Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: nlmrdD/GUpl08YLEdcgsClpvU1/rsikEiew3W8JOn4E=
Subject key identifier: 56:7E:80:0F:B7:81:3E:D8:35:5D:6E:D5:F1:E9:B9:FA:AD:EE:7C:96
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019773098141019A820DF98CAABBB73FDD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 10:01:32 +0000
Manifest this update: Sun 15 Jun 2025 10:01:32 +0000
Manifest next update: Mon 16 Jun 2025 10:01:32 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: yGcLVLslWECSqX8X1wcKb+0yc0GPHGuz6QMp0+8TPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:81:41:01:9a:82:0d:f9:8c:aa:bb:b7:3f:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jun 15 10:01:32 2025 GMT
Not After : Jun 16 10:01:32 2025 GMT
Subject: CN=567e800fb7813ed8355d6ed5f1e9b9faadee7c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:f0:5e:10:dd:9a:97:29:b9:ec:a1:3d:26:
be:a1:87:91:47:c2:6d:a9:a8:dd:81:4c:1e:5b:12:
46:d5:01:03:e9:b1:4b:8c:6d:fe:93:48:77:58:83:
95:c3:a8:68:60:83:88:10:3e:c3:4d:74:24:13:17:
5f:74:ad:16:a0:07:15:eb:c6:43:b5:16:41:af:ee:
52:5d:12:61:ad:1a:4f:4d:c8:9a:0c:e5:86:6b:ae:
bf:08:46:47:a8:31:a6:ae:c5:4c:24:99:89:e5:ef:
3e:6d:52:92:82:ed:81:fe:b7:9e:8c:47:a4:33:29:
d7:0b:ea:83:89:25:5a:a1:5f:a7:62:6f:83:96:fb:
b9:42:78:e8:e0:c9:47:2b:33:e2:6f:ca:b2:b5:98:
0c:fc:b9:74:06:a0:a5:f7:ed:ab:c9:03:87:5d:90:
f1:23:99:9f:7f:a0:39:c5:f9:1b:94:48:72:57:70:
8e:ca:02:db:a4:b6:06:f2:16:2f:0d:f9:8d:12:6a:
ac:7e:4f:4f:b1:35:15:8f:3d:52:e6:d6:ea:f6:de:
72:3f:56:80:81:68:3b:dd:40:20:b0:1a:80:9a:6d:
ae:5b:f8:49:41:77:d9:a7:63:a2:93:62:cd:d2:ba:
07:2f:3c:89:04:62:68:ea:0e:9a:cb:f6:57:f7:8d:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7E:80:0F:B7:81:3E:D8:35:5D:6E:D5:F1:E9:B9:FA:AD:EE:7C:96
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:87:56:21:09:6f:22:16:ee:79:20:2f:ec:f8:b0:88:d9:21:
14:ca:4a:1e:11:8c:53:dd:e5:49:6c:ad:03:f7:b9:d8:15:44:
bf:a4:a5:6e:f0:a0:40:d9:b3:e8:9c:7a:d1:db:54:1f:a1:46:
75:d1:8e:68:6d:8c:e4:0f:fe:0d:57:5a:9a:aa:d0:0d:2b:9d:
06:16:20:6f:b3:75:3e:49:c6:9a:70:5d:3c:8f:9e:42:db:bc:
c1:2f:b7:a4:a2:7b:9e:da:9c:7c:b2:f6:49:1c:ab:c4:b9:41:
b2:8f:e1:fd:a3:39:f4:2d:5a:a9:b8:3d:9c:eb:50:d7:c8:ee:
b3:63:37:80:72:e8:6a:e1:0e:79:40:f0:41:d0:79:33:e6:1d:
9b:33:15:b2:01:54:d9:e0:62:23:6b:0f:b1:9f:26:86:26:cb:
fe:dd:6e:fa:eb:4b:30:aa:c2:b2:cd:1d:65:d2:66:ef:8d:23:
93:22:18:1d:7c:7e:c7:3c:bb:fa:ef:85:14:55:35:2e:53:d3:
a4:b9:b8:5e:21:66:c6:ce:a9:12:f1:56:fa:6a:53:e7:56:5e:
a2:73:e9:2f:67:b5:ea:73:0f:ed:b4:b1:c9:5e:19:53:11:5f:
ac:57:2e:a4:1f:34:b2:34:4d:2a:50:f2:a7:71:ab:5e:c3:1a:
07:bb:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:23:14 2025 by rpki-client