Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: QZErmWBmKjOje5I6DE5UcoCbZNcHtuMEOqPBUYzLhBY=
Subject key identifier: 02:B5:54:3C:46:6D:DF:65:9E:D1:B2:5F:E9:C1:91:25:9B:13:CD:8B
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 01976C2B0D047B91D8E57472806E1E4DA95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 12B0
Signing time: Sat 14 Jun 2025 02:00:50 +0000
Manifest this update: Sat 14 Jun 2025 02:00:50 +0000
Manifest next update: Sun 15 Jun 2025 02:00:50 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: mczRX7d3qVt+KrU9f9zqsicHAxz6RPeUkQOYKC5OTf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:0d:04:7b:91:d8:e5:74:72:80:6e:1e:4d:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Jun 14 02:00:50 2025 GMT
Not After : Jun 15 02:00:50 2025 GMT
Subject: CN=02b5543c466ddf659ed1b25fe9c191259b13cd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:0e:9d:34:f9:c2:37:1a:ae:bf:79:d7:20:
da:d9:e6:a7:8d:e7:89:6a:eb:5b:29:ea:31:56:72:
c5:7b:1a:46:86:0f:64:cf:12:4f:12:74:4c:93:e6:
9e:6a:be:89:e3:27:12:55:fe:a6:39:c3:c2:73:a0:
0b:05:4c:b5:96:1b:aa:85:33:0f:6f:ba:0c:1f:87:
fd:8c:df:9b:d4:ec:30:86:2a:90:e4:14:f2:41:21:
e7:ba:55:7b:6a:55:dc:91:1c:74:51:74:32:1c:d8:
75:7f:be:9b:e7:4b:81:52:06:6f:24:ca:d3:6b:f7:
72:da:fb:6b:44:2b:7f:ac:f7:bd:e5:a9:b6:53:a9:
b4:2a:56:db:62:50:ce:91:bb:43:d7:6e:df:97:f9:
75:06:5c:9d:51:97:3b:da:ac:8c:fe:41:5d:6f:91:
55:01:38:e5:d9:a7:c7:e2:4b:f3:ed:86:25:56:2b:
84:25:fa:8a:7d:ac:df:74:bd:ff:e1:ec:d8:a2:e1:
88:1f:d7:77:27:fa:42:68:03:ea:79:68:99:cf:02:
bd:88:80:f6:83:ff:9c:26:9e:a3:6d:33:50:f1:cc:
c4:a0:7a:b8:82:0e:db:79:86:7d:f3:e5:fe:f5:6d:
bf:a4:60:7b:04:6e:68:64:9e:16:55:40:e4:5b:05:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:54:3C:46:6D:DF:65:9E:D1:B2:5F:E9:C1:91:25:9B:13:CD:8B
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:48:27:b4:3d:55:7c:99:07:ba:0d:6c:a5:cf:13:f6:b9:01:
fa:b6:f3:ec:36:1b:5b:10:0c:ac:20:db:32:5c:2a:a9:c7:0e:
9c:d1:16:ee:7a:74:a9:cb:31:20:c1:6f:0d:4d:b7:26:af:23:
5d:43:3b:27:b1:c6:14:a7:9c:fc:36:00:d6:eb:8c:2c:4d:c5:
d0:72:fe:0b:14:49:a9:3d:c9:0b:2f:b6:65:c2:6f:ac:43:51:
ef:57:5f:72:28:3c:a6:a5:f3:4a:79:6b:cc:ff:1d:34:84:7d:
c9:ad:47:0d:33:6f:49:cb:b2:69:94:a4:9f:40:02:b7:be:f6:
d6:05:62:ec:73:15:e1:fb:e1:8f:b1:bc:7e:d6:37:f3:c8:25:
b9:97:37:a1:6b:85:c2:e9:22:52:6d:2c:bc:24:5f:15:e1:64:
55:60:e6:b9:d4:de:8f:f1:27:12:f1:7a:18:35:b4:4c:27:f7:
68:79:41:e4:9d:17:34:e2:75:20:7d:94:a7:43:70:9a:f7:39:
5a:6e:e7:f1:d6:de:d9:ac:db:d9:76:42:9e:d1:96:3f:54:3a:
88:29:f5:5e:99:82:39:d6:31:96:67:ba:c0:87:fe:f3:1d:e7:
86:7b:81:60:a4:99:9e:41:12:12:51:32:71:53:de:22:2f:78:
1c:54:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:58:39 2025 by rpki-client