Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: u2sUZvI6BO7eGwfmSVmbvUdw+BHlVQWMLfFUy0j69yo=
Subject key identifier: 26:15:CD:AA:B7:5D:11:9B:7A:DA:F2:3A:64:CA:17:E0:7C:2F:5D:A3
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019773090D28BC84A5C3576F6BDDCCFD350D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0A30
Signing time: Sun 15 Jun 2025 10:01:02 +0000
Manifest this update: Sun 15 Jun 2025 10:01:02 +0000
Manifest next update: Mon 16 Jun 2025 10:01:02 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: twJeSeLjvwNFP2vkty+VLcQhPtERVtKQ3XjeRM0g2uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:0d:28:bc:84:a5:c3:57:6f:6b:dd:cc:fd:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Jun 15 10:01:02 2025 GMT
Not After : Jun 16 10:01:02 2025 GMT
Subject: CN=2615cdaab75d119b7adaf23a64ca17e07c2f5da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:64:15:a4:55:03:4b:b5:e3:1e:94:ed:ef:
f8:b4:45:98:65:99:8a:bc:39:6b:87:a9:49:9d:d9:
bc:58:0e:06:32:db:4d:99:e1:12:97:2d:82:49:6f:
f9:2c:77:d9:45:90:56:0e:50:f4:a2:f1:d5:47:ae:
39:de:5f:e0:43:29:dc:b7:34:ce:8d:55:85:e1:67:
00:b3:27:b4:8c:97:fc:e2:74:39:5b:7a:5a:86:e5:
53:90:85:56:1d:5b:37:a2:df:ad:65:7a:c2:bc:28:
2f:91:05:7a:ca:f8:d9:fe:54:8c:fd:d5:d3:15:ba:
36:fa:2c:d1:f4:9f:98:7a:0a:8d:4b:a2:33:7b:61:
f8:61:5e:99:b9:3b:cc:e3:66:0a:b3:cf:8e:25:6c:
18:aa:70:8c:33:d3:e7:15:e0:0e:ee:f1:ac:67:f1:
59:c6:f6:1d:77:ba:95:f5:6d:4a:ce:fd:b5:e1:8a:
dc:65:e7:9c:ff:fb:f6:0e:11:da:39:01:c1:dc:21:
19:17:17:60:23:6c:58:53:d3:b3:1b:ac:36:86:e4:
14:ba:25:df:20:60:c4:1d:df:ed:91:cd:44:bc:72:
f2:4c:cb:94:81:63:90:f8:97:7e:88:6e:cd:81:f8:
17:21:92:cd:ce:52:15:ab:00:74:88:ca:04:2c:66:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:CD:AA:B7:5D:11:9B:7A:DA:F2:3A:64:CA:17:E0:7C:2F:5D:A3
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:19:7c:f1:3b:bc:1b:4b:e6:01:d3:1d:41:63:a6:22:7a:
56:11:79:91:34:72:1c:b4:b3:69:a1:59:d5:23:08:2d:72:d1:
f4:10:6a:15:9d:b7:2a:c7:1f:fc:81:fa:54:a1:9f:7c:60:f4:
ea:91:0e:b5:76:31:38:c8:6c:bc:e0:6d:e3:7b:24:44:c6:cc:
07:3e:66:89:78:3a:38:cc:60:36:a4:8b:5a:90:0b:eb:01:ad:
4e:58:8a:88:61:04:f0:9e:2c:26:6f:17:73:49:a4:44:c3:d1:
c5:0f:79:7c:ee:04:ff:24:a1:f8:b2:a4:01:44:e8:0f:cf:75:
c5:1e:2c:26:67:78:99:82:7a:95:00:43:6b:41:51:3c:86:d2:
5a:ea:20:27:da:f9:b1:15:c2:02:fc:31:2e:fa:c2:3e:0d:96:
34:0a:5a:03:b9:79:68:70:2f:75:19:99:29:d6:7d:75:fb:41:
50:91:6b:4c:83:36:84:88:8f:56:ea:2f:84:e0:d5:cf:cf:24:
1d:76:1a:c3:76:78:8f:32:67:65:e9:51:65:ef:49:c9:ae:7f:
b0:91:96:a0:e5:b4:a0:ec:0c:18:68:8c:1d:30:74:07:50:7a:
04:0d:a2:60:be:d3:a2:41:4a:3a:b4:46:fd:fb:dc:50:53:da:
45:e0:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:36 2025 by rpki-client