Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
File: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft (raw, json)
Hash identifier: 0AMPwu9YW4q1WBWX01HkAc/cll0n941g20EXumVR/BY=
Subject key identifier: 5F:2C:85:55:3B:AA:F0:EE:EE:2B:13:CC:59:DF:31:67:71:BA:92:76
Authority key identifier: D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51
Certificate issuer: /CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51
Certificate serial: 01976C61D58D32427FE91EB84C8A8948D5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
Manifest number: 2B
Signing time: Sat 14 Jun 2025 03:00:40 +0000
Manifest this update: Sat 14 Jun 2025 03:00:40 +0000
Manifest next update: Sun 15 Jun 2025 03:00:40 +0000
Files and hashes: 1: 2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl (hash: NMstl0iXcaH7Mr9nnnnw7qLn7pyKCH6+G5kkhtlicoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:d5:8d:32:42:7f:e9:1e:b8:4c:8a:89:48:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8682d2ccad4e41a55209497ee0fe27f3901bb51
Validity
Not Before: Jun 14 03:00:40 2025 GMT
Not After : Jun 15 03:00:40 2025 GMT
Subject: CN=5f2c85553baaf0eeee2b13cc59df316771ba9276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:01:2e:b5:b2:95:5f:4c:ef:7f:8f:d9:96:
1b:cc:d1:3c:11:28:26:0a:d2:27:1e:b4:0f:2a:df:
26:e8:c4:21:ac:fc:58:69:2c:02:7d:d6:52:b9:fa:
bf:58:db:b2:c2:48:da:12:5b:4a:6a:c1:c2:d6:d9:
61:62:ae:9e:19:b4:a9:76:88:70:54:18:c2:39:32:
31:dd:b5:20:ff:b4:9e:0b:b1:5f:16:41:5a:a1:e8:
77:1d:15:57:e5:bc:e6:83:03:f1:8c:b2:12:d3:9b:
ad:94:29:28:2a:b3:2a:2d:7a:ea:36:3a:fb:51:32:
0d:63:a8:d5:c7:89:b4:a0:23:61:9e:bf:f6:0a:86:
22:47:73:11:e6:da:fa:d4:c1:16:f8:e7:f8:f0:bc:
33:64:f7:4c:cc:ac:90:48:d3:c0:bc:06:e7:c6:5d:
d3:b6:1d:42:dd:30:cb:be:2a:fe:32:5d:01:bd:3b:
82:4f:8c:a4:5b:df:05:82:6a:d9:04:e7:c7:f0:c9:
b5:d8:32:08:f2:bc:77:03:8f:72:c4:5e:5c:e9:c2:
38:cd:76:13:b1:ec:7f:31:d1:14:58:cf:66:a3:01:
72:6b:83:c1:67:9a:e4:a9:7e:7f:9c:74:da:8a:04:
67:d6:7a:c3:d3:f5:9b:38:04:96:8e:7d:61:ba:98:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:85:55:3B:AA:F0:EE:EE:2B:13:CC:59:DF:31:67:71:BA:92:76
X509v3 Authority Key Identifier:
keyid:D8:68:2D:2C:CA:D4:E4:1A:55:20:94:97:EE:0F:E2:7F:39:01:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GgtLMrU5BpVIJSX7g_ifzkBu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c69aa2-498d-441b-8b17-5c7e9fe6e1a9/1/2GgtLMrU5BpVIJSX7g_ifzkBu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:c4:af:61:9b:3d:04:09:cc:26:10:82:1e:26:56:8b:5b:
9e:04:b9:cd:dc:25:c6:be:5d:9a:b7:84:d9:f8:46:72:5c:d1:
70:5b:a5:15:69:05:e3:2a:06:20:9b:77:87:68:e7:49:4a:16:
ae:21:cc:72:90:fe:f5:ab:05:29:68:cc:54:f7:62:b0:ca:c5:
2d:59:0c:f1:51:fb:44:54:cc:7f:8a:7c:c7:58:bd:24:67:a5:
67:47:4f:e8:35:73:4e:fa:e0:d7:44:f9:91:48:49:5d:58:78:
ac:a9:2a:ba:6b:9f:c9:64:b3:9c:c0:0c:4a:62:b5:b8:18:d9:
30:6b:df:c6:38:49:8f:33:c8:b6:76:2f:a4:5a:cd:23:c5:bc:
19:90:72:f4:00:8d:81:ff:47:e6:86:8e:38:81:fd:39:01:37:
f8:cd:70:92:4d:af:4e:a2:86:21:fe:06:fc:c5:1d:cc:8c:8c:
69:6c:6b:a2:51:6d:be:77:75:6d:86:96:66:fa:3d:0b:e3:91:
bf:2b:6c:c4:3c:06:8b:b2:fd:9e:f5:9d:b5:07:86:bb:72:e5:
55:98:bf:a6:f8:09:0a:5c:d2:11:b5:8e:61:57:90:41:86:eb:
0a:6a:e5:4f:da:78:99:a4:38:1d:32:e0:97:0a:2e:2a:4e:2d:
b2:9b:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:04 2025 by rpki-client