Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: L6Cfw8HkLxwj6JV5EbEuzYaXq3ovzou9alG9aScQkDo=
Subject key identifier: 76:FA:2E:BF:AD:8D:93:4A:A6:0E:E2:AD:6F:95:B5:4E:74:02:25:B1
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 0197B8FD124D08575E218FC7137675B2D3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 00:01:22 +0000
Manifest this update: Sun 29 Jun 2025 00:01:22 +0000
Manifest next update: Mon 30 Jun 2025 00:01:22 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: ZHE/YtWwoe+T30HIBA6dtHchS2/BGKPKE5P7IBD9+kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:12:4d:08:57:5e:21:8f:c7:13:76:75:b2:d3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Jun 29 00:01:22 2025 GMT
Not After : Jun 30 00:01:22 2025 GMT
Subject: CN=76fa2ebfad8d934aa60ee2ad6f95b54e740225b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:b9:c4:cb:1b:49:d9:6f:c5:8d:ed:6d:12:
4f:92:cf:e9:e6:de:3a:ae:bf:57:90:a0:98:a5:c8:
bb:7e:e1:a4:84:db:e9:67:31:3a:5f:d4:38:d9:78:
27:04:a0:31:b3:42:87:ff:88:7f:78:cc:a0:f3:70:
49:61:fe:8e:8b:b1:03:a1:1b:b0:06:3a:aa:5c:08:
69:b3:1e:7c:31:20:3a:8f:2b:73:cc:47:e0:11:1b:
36:68:86:f9:2d:10:c9:37:45:22:18:3b:70:fd:61:
1b:a4:f0:1a:11:30:f7:cd:65:f5:6a:36:aa:c8:7a:
c6:44:dc:61:2e:6a:dd:f9:d7:d0:5c:ea:4e:2b:a8:
a1:4a:be:c8:0a:35:70:87:e0:9d:22:63:c0:5b:25:
d9:5c:59:67:8c:b5:da:e8:ee:22:d5:e3:1f:b8:ed:
30:0e:07:25:36:59:07:87:9e:d8:12:54:3c:36:70:
aa:73:cd:66:a9:0b:d1:2a:0a:97:fc:ce:ad:ec:1b:
9d:25:d1:37:66:12:05:c3:59:d1:1f:e6:ce:a4:9c:
ce:4f:54:cf:4e:c4:2c:29:f3:3e:e8:56:e7:f1:4b:
65:0c:f9:1b:21:39:94:65:41:5c:47:88:5f:98:05:
60:1b:b2:ec:9c:0a:1a:68:76:47:12:a2:22:a4:5e:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:2E:BF:AD:8D:93:4A:A6:0E:E2:AD:6F:95:B5:4E:74:02:25:B1
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4b:44:b1:de:93:3c:9a:24:75:b7:2f:98:b3:60:87:ef:bc:
f3:ae:35:f6:f4:b4:d4:25:5f:71:80:cf:47:df:5f:e5:59:ff:
a7:fb:67:21:27:85:ee:04:8b:dc:a6:0b:b4:d6:7a:21:81:14:
44:bc:10:cb:ca:ef:ee:61:77:61:a6:f9:c4:aa:37:08:9d:a4:
73:5e:7b:00:20:1f:f3:59:e8:16:0f:51:45:5e:fd:59:7d:b0:
8e:42:55:a3:89:ed:b1:cf:78:61:c5:12:0f:6d:e5:e8:fc:6f:
82:7f:1e:a1:a9:3f:82:b2:e6:bd:96:57:fe:ba:dd:96:89:b7:
c2:8e:47:24:39:7c:14:ea:3e:d1:66:94:62:23:e0:92:14:d8:
e1:66:0d:a1:52:12:91:dd:b5:4a:50:06:c7:61:4d:a4:f4:e5:
94:9f:d2:8e:3c:13:8c:12:6b:8e:68:12:71:e2:39:60:30:ff:
9d:7a:c4:84:01:e5:27:0c:b5:d7:0a:61:0c:17:99:c0:40:06:
83:9d:d7:ba:66:2c:8d:02:17:6d:7a:66:b2:86:da:7d:84:df:
eb:24:53:cf:12:ca:fe:64:21:78:ed:34:32:4d:6f:72:1f:24:
74:c6:a9:75:2c:cc:c5:87:2c:f6:4a:4a:f9:93:bc:6b:49:d3:
2f:2a:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:19 2025 by rpki-client