Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: j7MpvQMO8hpaOuL5avQ/J4cD/7hi8fB9qCQSNSZuaPg=
Subject key identifier: 4D:39:11:7C:9C:7B:C2:C0:83:DE:48:BE:BE:0B:17:60:53:E2:48:6A
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 0197B6A1A67C0700C9B7DC82B4214E6B2DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: 4leEjTULjOKlE3G1tjGbmn/T17Ec0pEEGf5Q/oKqLGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a6:7c:07:00:c9:b7:dc:82:b4:21:4e:6b:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=4d39117c9c7bc2c083de48bebe0b176053e2486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:13:66:25:b9:1c:10:1e:3f:ee:91:8b:dd:
ae:3e:dc:bc:8a:af:09:71:f4:d6:48:c6:c3:fe:55:
94:96:ed:a8:d4:6a:c0:70:63:3b:ba:25:1a:3f:33:
d5:64:36:26:e1:b0:9f:39:60:62:36:11:2a:51:aa:
cc:08:42:dd:c3:6d:df:00:c1:eb:46:9f:d3:4e:f4:
5d:67:0e:36:72:a7:95:cd:2c:dd:6f:e8:87:b1:b4:
3d:3e:b0:37:f3:bc:e4:66:14:37:8a:0b:22:1c:a8:
1b:8c:00:a7:91:91:2c:e3:db:cc:a0:07:b7:bf:54:
a5:89:44:c0:d7:95:20:a9:40:71:3b:02:08:b9:dc:
8f:a2:8c:4d:88:0f:bc:01:74:48:99:82:6b:60:31:
6c:b6:90:0d:2e:84:8b:c9:31:e8:c9:0d:42:03:54:
59:63:f8:69:b7:67:a9:fe:28:5b:67:73:0a:a7:e7:
db:69:c2:f9:2c:96:5c:34:6b:4f:72:fe:3d:f2:dc:
18:23:f8:8a:2d:93:ff:7f:53:c6:ea:e1:58:3c:62:
8c:c7:3e:e9:be:3c:3e:3d:5e:3e:d0:19:9d:d5:e0:
46:e1:21:12:75:2a:c5:bd:16:5e:10:aa:a9:80:f7:
35:54:ae:d8:3f:1d:de:93:d7:8d:a2:86:7e:e5:69:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:11:7C:9C:7B:C2:C0:83:DE:48:BE:BE:0B:17:60:53:E2:48:6A
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:05:c9:fa:8d:c2:4e:b9:0a:f0:6c:fc:45:a9:8d:dc:6f:19:
00:d5:86:c6:83:4f:c2:db:01:6e:4b:3a:c3:19:cc:b4:fa:3d:
7e:fe:91:7a:06:98:4f:d4:26:13:bb:f0:92:dc:1a:86:27:f4:
a4:d1:1d:33:73:89:60:c4:fa:68:d9:bf:a1:12:b9:82:e8:36:
88:3a:c3:29:b1:c1:85:13:c8:97:bc:b4:00:5a:41:f5:e4:a5:
93:f3:fa:a3:c0:8a:34:9c:7a:97:6f:16:37:c3:28:1a:e6:32:
f3:d2:97:4a:dd:cd:f8:4f:ff:96:4b:b1:4f:52:5a:e9:17:56:
da:30:e8:b5:13:cc:ea:4b:1a:86:84:92:d5:ed:fd:c9:be:dc:
8e:24:f8:3d:8b:2b:25:1a:6d:e2:00:1c:d4:d5:ad:b9:ca:7f:
2a:d8:a0:66:c2:85:23:bd:1a:42:09:86:78:7b:32:71:cb:b2:
53:5f:22:a2:da:de:e5:21:58:16:49:d7:9b:93:b4:c0:1e:c9:
5e:d4:f3:0e:02:9d:0f:01:90:d6:7a:8e:61:d1:e1:3a:b4:f6:
d1:58:f2:5d:4b:4e:1e:e5:e3:c6:0e:33:23:a2:8e:41:f5:e3:
4c:ca:74:24:ea:a0:80:b8:3a:14:bc:a9:56:d6:c4:94:e3:45:
5d:40:50:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:33 2025 by rpki-client