Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: vy8RME9REJY+ubd3ITweJSmHfS7NUo4qZ4vMHhlxxTw=
Subject key identifier: 1F:51:E0:89:7A:FC:63:6B:B2:72:A0:4A:A9:1A:D2:C4:3A:19:B0:A6
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 01977075D73A0275F72E1A4027EA4C72B413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0AE6
Signing time: Sat 14 Jun 2025 22:01:00 +0000
Manifest this update: Sat 14 Jun 2025 22:01:00 +0000
Manifest next update: Sun 15 Jun 2025 22:01:00 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: 8ycNHg2UxyDfWUoMvrYaX3V5EWOGaezhMV3oHgg3d+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:d7:3a:02:75:f7:2e:1a:40:27:ea:4c:72:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Jun 14 22:01:00 2025 GMT
Not After : Jun 15 22:01:00 2025 GMT
Subject: CN=1f51e0897afc636bb272a04aa91ad2c43a19b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:a1:04:3a:8a:76:55:59:3f:72:29:40:cd:
94:98:70:3d:a3:e1:f7:54:f6:51:4e:48:67:85:49:
96:c1:a8:97:98:85:e9:42:57:4d:06:0d:38:f6:2f:
92:9b:db:ac:40:e1:c2:74:2f:c5:88:a1:09:87:d8:
f5:d8:7e:58:c9:1e:3d:63:fd:1b:bc:a0:37:63:e1:
3a:46:8b:7d:f0:99:ce:56:7e:89:54:5c:9c:7d:c6:
48:6b:7b:e1:42:05:cb:ea:df:ad:d9:54:17:15:9f:
6e:52:23:a4:2e:74:aa:61:f5:f6:7a:7f:5e:62:0d:
e4:f0:b7:3b:49:d2:23:62:ef:e2:b3:2f:a4:3f:ee:
cc:f4:7b:43:66:a0:60:40:23:f1:2d:b6:25:6f:96:
bd:2b:43:05:8f:69:ee:2a:5a:b7:49:a3:22:4f:ab:
02:af:b5:15:36:96:a3:0a:f8:94:36:90:0f:62:0b:
96:bc:1c:9c:d5:79:8d:6d:12:51:02:62:ae:a0:3a:
b4:ef:cf:fc:49:01:ea:74:0c:83:be:c7:d9:7c:59:
55:c5:68:ab:a5:dd:f0:5c:a5:60:59:f8:93:44:7b:
59:3c:fc:97:75:ee:a4:b5:e0:62:6c:15:0c:bb:8d:
05:87:b8:2f:a4:4e:5e:dd:82:03:24:a1:e7:f5:61:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:E0:89:7A:FC:63:6B:B2:72:A0:4A:A9:1A:D2:C4:3A:19:B0:A6
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f1:0d:d8:cd:0f:3d:5c:3d:fc:e0:9f:5c:86:1a:7c:e5:6a:
6e:70:d1:ae:67:c8:65:84:ae:d4:0e:fa:4e:d8:c5:ab:63:46:
7f:4f:0b:d0:47:66:02:26:3a:cd:20:b1:3f:4d:b1:87:09:58:
fd:66:c2:74:5b:f8:f3:36:a4:af:82:a9:52:d4:22:96:08:75:
8a:0e:a4:d1:39:ec:ef:02:a8:29:d4:9c:d5:55:c3:6f:ac:4d:
30:fb:dd:cd:40:99:ac:78:5b:1f:e3:3a:11:0a:d1:b9:57:13:
ad:d7:87:ce:b4:77:a9:1c:c0:0a:0a:6a:83:3a:a9:f8:c9:4a:
39:29:e8:6a:c4:58:26:2f:7a:fc:a4:55:8c:bf:d3:9f:e0:a0:
49:36:33:89:d4:c5:45:eb:1e:55:67:77:a6:cb:03:12:6e:b4:
97:27:40:55:e1:b2:64:ba:97:d2:eb:40:0a:cf:01:cf:ee:48:
69:d0:b3:a3:be:42:84:18:74:d7:f3:a3:45:d0:3b:89:f3:03:
83:5d:f1:ef:a7:b4:77:df:0d:a2:b8:99:d3:f3:20:26:69:e8:
57:52:12:9b:4b:4e:59:fb:61:d5:15:ff:36:eb:41:00:19:dc:
97:b4:d2:56:9f:94:c4:47:5a:51:16:e9:f8:75:48:51:51:b3:
11:43:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:10 2025 by rpki-client