
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: qPyjfyqk97bQzMHmWmUmdabUQdbi7CkuaBD1LBPP4Jg=
Subject key identifier: 73:B1:B2:2F:70:51:3A:DB:09:4B:EA:7D:13:21:B9:51:65:A2:06:DD
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 019873E235772E71B8569104B09120F68AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:01:01 +0000
Manifest this update: Mon 04 Aug 2025 07:01:01 +0000
Manifest next update: Tue 05 Aug 2025 07:01:01 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: SVN0XAciNWVHdwCMaEDnNmAfBReLN63k/RQVuq6e0Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:35:77:2e:71:b8:56:91:04:b0:91:20:f6:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Aug 4 07:01:01 2025 GMT
Not After : Aug 5 07:01:01 2025 GMT
Subject: CN=73b1b22f70513adb094bea7d1321b95165a206dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:fb:bf:cb:bf:83:9e:9f:1c:3b:00:f8:1e:
ae:37:ed:d4:ac:ea:fc:63:80:9d:22:dd:e3:db:5d:
28:1f:17:02:00:92:58:6d:ee:20:7b:88:9b:bf:92:
fc:d4:56:c0:96:11:ad:59:ce:3e:51:ef:38:3f:cc:
d9:2d:49:98:5c:3d:97:15:6f:d1:e7:27:2b:ed:d7:
43:ed:f3:46:8f:97:38:98:be:21:37:7a:f0:e7:44:
dd:5e:41:70:f3:3d:e2:b7:0c:da:6f:e6:3b:87:09:
a1:f7:46:4f:17:ad:a7:72:a7:bf:03:69:e7:3a:ec:
5c:97:b6:1a:14:ff:23:87:99:30:0b:32:b5:0e:33:
9a:f0:81:c1:27:fe:55:ff:c6:3d:bf:37:d4:b8:1d:
88:04:25:4b:8c:de:7b:a1:ce:3f:9a:a2:15:99:e6:
b1:26:8a:9c:36:bf:80:d7:6e:fc:5c:06:b7:49:c3:
28:af:a0:2d:09:df:aa:46:29:9a:c9:8d:8f:79:4e:
22:9c:59:25:22:1b:fd:4f:00:eb:0b:0f:5b:9f:be:
16:82:bc:59:e3:e8:d1:72:c1:6b:9c:a7:16:e8:bc:
a1:f0:0f:45:18:a5:3e:4a:ac:7f:d2:fe:92:1f:50:
a0:69:14:94:cc:aa:57:2d:e5:5b:f5:3f:59:4c:e3:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:B2:2F:70:51:3A:DB:09:4B:EA:7D:13:21:B9:51:65:A2:06:DD
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:41:a4:53:d6:88:1c:75:51:bf:4f:e0:f3:a6:6d:5b:97:
c0:bf:b5:cf:6d:8a:ec:dc:ba:3a:1e:e6:0e:a9:f4:cf:b8:53:
aa:28:dd:e8:86:1a:7f:29:a6:e5:b4:eb:b8:a7:85:3b:7f:7a:
73:34:fc:e4:39:b1:8d:a8:b7:fc:de:cf:3b:f6:7b:36:d4:84:
d3:9f:15:e4:b2:46:d8:27:d5:a1:13:70:a1:74:65:d4:2d:fd:
f5:e5:81:46:a0:b4:33:bc:24:36:15:1e:a1:ea:aa:d7:9d:0e:
b7:86:a1:f7:e8:d6:ac:01:b7:01:93:4e:0c:e3:9f:f6:ff:b0:
27:f1:9c:d2:13:69:d8:34:b2:c2:bf:f5:58:4a:48:cb:ad:ea:
aa:08:7b:a5:fe:cf:fa:c6:ba:a8:f8:d6:e0:cf:9e:dc:a0:96:
b4:86:60:65:46:9e:91:63:f8:62:20:6a:18:f6:5d:fd:97:aa:
0a:66:a2:ba:42:b9:52:0c:86:31:9c:46:d6:25:15:ed:c7:f7:
3d:bb:ef:70:d5:d5:28:16:e0:ab:66:fb:05:c0:20:3c:8c:82:
1c:8b:70:bb:0c:a3:3d:e6:60:3d:cc:57:65:a0:e6:3b:d0:53:
fe:7f:53:e7:61:f4:44:46:81:de:cc:26:69:da:ce:fd:b7:0e:
b4:2e:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:40 2025 by rpki-client