Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: p9zOQLB60yttk4xC0WmH6fiC9kHc6rLCSjkAypWLG5M=
Subject key identifier: 6E:8D:31:7F:46:AD:94:CB:F8:69:87:E9:4A:2D:10:DE:C1:96:5F:47
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019770E32489625D78D5358C167E84EDC024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 151E
Signing time: Sun 15 Jun 2025 00:00:23 +0000
Manifest this update: Sun 15 Jun 2025 00:00:23 +0000
Manifest next update: Mon 16 Jun 2025 00:00:23 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: 2WegFPT8CZri18YeiddqQ8JpE8T6SQ5qvIktLfFba/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:24:89:62:5d:78:d5:35:8c:16:7e:84:ed:c0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jun 15 00:00:23 2025 GMT
Not After : Jun 16 00:00:23 2025 GMT
Subject: CN=6e8d317f46ad94cbf86987e94a2d10dec1965f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:e6:ca:c2:f3:1f:e3:69:2c:f2:36:9b:fe:
74:58:3c:94:3f:13:de:a2:9a:e3:80:05:ff:a9:25:
ee:50:15:58:17:5f:44:18:60:67:e6:1f:fa:38:05:
74:c6:f7:08:07:7b:37:94:ab:87:6b:cb:6c:f6:33:
8d:5e:f7:a3:3a:17:00:16:93:dc:8b:fb:b3:54:79:
7c:1c:cd:85:fe:5b:55:08:1a:47:48:2a:16:96:b2:
63:45:bd:3b:90:b7:81:ff:f6:41:0b:e7:4b:da:c5:
23:c2:39:1d:37:13:5e:ae:84:9d:97:63:df:49:e9:
c8:09:8e:9a:16:45:bd:0e:0c:49:53:5b:b0:0f:45:
7e:d2:7d:66:61:fd:c0:8d:1d:67:a4:41:c9:1c:29:
53:c4:b5:9e:7a:8f:aa:16:3b:9a:af:aa:4f:70:27:
d4:28:75:be:06:83:ba:8c:eb:44:69:f0:df:34:f9:
d9:e5:53:ea:d1:05:85:be:30:c7:69:7d:fc:66:1f:
a7:c5:30:5c:62:69:38:87:f2:34:ff:24:7f:b6:03:
57:5d:10:5a:2e:03:cc:25:c0:2e:c0:09:c7:fd:2f:
40:19:18:da:e4:1e:3b:f7:ec:d0:67:8b:55:0b:2b:
4a:4b:78:fc:19:9d:98:a9:4f:c6:3a:e0:58:e6:0c:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:31:7F:46:AD:94:CB:F8:69:87:E9:4A:2D:10:DE:C1:96:5F:47
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3e:6c:40:5a:06:e1:5b:69:36:ef:f6:5c:37:66:d3:7e:1d:
de:d5:be:13:b9:62:8d:95:88:5e:9e:8a:87:4a:dc:e8:8e:dd:
89:c5:82:7f:62:b2:57:bc:90:b3:fe:f7:26:b4:29:42:df:51:
3a:c2:ee:73:49:54:c0:6f:27:96:bb:19:e4:95:2d:b5:e6:f2:
99:57:70:af:a0:67:2b:d1:c9:4c:3b:37:ab:6e:88:bc:d1:bd:
cd:9e:c3:d9:ee:02:cf:c5:23:c5:11:78:39:cc:7d:4c:e6:f7:
24:d9:a0:14:54:22:4d:8f:94:6e:9b:4e:0c:83:c2:26:51:19:
b9:06:58:2d:d7:fb:9a:f0:bf:16:b9:81:f5:32:f9:44:bd:26:
25:d3:68:18:8b:a5:ec:b8:fe:f3:ad:84:70:05:05:a9:6f:9d:
0e:5d:7c:60:df:31:44:c5:f8:d9:02:82:65:e1:05:3c:4a:4d:
07:43:42:df:ac:37:b2:47:4a:26:50:ef:d7:22:eb:b8:e0:63:
d4:2d:4d:65:19:fe:e1:36:98:42:73:50:52:23:ab:3a:07:dd:
98:50:cb:dd:a3:3f:7c:5a:f5:0f:c5:76:35:85:30:9f:b7:30:
b4:94:90:29:b0:0e:9c:4d:7e:93:4c:8c:7c:1a:03:60:73:8a:
fc:38:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:51 2025 by rpki-client