Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: p8XWx+UpWnxd2YVkFpcbbR/8vsXcJBGiVMoMTPLJ4p8=
Subject key identifier: 57:24:1E:FA:ED:16:99:E1:8A:85:42:96:04:DD:60:63:53:E2:1F:50
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 0196B28ED8D06DAE0273C371A80E84918AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 11F5
Signing time: Fri 09 May 2025 01:00:28 +0000
Manifest this update: Fri 09 May 2025 01:00:28 +0000
Manifest next update: Sat 10 May 2025 01:00:28 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 6DSSXGpYlSXUpJwwuHo2ZHBMrppL7KooN+kKOD+m/S4=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:8e:d8:d0:6d:ae:02:73:c3:71:a8:0e:84:91:8a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: May 9 01:00:28 2025 GMT
Not After : May 10 01:00:28 2025 GMT
Subject: CN=57241efaed1699e18a85429604dd606353e21f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:1d:41:86:bc:72:17:93:25:f9:b1:82:d4:
b7:d9:ce:a3:03:33:a3:95:c7:75:c6:18:2d:9b:a4:
32:84:0d:83:7c:64:4c:70:eb:6f:90:cb:f8:8a:e1:
a9:1a:cf:98:61:d2:08:d7:d3:39:fc:56:bb:9a:40:
04:a4:6d:8f:f8:d6:c7:77:e5:7c:61:5b:f2:a7:39:
71:30:a3:68:29:9d:a1:2f:5c:25:37:a2:0e:da:e6:
21:15:21:7c:21:61:2d:79:42:e4:34:48:dc:5e:4a:
f0:ec:47:fd:52:85:df:7c:2d:32:a3:ac:72:b1:ab:
6e:cb:b6:5c:dc:c7:0e:41:17:98:55:2f:fa:a1:a6:
67:da:af:da:7b:27:81:36:7f:ee:52:1a:03:f7:df:
5f:80:47:56:a9:a7:06:d0:1f:8f:e8:16:8b:8d:39:
31:96:d5:67:da:4e:82:3f:29:e8:34:b2:5d:ec:a7:
b9:a1:5a:b9:d9:9f:f8:50:73:cf:c2:4a:ac:ce:5d:
d2:41:a1:05:38:ce:c6:a6:7f:9e:9b:12:47:c3:96:
51:09:5d:31:ed:35:55:0f:e1:f2:13:b6:8f:64:d7:
6a:a2:11:ed:60:09:bf:24:02:00:c5:31:9a:32:5d:
9a:31:50:0d:2b:e2:8b:78:98:80:1c:54:5d:4c:b8:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:24:1E:FA:ED:16:99:E1:8A:85:42:96:04:DD:60:63:53:E2:1F:50
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d5:4e:b0:59:c6:00:83:25:e1:48:f7:d9:b6:69:92:5d:c5:
88:60:4a:26:11:67:7e:91:24:0e:25:e5:88:76:ce:93:e6:30:
f7:7e:b1:70:16:13:ea:0e:d6:48:de:61:4d:02:f1:78:06:05:
d9:60:1e:f1:4f:a5:a2:b2:c4:8d:41:31:8c:8b:c6:b3:9a:2c:
6e:0d:01:00:1c:93:d6:4a:09:a2:4a:bf:6f:9a:07:64:c1:96:
1b:36:91:d4:a5:b0:71:aa:3f:2e:0c:d4:04:5d:de:94:16:c3:
5a:87:83:af:1d:03:a4:06:57:28:2a:90:74:58:d7:41:0b:9f:
b0:fa:62:be:43:48:d8:2a:60:5d:74:a2:c7:d1:84:31:45:47:
19:f1:2f:b6:6f:3d:00:06:34:32:84:ea:d2:d5:f4:50:fd:5c:
e8:3a:aa:4e:58:bc:f0:77:e2:04:18:a3:fc:4e:97:79:77:05:
da:fd:3f:19:f3:c3:39:4b:ee:cf:6a:01:f0:c1:0a:de:64:48:
29:7f:60:f8:93:90:d7:66:d3:33:37:43:1d:e7:f3:3f:00:bf:
97:2f:63:32:cc:74:05:88:84:95:1f:93:33:32:57:70:19:ab:
d3:53:9e:44:ae:08:b4:7b:ed:e1:cb:6e:82:5e:63:93:20:b7:
d5:ff:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:38:35 2025 by rpki-client