Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: Ec/ZVIbs36fQJ9dDcQcoFO1mQQUEzs8k/10vl8iFO3g=
Subject key identifier: 52:E5:1B:EB:1F:1B:10:58:A1:31:F6:D8:3A:E9:5D:87:10:B7:C2:15
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 0196B333B4C0878561CB181E7DAEBAAC26C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 04:00:32 +0000
Manifest this update: Fri 09 May 2025 04:00:32 +0000
Manifest next update: Sat 10 May 2025 04:00:32 +0000
Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: 8hFB/Q1TW0wn8ENRr/g0Ma5CV7NuNlUicE7qkEebRvY=)
2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=)
3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:b4:c0:87:85:61:cb:18:1e:7d:ae:ba:ac:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: May 9 04:00:32 2025 GMT
Not After : May 10 04:00:32 2025 GMT
Subject: CN=52e51beb1f1b1058a131f6d83ae95d8710b7c215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:6e:3f:fc:0b:7e:af:11:fb:b3:a1:f7:d7:
4e:95:05:55:2d:73:d9:29:1a:1d:9f:d0:d1:7d:26:
b9:42:5e:2f:1c:98:b6:31:61:bf:e0:c3:27:45:99:
cb:49:92:b7:15:1b:57:3f:aa:b1:d5:71:77:88:e1:
e3:e4:63:1d:3f:e1:23:d5:15:06:e5:8a:c0:33:5d:
c8:d2:19:a3:1d:a2:99:1e:58:df:52:ce:4c:9d:cf:
19:45:d4:79:10:2e:bb:db:a6:4a:ae:a7:b5:24:47:
09:23:9e:a5:9a:b4:7e:bd:16:15:45:d9:c3:3c:40:
8c:b5:ac:27:a7:0d:17:27:c6:58:fd:24:4a:24:aa:
69:9c:cf:6f:42:25:6b:0d:47:6e:4d:78:19:a1:48:
0c:76:47:91:de:09:f6:ac:90:36:7d:10:70:4f:3f:
f8:f7:1d:2d:48:96:5c:99:b0:e5:e3:84:66:0f:f4:
ba:1a:54:52:fa:66:7d:6c:7c:91:1c:97:88:c4:4a:
a5:d1:a3:8f:32:89:59:28:11:6b:89:de:6a:6b:de:
e0:e3:12:c9:7c:c0:aa:e5:7c:c9:8d:34:6e:11:ca:
56:e9:e7:46:d2:88:0f:eb:65:ba:af:2f:00:e0:39:
41:40:bb:34:9d:ab:1e:88:59:03:72:83:df:5b:33:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:1B:EB:1F:1B:10:58:A1:31:F6:D8:3A:E9:5D:87:10:B7:C2:15
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:53:4f:df:09:8b:5d:d2:f0:1e:f1:b1:4b:50:a8:d4:52:
d8:5e:f5:4f:02:54:77:51:69:5e:f2:52:e9:37:96:5f:b3:c5:
e4:87:3f:d8:78:bc:89:36:78:73:b5:73:aa:d3:06:8b:de:71:
cd:e8:20:e3:58:52:87:d7:f0:42:e5:a3:ae:3d:b1:69:65:95:
b8:9e:1e:37:c7:05:76:6a:b9:9c:cc:e8:6c:38:42:34:f3:1b:
e4:54:87:44:5b:75:94:78:e1:46:af:0e:cc:3d:dc:96:5f:4a:
d5:48:54:c8:b8:1b:78:8c:45:d0:9a:0f:70:65:d2:56:da:75:
c6:22:c8:63:3a:27:e7:51:73:86:fd:73:87:5d:61:e8:85:26:
f9:b5:1e:df:99:b2:f6:81:4c:35:8e:ad:4e:88:d7:8a:af:cd:
e0:9e:8c:67:f4:b1:d3:56:8c:93:f6:ff:a1:2f:a1:c1:3c:7e:
7f:d1:8a:80:42:28:51:10:09:9b:55:90:bd:f7:51:f9:a5:4e:
69:88:78:7f:0e:67:81:be:ba:10:47:ec:60:9d:d9:a8:5e:29:
3c:9d:e7:78:d5:a6:15:87:d2:2e:00:b0:47:0c:81:19:60:a9:
0a:e6:ab:23:d7:6a:72:5d:45:81:21:d2:f3:8a:49:cb:6a:51:
a0:b0:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:45:49 2025 by rpki-client