d:2a:81:43:0c:
01:72:1a:68:13:fa:ee:23:50:2f:5b:cc:47:17:9f:
84:90:ee:d3:29:c2:c3:f9:21:e6:0a:a0:64:19:2f:
fd:0d:2b:b8:e6:85:3b:05:a7:3f:6e:7c:b7:d7:95:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:8E:35:41:BD:F5:37:2C:87:D7:3B:B6:48:34:20:4B:A7:2A:34
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:09:fd:ff:12:82:f3:2f:0c:c2:43:e3:5e:29:4a:90:1c:
c1:6f:86:bf:ee:cf:2d:74:c1:38:6b:7b:b5:f1:fb:2c:ca:ff:
39:98:9f:89:35:27:8c:d1:5a:83:de:17:01:a7:47:df:72:fc:
14:d5:97:ad:b7:df:b0:02:41:6c:ab:5e:8d:a2:c4:11:19:dc:
77:ea:84:2f:1f:cf:03:ce:79:e4:66:de:fa:ad:03:16:c9:3e:
1c:8c:ab:24:cc:2e:13:a7:46:64:ac:94:a3:28:f7:11:06:cb:
d8:24:24:fa:98:30:5c:9a:00:62:85:af:1f:2e:ea:05:44:a7:
4b:ac:68:0f:50:65:04:bf:d1:df:22:c0:03:a2:67:11:eb:7c:
4d:69:e2:7d:b9:ba:c9:1e:8e:f8:71:81:cd:01:fd:5a:60:ed:
98:42:d6:de:28:ac:6f:69:e8:06:4c:3b:97:46:8b:1e:72:3e:
85:14:8c:cb:db:53:67:5e:de:49:a4:55:c4:65:1e:fa:69:a4:
bc:17:bd:87:de:ea:7e:67:12:2d:51:66:54:da:c5:cf:1f:1f:
4b:04:15:8d:c4:7f:b2:b7:fc:38:b1:eb:03:1c:cf:1d:e3:3e:
b7:f8:d9:e2:9e:6d:e2:f2:e8:49:2e:90:b8:e1:54:36:65:85:
f5:79:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:34 2025 by rpki-client