Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
File: 2wy7NfYw1Aytd1B_2r03_e3BIQM.mft (raw, json)
Hash identifier: vjY7BpRHIq+ZaGj+YiFR1W1RiS5iXFRHP0hRJ0I+skI=
Subject key identifier: 79:6B:10:BF:76:B4:7C:99:31:34:81:C1:02:69:9E:F2:72:DF:60:EE
Authority key identifier: DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
Certificate issuer: /CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Certificate serial: 019772D1FDF96EDE973F5C7C6982880EC01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
Manifest number: 46
Signing time: Sun 15 Jun 2025 09:00:53 +0000
Manifest this update: Sun 15 Jun 2025 09:00:53 +0000
Manifest next update: Mon 16 Jun 2025 09:00:53 +0000
Files and hashes: 1: 2wy7NfYw1Aytd1B_2r03_e3BIQM.crl (hash: trcW71UXCwKndKtjuLu3R+HRNTYT/octbKqZFnCKyYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:fd:f9:6e:de:97:3f:5c:7c:69:82:88:0e:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Validity
Not Before: Jun 15 09:00:53 2025 GMT
Not After : Jun 16 09:00:53 2025 GMT
Subject: CN=796b10bf76b47c99313481c102699ef272df60ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:4f:d9:fe:5d:64:de:cf:91:cc:d7:ce:6a:
ab:42:82:32:81:ae:a5:d7:91:51:73:fa:65:f3:a3:
11:8d:23:9b:a6:e8:21:87:d0:18:8c:8c:d2:d7:78:
b2:21:79:f1:48:87:c7:c6:9c:16:e7:b9:0a:99:6e:
68:94:cc:3b:0f:85:c6:06:cc:78:dd:8c:b7:49:85:
82:36:42:61:75:7b:81:6a:5a:6f:eb:a9:e6:f9:10:
f8:b2:64:73:58:7c:cf:85:c1:77:df:66:bc:11:3c:
09:61:24:2e:75:c7:49:fc:48:a1:17:63:0c:db:09:
95:ba:56:4f:21:86:c0:54:eb:11:1d:d8:b2:4f:76:
7e:7a:8c:e6:a1:5e:1d:c4:02:e8:fb:a1:96:98:dc:
88:78:6f:a5:b2:3b:35:c3:8a:30:e0:88:50:4e:90:
e3:c4:d5:8e:0f:00:86:1c:50:ae:ff:a8:5d:cc:1e:
2e:41:a1:97:8d:a2:37:1e:9e:f0:fb:6b:3f:9a:ab:
f2:f6:12:60:64:82:75:cd:c2:43:5e:fe:fa:39:55:
ef:0e:fa:f5:fa:f2:68:b0:bf:d7:c4:6f:3b:49:9f:
80:27:d0:cf:e7:17:55:93:9e:da:de:2b:13:6b:98:
45:0e:93:39:15:c4:e2:d4:a4:9f:a7:64:4c:b3:24:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:10:BF:76:B4:7C:99:31:34:81:C1:02:69:9E:F2:72:DF:60:EE
X509v3 Authority Key Identifier:
keyid:DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:19:30:41:cc:46:13:da:1b:52:b2:03:1f:69:8a:7e:4d:
b5:32:9e:07:2c:f4:84:f3:9d:31:b9:e5:70:52:fc:5d:9a:3c:
6e:57:94:43:8d:4e:a9:12:45:f2:65:79:f8:2e:24:f7:00:ae:
9d:5b:3c:2d:0f:da:e2:e5:e2:33:0f:aa:0d:b9:48:5b:55:5a:
f7:ee:e4:bd:d8:c8:34:0c:37:7c:17:88:0a:a5:5c:c7:4c:ea:
0e:82:ab:41:af:46:1a:26:db:6d:8b:44:29:25:a2:bd:8d:bd:
f6:ff:1a:af:0d:97:12:b8:20:c3:26:b1:9b:7b:65:86:e3:0f:
73:0e:44:93:27:4b:54:bb:4d:03:99:11:f3:e2:1e:02:34:0e:
f7:f3:1c:31:23:eb:5a:87:ee:75:3c:bb:e2:6d:0b:56:88:fe:
55:16:be:97:a6:61:a3:65:7f:4b:ae:9e:63:d9:73:33:0c:49:
9e:3f:93:d1:07:1f:db:3d:b5:fc:17:1a:f5:60:31:8f:72:9d:
77:d3:7d:f0:a7:25:df:e4:8d:af:d9:ce:f4:b5:c5:aa:49:dd:
de:2f:8c:24:b0:48:98:ab:86:d7:91:dc:7c:cf:26:d0:39:50:
3b:59:ce:53:52:93:0f:3b:1e:41:9c:df:26:64:5b:a3:59:fe:
b5:bb:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:24:46 2025 by rpki-client