Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: uD9HHA6Z6RKKhcK7l7k6jCpToCaVYlvWN2/sjeSBijU=
Subject key identifier: 7A:B9:E3:9C:15:76:97:5F:ED:B0:81:5C:DF:CB:E7:50:21:E1:52:2E
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 01977CB0FBDF87F83D6BA29A4A39218B719F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 07:01:02 +0000
Manifest this update: Tue 17 Jun 2025 07:01:02 +0000
Manifest next update: Wed 18 Jun 2025 07:01:02 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: M3il+5QAjOQYHEKS3faYgTxoMKsgW8RpTXtcTJpr/lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:fb:df:87:f8:3d:6b:a2:9a:4a:39:21:8b:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Jun 17 07:01:02 2025 GMT
Not After : Jun 18 07:01:02 2025 GMT
Subject: CN=7ab9e39c1576975fedb0815cdfcbe75021e1522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:9e:75:f5:0f:8d:fb:97:eb:e5:ab:08:1d:
5b:4d:41:b9:d7:87:90:9f:4c:f4:67:6d:b0:0a:70:
9d:af:7e:8a:c3:e4:54:46:85:58:d7:11:6e:fa:cf:
3c:2b:16:7a:68:7f:5c:0a:b0:88:aa:53:db:59:2c:
ef:9f:07:2d:2e:6a:b6:86:f2:b2:ac:00:52:f7:3d:
32:87:52:e6:64:ec:2c:4a:3f:27:ea:5e:f7:81:be:
71:e9:e5:c3:ea:c2:b9:c0:f6:fd:36:a8:dc:47:37:
5c:f1:1d:83:cb:34:4a:69:58:dd:91:37:7f:87:b7:
11:a6:33:ba:58:7e:53:f5:04:27:10:86:68:1f:37:
e7:95:3e:58:8e:fe:1e:6a:35:2b:a5:7f:25:af:4f:
76:9a:de:0c:9d:14:ae:6c:48:0d:a7:06:84:4c:be:
9d:23:00:f5:23:5b:e4:40:fd:e3:21:d0:cf:95:65:
eb:48:85:1f:6b:69:63:d7:5d:7e:6a:b9:7c:17:ab:
fb:2a:28:bf:0c:88:72:b2:e4:61:08:92:ba:ac:58:
cf:b2:6c:b7:1b:25:15:09:8e:85:56:44:e8:33:78:
79:49:ad:27:30:f9:1f:43:d3:68:f7:fe:c5:82:f4:
03:02:e9:62:c4:d7:32:bb:97:e6:bb:f6:28:45:7e:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:E3:9C:15:76:97:5F:ED:B0:81:5C:DF:CB:E7:50:21:E1:52:2E
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:31:74:b1:ff:42:60:97:4e:2b:42:25:ab:61:bc:7e:ff:67:
7e:fc:b4:5d:8c:42:7c:a9:e8:11:ec:10:f1:4b:a8:3a:1d:f5:
a7:44:aa:3d:c6:eb:58:61:dc:e7:14:cf:be:55:c8:b1:b6:c1:
fd:b6:46:e9:46:72:24:f3:fd:ac:22:d5:69:b0:ec:99:d3:1c:
10:fb:79:b7:f2:03:e1:eb:a5:f5:0c:cf:c3:52:51:6f:b2:83:
52:1a:ec:47:bf:d5:84:0a:07:45:0c:59:f1:1c:7b:52:0c:b8:
56:d3:fe:b5:52:07:0a:c4:5a:73:05:88:35:ff:50:11:11:79:
6b:17:33:c9:04:a7:e1:e8:78:6a:7e:e4:f2:61:73:35:88:3f:
a1:17:c6:91:4c:bc:03:6c:99:38:86:28:00:af:e5:aa:b6:89:
89:65:27:e9:ce:44:f2:74:00:86:49:09:85:32:8e:53:51:9a:
2c:40:fd:0e:35:21:e0:cf:ed:ef:5d:5f:63:c6:fc:21:6a:5d:
31:c9:0c:e4:fc:15:8e:d1:64:9b:3f:5c:c9:d8:8b:e8:74:18:
8d:31:c4:ae:d4:03:f1:7a:5f:77:e0:36:43:35:36:ae:12:66:
99:3a:35:71:ad:8d:31:93:b4:a6:75:6b:44:eb:da:f5:b6:1e:
43:0a:93:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8sPvfh/g9a6KaSjkhi3GfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDcyYjAzM2ZmNmZhMzhiZjIzNjEzOWFjZGI3N2E3YTBh
MDQ3YTMwHhcNMjUwNjE3MDcwMTAyWhcNMjUwNjE4MDcwMTAyWjAzMTEwLwYDVQQD
Eyg3YWI5ZTM5YzE1NzY5NzVmZWRiMDgxNWNkZmNiZTc1MDIxZTE1MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+edfUPjfuX6+WrCB1bTUG514eQ
n0z0Z22wCnCdr36Kw+RURoVY1xFu+s88KxZ6aH9cCrCIqlPbWSzvnwctLmq2hvKy
rABS9z0yh1LmZOwsSj8n6l73gb5x6eXD6sK5wPb9NqjcRzdc8R2DyzRKaVjdkTd/
h7cRpjO6WH5T9QQnEIZoHzfnlT5Yjv4eajUrpX8lr092mt4MnRSubEgNpwaETL6d
IwD1I1vkQP3jIdDPlWXrSIUfa2lj111+arl8F6v7Kii/DIhysuRhCJK6rFjPsmy3
GyUVCY6FVkToM3h5Sa0nMPkfQ9No9/7FgvQDAulixNcyu5fmu/YoRX7T9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq545wVdpdf7bCBXN/L51Ah4VIuMB8GA1UdIwQY
MBaAFNnXKwM/9vo4vyNhOazbd6egoEejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYt
ZjgyMWE1YTVjZjZhLzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYtZjgyMWE1YTVjZjZh
LzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijF0sf9C
YJdOK0Ilq2G8fv9nfvy0XYxCfKnoEewQ8UuoOh31p0SqPcbrWGHc5xTPvlXIsbbB
/bZG6UZyJPP9rCLVabDsmdMcEPt5t/ID4eul9QzPw1JRb7KDUhrsR7/VhAoHRQxZ
8Rx7Ugy4VtP+tVIHCsRacwWINf9QERF5axczyQSn4eh4an7k8mFzNYg/oRfGkUy8
A2yZOIYoAK/lqraJiWUn6c5E8nQAhkkJhTKOU1GaLED9DjUh4M/t711fY8b8IWpd
MckM5PwVjtFkmz9cydiL6HQYjTHErtQD8Xpfd+A2QzU2rhJmmTo1ca2NMZO0pnVr
ROva9bYeQwqTYQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:37:37 2025 by rpki-client