Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: 5tAvrEb3CztLEf2e++rvp4m3QkzhRy8zvn3Rre0/EOc=
Subject key identifier: E1:C1:F8:19:CB:6A:78:EB:4D:FB:09:92:58:A1:AE:4E:C9:BE:EF:FC
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 019773ADEA1962911676EC8EC90563867544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 14EF
Signing time: Sun 15 Jun 2025 13:01:06 +0000
Manifest this update: Sun 15 Jun 2025 13:01:06 +0000
Manifest next update: Mon 16 Jun 2025 13:01:06 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: eQz1XdJ77H3+s5sF8qtgKcyMs7c6ZYwEYuzvQDIh2Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:ea:19:62:91:16:76:ec:8e:c9:05:63:86:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Jun 15 13:01:06 2025 GMT
Not After : Jun 16 13:01:06 2025 GMT
Subject: CN=e1c1f819cb6a78eb4dfb099258a1ae4ec9beeffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:ad:67:72:80:a0:91:83:df:98:3a:b9:3a:
a0:bb:75:d8:6a:55:b3:77:52:c3:d3:a9:71:85:ef:
22:fd:79:a5:26:c9:52:13:41:8c:d1:bf:71:97:c8:
3e:8f:e7:c5:6d:c9:b6:7c:b8:23:7d:1e:86:36:46:
02:fd:9a:f6:79:b8:96:02:2f:3f:23:01:e2:16:51:
dd:2b:08:6c:69:64:d4:38:f9:50:0b:eb:8a:15:ae:
f2:4a:43:ab:78:6a:cc:cb:69:18:d7:3a:1b:18:8b:
1f:a3:ef:22:78:5b:06:65:0a:8b:a3:de:7f:90:ca:
04:ea:62:83:11:b5:5c:60:94:12:54:d6:21:19:c3:
a7:b7:14:f6:7c:85:b7:87:b6:8e:94:22:21:8f:e5:
42:a0:45:9b:fa:de:cb:df:d2:1a:84:71:e9:38:61:
1d:fb:ed:b7:26:80:6b:66:96:74:92:3d:0e:f1:98:
d5:71:cb:cc:f0:f3:35:32:db:87:cf:7b:18:cc:43:
c5:89:ee:ed:68:8b:ce:b9:f6:c6:8d:47:1f:b5:b2:
a1:00:20:7a:ed:03:68:ef:e6:3c:36:e6:89:01:25:
e8:92:e7:36:10:ba:46:39:5d:e5:39:dd:12:c3:2c:
2c:23:b7:5b:f5:7d:12:c1:db:5e:f2:c1:04:27:0b:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C1:F8:19:CB:6A:78:EB:4D:FB:09:92:58:A1:AE:4E:C9:BE:EF:FC
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:69:32:63:b0:5d:df:23:49:d5:96:1c:67:e2:e8:43:bc:
14:f6:19:00:f0:5d:80:81:76:80:06:2e:24:22:89:ea:f2:a8:
58:ac:63:4a:a5:7c:ca:af:ea:aa:2f:f9:3c:d4:d8:8d:8d:0a:
b2:4a:b7:5e:7d:32:c7:5f:c5:fb:f0:22:5a:91:bd:2c:85:cc:
15:52:8a:6e:4b:ec:26:5e:b8:30:3b:fd:08:31:09:14:3d:45:
0a:bc:a4:3a:80:98:f0:12:3f:c5:87:ee:42:67:2f:d9:1c:c6:
a7:37:b3:9b:24:41:08:32:46:2e:be:ce:09:3a:a4:1c:37:b9:
69:bb:fb:d4:bb:84:bf:b3:48:42:6c:96:2b:a8:55:5e:1d:e9:
37:77:dd:08:89:b1:cf:f4:06:c7:28:3b:72:33:f9:aa:90:e4:
f9:6f:a6:99:8c:72:a9:2d:35:05:f2:66:44:f9:51:37:93:a5:
b6:e5:1f:4a:ca:71:8f:7e:17:4e:41:d7:76:06:17:26:bd:23:
7b:12:e4:16:17:b5:e8:24:bf:9f:07:27:17:60:84:95:42:11:
3a:25:b2:f9:04:85:94:b0:80:ca:f7:89:c9:a2:b8:d7:86:6e:
7e:c8:e3:a6:15:cb:0c:00:a2:06:8c:07:d6:e4:1d:e0:18:89:
c5:e6:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:48 2025 by rpki-client