Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: 3qJF15n8OZr1ogyLwpP84CYrXzM7A3CO6Q+nt70DFkY=
Subject key identifier: 1B:04:4B:AF:9C:81:98:DF:43:CE:A3:3E:1B:0E:B7:54:16:82:74:C0
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 019772D1B42102E3A3DACEE9DB3BC6CDEABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: 46
Signing time: Sun 15 Jun 2025 09:00:35 +0000
Manifest this update: Sun 15 Jun 2025 09:00:35 +0000
Manifest next update: Mon 16 Jun 2025 09:00:35 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: PNfWmbAK1y80Wg37ic/TVEJVvE4iZouGFauyTL+o1wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:b4:21:02:e3:a3:da:ce:e9:db:3b:c6:cd:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Jun 15 09:00:35 2025 GMT
Not After : Jun 16 09:00:35 2025 GMT
Subject: CN=1b044baf9c8198df43cea33e1b0eb754168274c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:42:07:14:81:2c:13:ab:fb:5f:4e:33:fd:
cf:2d:d0:1e:bb:ca:0b:96:60:3c:b2:c3:21:05:74:
2a:95:fb:b2:4b:3e:06:0f:c8:5f:af:df:31:fb:64:
91:97:fe:1b:34:39:e5:e7:af:5f:78:44:57:cd:43:
0a:86:7a:ee:8e:0a:58:2b:d9:6f:78:0f:f4:17:6b:
8a:2a:9f:a0:65:39:bc:87:85:05:50:a5:36:5d:8c:
51:29:5f:ab:ef:bc:1d:f9:5f:81:93:51:1a:fc:9c:
0a:0b:45:5a:5c:61:4b:4e:58:ed:96:30:ff:83:a6:
16:47:b2:18:36:ff:c9:86:2b:d1:7c:b3:e4:38:fa:
9b:44:8d:e3:da:c5:41:7e:6e:ad:b5:b7:16:85:41:
9c:b2:5e:91:2a:2e:ac:25:b1:24:46:21:c8:93:4f:
ae:6a:35:58:07:e1:c0:23:3b:dc:02:9d:f2:46:a9:
60:0b:a7:14:58:29:13:98:aa:aa:21:ee:f6:0b:97:
12:cc:9d:27:e3:90:60:cd:1d:d1:e6:49:fd:f9:fd:
18:62:f4:43:66:d5:ca:77:d9:25:1b:a8:23:51:a3:
8e:02:b4:b6:4f:e5:f1:f4:e1:60:de:99:aa:ca:20:
8f:e5:c4:83:8e:cb:d9:f0:12:9b:77:8a:26:c0:5c:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:4B:AF:9C:81:98:DF:43:CE:A3:3E:1B:0E:B7:54:16:82:74:C0
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4c:d7:0f:29:d4:85:eb:25:b9:bb:42:0a:78:d5:1d:3b:6e:
0d:9c:3c:a3:bf:6e:0b:ea:41:50:13:64:9f:44:55:a4:cc:46:
7a:42:c9:8a:0c:3c:7f:38:34:9c:67:17:3b:29:9a:2e:0c:04:
1c:34:c7:ca:82:27:44:a1:53:db:0a:b6:33:cd:bb:6f:bd:d3:
70:31:42:56:67:a5:26:10:09:a6:22:bd:62:2e:34:b9:60:7e:
bd:d7:a9:3a:a5:ae:30:e3:d6:26:64:48:dc:74:33:8f:8d:29:
7c:09:08:fd:93:cd:32:9c:05:d0:a2:38:d1:bf:a4:5d:1c:af:
b7:85:e9:11:db:3e:83:59:cd:33:7b:41:a5:9f:dd:bf:17:a0:
8a:7a:d4:a3:ad:77:76:1e:a3:17:4c:ed:3b:8e:89:b3:0e:42:
77:59:7c:fb:75:bd:fb:6d:2d:34:92:57:a2:e2:c9:16:8c:4a:
73:f1:52:c4:7f:c4:83:ff:48:7b:53:54:da:ab:34:32:fb:e0:
8a:be:95:06:2a:f9:71:5a:16:55:0f:f1:b0:b6:82:31:0f:60:
33:62:8e:ce:7b:02:28:eb:71:9f:d2:41:fc:ef:11:83:86:0b:
d7:bc:e1:d1:3b:80:d3:70:c7:05:81:d6:08:62:ea:cc:80:00:
47:91:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:19 2025 by rpki-client