Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: /t/OYto8KHJwQzpy23QPGlprl6/EMHY/YoG0OZSqsCk=
Subject key identifier: C4:02:0F:53:15:15:FC:A9:1B:88:73:D6:18:26:AF:5F:2B:BC:6B:46
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 0197B6A0DD122749AE521FDA8A2886729567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0B35
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: vBXESISK07U8FlCUrsxqCDp7LSwMMac9tWeZxDzmoaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:dd:12:27:49:ae:52:1f:da:8a:28:86:72:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=c4020f531515fca91b8873d61826af5f2bbc6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:de:10:68:d7:42:94:89:82:fb:87:dc:26:
23:d5:f9:ee:ae:2e:02:a5:46:5d:9c:cb:99:7f:f6:
6c:32:d1:34:c3:00:c3:7b:b9:f1:15:82:97:73:05:
26:2b:e5:63:e4:cd:de:4a:2d:2d:33:0d:a9:db:fb:
98:ea:9f:5e:4c:ad:73:df:b7:a2:7a:75:67:b4:8c:
ff:8d:fe:0b:f9:79:3e:85:b9:7e:e4:bf:62:d6:dd:
0a:98:18:97:95:1e:7e:37:ff:af:2e:64:50:4e:65:
e6:44:bf:d9:d7:4e:b8:dc:0c:cc:bc:59:02:1a:a2:
97:66:5e:1f:88:1d:a2:d7:b0:1c:48:f7:df:38:c2:
6c:ba:05:e2:f1:b5:ef:41:e4:e5:cb:85:f8:fa:3e:
27:f6:70:fd:70:a4:0e:4d:b2:ec:77:9c:ee:49:b1:
35:20:c4:61:3c:f6:b7:0a:0c:7a:a7:da:ad:84:13:
eb:09:2e:b5:3a:7a:e5:29:11:00:6d:6e:b1:eb:a1:
65:19:63:d8:de:40:54:23:48:6b:67:eb:bc:c5:32:
a6:e4:6a:f0:1e:50:96:89:f7:3c:9a:b9:e8:65:cc:
c9:b8:bd:76:5c:e4:38:df:a6:db:3f:33:fc:cd:be:
f8:c5:d3:af:bd:34:68:99:03:a0:19:ef:c6:6e:aa:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:0F:53:15:15:FC:A9:1B:88:73:D6:18:26:AF:5F:2B:BC:6B:46
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:94:8b:9e:16:9d:2e:90:c6:21:20:ea:b5:59:b0:9f:cb:
74:f1:d3:11:63:48:ce:09:c2:62:b0:32:ce:8c:0a:91:4d:6c:
cf:d3:a3:a6:07:f5:fd:64:12:c0:c8:8c:19:9f:da:fa:69:49:
73:75:05:ce:07:64:59:a9:03:04:e6:10:34:ee:3d:e8:13:06:
30:4b:d0:7f:d0:0e:e2:82:c7:8c:eb:58:a2:c2:14:18:b5:47:
e0:95:29:99:e9:c4:91:43:4f:86:e4:73:e2:56:94:41:b4:30:
b6:82:9f:61:fa:a2:a8:30:1a:96:79:15:2e:bf:ec:3f:16:e6:
67:26:de:e0:8c:6d:74:c1:cb:11:16:49:ef:40:7d:a9:d6:81:
f5:fe:88:02:49:2a:db:0e:7b:d9:b4:5d:99:0e:40:8e:7e:f9:
2a:d9:7e:e3:f1:c3:f7:9e:08:c2:21:b8:9a:6e:88:e4:e3:33:
de:35:e4:c1:26:cf:15:e6:06:c3:1c:a1:29:3e:ca:1f:cd:7c:
ee:37:4b:04:4f:3d:e7:57:24:f9:60:12:0d:04:2e:c0:a3:b0:
89:31:66:89:62:be:05:22:96:9e:f5:18:a4:a0:a4:13:6e:26:
29:c4:fe:20:73:4c:0a:fc:0f:b5:e6:44:68:40:bd:38:b9:2c:
d4:04:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:55 2025 by rpki-client