Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: C691+FvonXW31UeO1dqcq2WxFnUUVqp1lgsZSxWyiaY=
Subject key identifier: E7:ED:A7:53:B5:D3:09:F9:C5:19:EF:C5:F8:45:4E:18:00:E5:18:18
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 0198752BAA479D57AD7B453B7685772D22DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0B6D
Signing time: Mon 04 Aug 2025 13:00:52 +0000
Manifest this update: Mon 04 Aug 2025 13:00:52 +0000
Manifest next update: Tue 05 Aug 2025 13:00:52 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: q8ADDbw4FJJlpGzYRyIkpt3+ejrsm8IcJDJf4/36eog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:aa:47:9d:57:ad:7b:45:3b:76:85:77:2d:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Aug 4 13:00:52 2025 GMT
Not After : Aug 5 13:00:52 2025 GMT
Subject: CN=e7eda753b5d309f9c519efc5f8454e1800e51818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:6e:1a:62:ef:a9:9b:cd:97:8f:12:ce:41:
c1:e1:33:27:d0:34:1e:de:a1:df:3d:7b:6a:80:b6:
e7:69:cc:4b:3d:d9:f7:d0:c6:4f:02:6b:67:19:da:
af:18:6e:e0:9e:f0:97:d9:bd:c1:30:6b:da:47:18:
8a:53:a7:ce:c8:12:c3:b7:1a:be:1a:43:a6:42:11:
63:8c:83:b6:2c:2a:1e:d4:2c:10:37:cc:26:f0:06:
d9:39:12:61:74:de:2f:83:91:f2:ca:22:3f:7b:36:
17:bf:6e:38:eb:19:76:87:80:25:0c:d1:05:89:cb:
1f:20:44:76:e7:90:19:57:3d:43:e3:c6:70:75:54:
be:7a:a7:2a:b3:04:35:81:e3:48:aa:88:f8:48:57:
09:ef:6d:dd:90:db:02:11:be:c1:b8:7f:29:30:e7:
7e:00:fc:bc:b0:b9:1b:42:b3:ba:72:60:30:d1:7b:
30:18:23:5b:30:f3:a2:9e:e9:b2:e3:67:bf:e8:cc:
d8:a3:f8:7c:f3:53:9b:a2:63:20:99:0b:fc:02:69:
c6:cc:f2:fd:18:8f:91:7e:51:1c:98:2b:88:53:bd:
f1:3b:a7:99:5d:bd:5b:4b:bf:ae:a3:c9:c0:40:ea:
92:28:22:ae:c2:83:83:6b:53:60:aa:88:ec:f4:87:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:A7:53:B5:D3:09:F9:C5:19:EF:C5:F8:45:4E:18:00:E5:18:18
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:fb:b9:04:32:b8:62:94:0c:82:b8:b5:e2:1d:06:25:ba:
6a:fe:c1:0a:2e:11:c0:81:7f:3f:c7:d5:95:81:53:cb:71:2a:
00:d6:15:20:de:58:39:33:d7:1a:21:26:67:f8:ae:3e:3d:ec:
7f:19:32:29:0d:12:6d:4b:78:5b:4a:34:de:af:db:4b:77:ae:
9c:a3:ac:09:59:a2:41:9a:22:3e:79:a4:f5:dc:93:ca:9f:a1:
36:71:89:72:eb:24:f5:42:fc:4b:72:2e:e3:ea:5a:f6:6b:ca:
b6:4c:87:43:a5:1b:a4:06:2d:bf:95:b0:b5:17:c8:4e:ab:ba:
d4:44:02:eb:56:5d:64:7c:c7:e3:4a:b7:04:0a:9d:44:13:70:
38:27:29:be:16:ef:92:dc:9e:e3:b4:90:6b:c8:9c:85:8f:b9:
41:3f:47:91:85:dd:a6:b5:31:8c:10:e1:09:b1:bd:63:d5:c4:
80:04:b6:3c:86:db:05:36:53:be:63:84:71:86:ec:65:45:d6:
bb:77:54:83:2c:85:6a:09:69:13:ed:c7:9b:a9:7b:bc:11:cf:
fd:7a:a9:dc:43:95:ff:f0:74:2d:86:9b:a4:39:5a:73:0f:e8:
23:98:a2:7a:0e:cf:31:6d:53:a4:29:a8:7e:67:11:2f:87:f5:
14:f2:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:48 2025 by rpki-client