Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: JfzAbvwZGCPPgzP2gxQqalV86Z/G3qZLPg2nIFTQk4w=
Subject key identifier: 75:F1:32:CA:93:A3:39:68:4B:F9:99:18:CE:63:FC:09:4E:91:97:11
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 01976D3E3DCEECA278151531ED954762C015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0B3E
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: HrZ9nSB3Cyq3uXZgE+jIxlz7/Dr6f1GvAmkla7YbPaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3d:ce:ec:a2:78:15:15:31:ed:95:47:62:c0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=75f132ca93a339684bf99918ce63fc094e919711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:0c:fb:59:86:b2:8f:4b:27:d6:62:df:1f:
51:c5:4a:b1:0a:19:a0:ba:65:33:e4:b4:ba:39:d1:
f1:41:82:b6:a4:60:39:2a:6d:65:8d:9a:2f:71:d6:
cd:74:2f:3c:ad:83:36:eb:cb:9e:89:08:2d:df:91:
74:77:ae:bb:63:e1:f2:74:84:51:3f:19:1c:d1:ef:
03:97:51:99:1a:09:7d:a7:63:df:83:ff:50:e9:c8:
d4:57:cd:de:31:74:97:40:64:86:d2:83:31:7f:91:
93:47:55:ea:95:54:a7:99:8e:7b:cf:de:d3:3a:66:
27:e7:f2:4c:fb:71:73:aa:4f:73:6d:15:ce:bc:91:
6e:04:1f:76:08:16:54:83:ba:22:b4:12:69:9f:c1:
62:63:91:30:1f:ba:5d:65:b9:86:94:2d:f8:7b:8d:
b2:38:9a:f6:39:3b:59:7e:2d:49:ce:c4:ad:b9:40:
ae:1e:87:98:d8:dc:51:60:91:fa:a6:72:9d:26:a7:
de:2d:9f:e7:cf:bd:13:ac:0e:ce:8b:27:52:a7:62:
81:a8:b0:2d:ca:8a:f8:45:17:10:76:d6:09:b8:fb:
97:02:27:6e:64:01:79:dc:39:57:50:05:fc:07:c2:
c5:ff:0a:a1:98:56:9f:56:5f:c2:bd:5e:ad:30:b7:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F1:32:CA:93:A3:39:68:4B:F9:99:18:CE:63:FC:09:4E:91:97:11
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:6e:f8:6d:e7:5f:79:da:f5:01:7c:a2:01:a4:53:38:6d:
ec:dc:8f:c0:2c:42:c8:1d:88:e8:13:9a:19:47:07:47:3a:b7:
b9:73:e0:d0:c6:a6:6d:98:82:83:c4:90:4c:8e:5e:b3:21:60:
13:b4:09:54:39:61:82:20:bb:ae:76:88:f8:82:64:f5:dc:f1:
55:06:49:7c:91:35:e2:0c:69:ab:74:c8:55:52:31:6e:e3:53:
52:d6:a4:36:47:73:b7:6e:8b:34:f4:d0:2a:97:a4:5d:c7:4e:
75:3d:5d:c9:da:9e:fd:e6:c9:ff:52:4f:49:bd:35:6a:07:86:
00:c7:9a:b8:82:cd:53:b4:70:06:ea:77:d7:96:bd:24:65:10:
4c:b5:e4:14:fb:33:4c:e9:64:e0:e7:c7:32:29:5f:07:80:dc:
0d:56:05:7f:81:d4:4b:e1:24:0e:dc:35:8d:a5:58:22:7a:08:
eb:54:81:40:50:b7:34:9b:2e:1b:80:80:87:45:57:a8:7f:5e:
ae:35:e4:21:6c:8d:c9:ea:3f:8c:48:3b:d1:85:80:43:36:a3:
48:dd:54:16:cc:0b:ce:36:18:87:31:8a:2f:57:4d:c7:29:2d:
6a:33:70:cc:d4:06:4d:8a:c6:53:57:73:82:ef:44:f4:8c:21:
a8:8e:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:52 2025 by rpki-client