Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: zfa/nwIvnVNQnRBq33hDQ43H9zQ8MEQuxekA+TyyRz4=
Subject key identifier: F5:6E:A0:2E:0D:68:90:4D:16:02:F8:EF:FF:3E:CE:BC:97:41:A5:0F
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 019768BBF05B68C39D6B21FEB6775EAAB169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 10:00:36 +0000
Manifest this update: Fri 13 Jun 2025 10:00:36 +0000
Manifest next update: Sat 14 Jun 2025 10:00:36 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: qHhsGWy/Ld9T6k2iSjdSLbkpEE3MEAqcpHNDv0ZvzGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:f0:5b:68:c3:9d:6b:21:fe:b6:77:5e:aa:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Jun 13 10:00:36 2025 GMT
Not After : Jun 14 10:00:36 2025 GMT
Subject: CN=f56ea02e0d68904d1602f8efff3ecebc9741a50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:c9:dc:31:b4:48:66:37:66:fe:75:af:d3:
e0:50:3b:6c:02:98:71:8c:1b:1d:9e:dd:47:54:a0:
5c:5a:5f:14:22:eb:27:0b:7f:48:ca:fc:0d:dc:53:
f1:f4:40:39:27:15:18:5f:ed:2f:9e:97:ae:7c:90:
d5:73:a4:84:46:6d:ca:78:62:25:91:3c:41:69:c3:
2e:da:81:fb:c4:ff:c1:b2:11:ff:c3:e6:52:2b:f2:
6f:a0:1d:69:19:da:7d:c0:b0:1f:f2:bd:c0:3b:59:
25:17:53:f4:16:34:10:60:07:5d:7b:26:7f:f6:ba:
15:9b:66:11:db:fe:57:55:41:43:25:b6:9d:d9:57:
28:8b:68:e9:ad:46:1e:29:bc:3e:53:74:84:c0:f5:
f4:88:69:d0:61:b6:72:73:a6:36:e3:bb:a6:f3:08:
b2:f2:4e:2a:63:00:43:f2:3f:bc:d1:ad:e3:17:29:
57:10:14:e9:f1:f9:a0:1f:ca:d9:76:12:b1:9d:c2:
cb:7b:9c:da:01:7f:51:4e:d6:71:db:1a:7d:60:72:
f4:b0:96:f7:fc:75:ab:70:25:33:93:92:94:98:79:
19:ea:78:34:41:8c:62:9e:ce:09:f3:ac:05:31:f8:
20:2b:a4:d7:92:ed:3b:ea:18:ac:62:68:c2:8a:5a:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:A0:2E:0D:68:90:4D:16:02:F8:EF:FF:3E:CE:BC:97:41:A5:0F
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:95:3b:a6:73:2e:9e:0e:8e:81:cc:a0:be:05:c7:7d:66:ae:
19:08:70:d8:38:39:10:e9:66:90:9b:15:6d:b5:8c:e2:02:39:
83:79:fc:07:91:ef:00:4b:4c:d3:d9:37:3e:4e:39:b6:43:b8:
89:77:33:6c:2b:4f:8a:fa:2b:7a:97:d8:ed:e7:dd:ce:00:a6:
fe:89:ae:92:06:03:c2:ef:27:81:54:ae:c5:d6:a1:5b:87:5d:
a2:d9:4d:b7:ac:11:1f:34:f8:a1:9f:0a:55:57:92:67:ff:13:
1d:25:c1:4e:80:65:03:c9:c9:f7:b7:d0:fb:14:de:f5:c8:66:
1b:1d:a9:2a:d0:25:f5:b1:1f:27:22:e9:3f:ea:6c:9d:47:59:
32:02:05:9c:11:9c:82:7d:d1:f2:05:85:1f:8d:ff:2f:07:3b:
b3:86:11:b9:49:15:eb:54:2f:1f:fa:92:6d:7e:09:2e:5a:51:
92:b5:e4:5a:d2:c4:67:3a:7c:6f:9c:67:88:96:00:48:65:63:
d5:83:5c:f5:2e:5c:db:cc:c8:56:5e:28:26:c6:a5:28:46:73:
6e:92:b8:6e:e5:df:e2:7a:6e:75:0c:a7:6a:4d:a5:9c:c3:85:
c3:30:91:1f:05:a2:e8:e9:7a:a2:fd:82:29:49:43:80:1d:37:
f2:de:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:51 2025 by rpki-client