Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: Kr60/ZlqJLGF4lLijijDaPox5mvFaQajm41bDpagmEU=
Subject key identifier: 15:87:2A:08:19:4C:D8:EB:7C:9C:1E:C6:53:28:5C:9D:B1:4D:24:5B
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 0196B2FCF4D4C945C223D8DEB45D87C7086D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 03:00:44 +0000
Manifest this update: Fri 09 May 2025 03:00:44 +0000
Manifest next update: Sat 10 May 2025 03:00:44 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: zvo2ZRr0sTyfwiL0IcJomnCxYEJcL7GfWlqHw1S1ag4=)
2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:f4:d4:c9:45:c2:23:d8:de:b4:5d:87:c7:08:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: May 9 03:00:44 2025 GMT
Not After : May 10 03:00:44 2025 GMT
Subject: CN=15872a08194cd8eb7c9c1ec653285c9db14d245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:1d:6b:b9:6a:29:55:3f:94:28:48:0b:5b:
36:f2:af:7c:43:ba:c2:72:c5:13:ef:24:50:42:2d:
a0:10:f7:ec:39:7e:9b:2b:94:26:04:4d:a9:79:ca:
a1:14:99:16:fe:4d:34:ae:81:f1:48:ef:27:5e:c8:
b6:3c:60:ac:29:b8:27:a7:29:dc:55:d8:d1:48:b6:
5d:4f:70:f5:1d:e5:7b:08:64:01:49:0d:85:d5:0e:
7e:c8:21:9b:2e:84:d2:7f:29:00:7e:2f:76:96:36:
9b:8a:d6:90:48:8e:01:8a:4f:80:44:67:df:12:68:
58:63:49:ba:20:63:d1:a3:e9:f6:44:02:73:62:e3:
d7:4c:18:18:ef:18:cd:d7:9c:9c:09:2c:e2:d8:fd:
db:04:8b:50:18:91:95:c1:57:d8:ff:68:31:24:4d:
12:84:0e:5a:57:10:b1:31:fd:a3:de:a5:99:b9:b4:
c3:46:42:ce:83:9a:3d:2b:d9:fb:e5:76:69:0a:d1:
04:5f:d0:72:0f:87:c2:9d:eb:49:0d:ca:b8:68:3a:
f6:5b:e3:b0:7e:c5:4b:9d:0b:52:5b:49:a4:fb:7b:
be:d0:04:79:33:81:b2:dd:e4:d5:09:d2:8f:bc:a0:
9e:75:42:55:43:9c:0a:1a:b4:67:d6:ab:0b:06:c8:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:2A:08:19:4C:D8:EB:7C:9C:1E:C6:53:28:5C:9D:B1:4D:24:5B
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:23:71:9b:e2:de:2d:b2:b4:0b:7d:f1:c5:29:b9:cd:a3:4b:
5c:2a:43:8d:ea:89:c8:73:9e:dc:1d:cc:1a:0a:1a:14:da:9c:
d8:e8:ad:d9:bf:f8:76:d8:5b:51:03:02:66:b3:8b:48:95:2f:
c0:c3:1c:38:7e:a6:62:65:de:13:3f:c3:55:54:3f:92:5d:74:
4a:70:f8:c9:e2:23:eb:d9:a7:33:0e:49:dc:80:fd:2e:30:68:
91:81:87:36:45:33:fa:f1:66:9c:28:59:ac:a0:5e:7a:72:35:
ea:06:e8:98:97:88:5b:75:e9:dc:c3:2c:ab:01:21:06:67:c3:
8f:24:de:b4:aa:7e:00:2d:cf:af:5e:74:c0:bb:2c:05:ff:7c:
41:3f:82:7d:df:a3:50:10:6c:40:14:3f:49:a9:6e:39:cd:db:
24:5d:96:1b:a4:e6:3c:b6:c0:90:1a:31:8e:90:c2:30:19:04:
82:1c:9f:0c:a1:97:77:75:31:fd:43:30:26:12:bc:b5:26:dc:
f1:34:fa:05:d4:45:31:7f:80:6d:c0:16:c4:3a:e8:03:25:be:
5c:5d:fe:94:ec:df:4f:7e:b1:f6:b1:ee:98:99:86:5b:6d:d2:
eb:8c:e7:fb:a5:dc:40:29:11:5a:bc:cb:7a:70:1d:2f:1d:c2:
b3:52:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:17:58 2025 by rpki-client