Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: irKglY9+FsuewEhxSXCBo+WYDKiZ2rUxj/64jQMUDHE=
Subject key identifier: 2E:0A:37:56:B9:60:12:3B:43:97:F9:8F:04:88:09:D0:C4:98:94:2A
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 0197827C160CE80761D9CDC8D016AA37641F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 1229
Signing time: Wed 18 Jun 2025 10:00:59 +0000
Manifest this update: Wed 18 Jun 2025 10:00:59 +0000
Manifest next update: Thu 19 Jun 2025 10:00:59 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: pTp2IbrL3R4x1HAz21FBft8copidCJ3tZHXS+ACvp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7c:16:0c:e8:07:61:d9:cd:c8:d0:16:aa:37:64:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Jun 18 10:00:59 2025 GMT
Not After : Jun 19 10:00:59 2025 GMT
Subject: CN=2e0a3756b960123b4397f98f048809d0c498942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:42:13:eb:a3:1b:88:e9:b8:fb:67:39:67:
86:4d:9e:e0:bb:1b:a0:7c:22:70:0a:ef:0b:46:ff:
e8:c3:95:c5:f1:de:56:f2:71:67:7e:73:08:b9:1b:
40:ab:61:56:03:05:50:13:52:ec:cb:13:88:58:c6:
3d:08:e5:4b:d1:a1:c9:93:91:30:fb:66:04:a6:86:
da:87:1d:70:75:59:4c:16:e4:54:9d:8a:24:40:c3:
8d:38:fb:ad:a4:26:2c:5b:61:9f:45:ec:d9:63:9f:
2d:9e:8c:c7:3c:a3:08:17:26:6a:a1:b2:b7:3b:ee:
ca:12:1d:02:f9:ea:74:ca:3d:56:37:06:f0:c6:db:
97:b7:75:f6:9a:65:22:06:89:28:e0:5c:95:d9:c2:
50:37:45:09:a4:65:fe:1e:2c:95:da:d5:1d:ad:73:
d7:76:c8:7a:91:b1:d6:15:f4:08:89:e0:86:97:f6:
b5:9c:da:0f:d5:ec:1c:b0:0f:a3:5e:59:80:4b:75:
97:81:94:87:e4:fc:b7:8f:fe:91:fa:ed:13:02:fa:
4c:8f:c5:83:87:f3:8d:a5:4d:1d:a7:4c:11:f1:49:
7d:af:64:94:c0:52:ff:13:e3:f0:f3:d8:2f:3d:2d:
5f:21:30:3a:c1:87:a8:3a:23:bc:a6:82:0a:4f:5e:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:37:56:B9:60:12:3B:43:97:F9:8F:04:88:09:D0:C4:98:94:2A
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:12:1c:a0:e7:ad:b2:66:1e:27:a7:02:e6:c7:54:a2:42:
3c:5b:23:89:fc:a6:e8:1e:b8:06:64:cc:24:00:c2:f3:e3:4e:
5e:4d:e0:e6:2f:f3:c4:6d:32:e3:b8:74:af:1c:4c:85:e0:81:
0b:06:a8:2c:8f:e4:52:7c:d0:7f:8a:89:19:b7:ae:f3:2e:a6:
b3:89:62:6e:96:dc:61:4f:d0:5a:e5:47:7f:cc:2c:df:79:51:
69:9e:c4:3d:d5:67:db:06:00:0e:eb:17:07:ce:c7:72:38:9a:
d3:33:8b:a7:40:fa:94:02:8b:81:e9:a2:07:8f:4f:e5:91:1c:
6c:f1:a8:5a:b3:e6:c4:0d:1f:c2:7b:c4:7a:b2:fc:d9:2d:cf:
94:b5:8f:e4:8e:42:dc:9b:69:fd:f5:f9:97:f0:68:70:c9:e7:
ea:ce:5e:66:1e:74:51:e9:f1:f6:f6:28:5d:76:82:80:7f:5e:
16:17:23:74:e0:94:97:d1:3f:5e:a1:9a:78:ae:45:cb:76:94:
47:44:ab:14:c7:b8:97:8d:fc:f3:c6:be:6e:90:6d:5c:8e:62:
95:8a:1a:49:3d:3a:e0:bd:1e:37:c8:4e:3b:c3:57:c5:fb:35:
e8:28:da:23:36:52:8f:64:c5:d7:5f:63:3e:dd:7a:8f:e5:2c:
a8:bb:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:39:32 2025 by rpki-client