Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: TFDMpyImujfk8K5WAiXi1Hx2dFUv3C3ZlczcgvQ32CE=
Subject key identifier: 9E:43:37:8F:D0:1B:6E:32:4C:87:4F:FC:24:48:1B:EB:DA:5E:6A:1C
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0196BE935A3864F4C471D57DCE8FCC4D9750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 03E5
Signing time: Sun 11 May 2025 09:00:50 +0000
Manifest this update: Sun 11 May 2025 09:00:50 +0000
Manifest next update: Mon 12 May 2025 09:00:50 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: jAAKLQ6Z+bnfR3ZUtSdSuwuF/v/JPUNDC46DJbv2xUE=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:5a:38:64:f4:c4:71:d5:7d:ce:8f:cc:4d:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: May 11 09:00:50 2025 GMT
Not After : May 12 09:00:50 2025 GMT
Subject: CN=9e43378fd01b6e324c874ffc24481bebda5e6a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:f4:f1:76:c8:57:76:ed:b1:ae:b1:d9:13:
18:69:bc:79:1b:3e:b1:19:df:6b:c1:48:c7:ac:11:
60:6e:49:96:eb:7a:ff:1d:e0:d4:cc:95:7e:95:12:
00:63:8c:ad:5d:5e:24:42:46:81:04:51:60:2f:d7:
8f:82:3a:7e:ae:5c:8e:4d:c9:e5:d8:93:86:04:1c:
3c:1c:36:de:3a:f3:dc:4f:3f:2e:5f:12:a5:d1:22:
47:06:2a:b2:19:fd:e8:e8:6c:28:59:ca:92:29:8b:
bf:ca:9b:62:dd:5a:aa:79:8d:b7:45:a5:6f:50:08:
32:58:15:73:82:fb:5b:87:c2:23:a8:34:c1:9f:35:
d7:79:6b:8b:af:05:e3:57:33:b7:3c:1f:9d:74:42:
36:df:04:97:3b:a4:36:6f:f2:a9:72:98:f8:d1:ed:
c7:76:0a:71:90:2f:75:6c:5d:64:c8:2c:8d:b3:fd:
33:49:d4:63:61:45:fd:a4:c7:14:fa:92:1a:4e:11:
b7:08:29:34:54:1f:9b:b0:f4:39:30:d1:95:8c:0e:
0a:47:1d:3a:20:d6:ce:bf:c8:ec:eb:62:e2:38:27:
f2:9f:09:5e:62:8d:6f:c9:ab:c6:e5:b9:46:46:ca:
5e:ac:24:1d:ce:2a:00:3a:f1:28:59:2e:08:01:8f:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:43:37:8F:D0:1B:6E:32:4C:87:4F:FC:24:48:1B:EB:DA:5E:6A:1C
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:0c:66:c4:30:0f:3f:ac:b6:25:53:80:7b:2d:ca:db:50:
47:89:84:a5:7a:cb:29:47:a1:57:85:2b:fa:b9:f7:1a:ba:7c:
8a:77:f2:1b:22:e0:9c:16:86:c5:96:b7:ad:61:c0:ac:dc:74:
d0:0f:ba:18:2f:a2:e8:8a:50:db:e6:9a:58:3c:ed:71:5f:af:
10:a5:6f:11:b6:66:2e:c6:c1:8b:8e:81:ad:12:ae:01:02:1d:
15:d1:d0:b3:62:34:c2:e7:c4:ff:fe:eb:5c:a6:01:6b:d0:3d:
1a:fc:2f:32:73:a8:c1:1f:03:93:e2:f8:d7:b5:32:9c:6b:18:
28:8a:1e:e9:34:76:2e:ed:c3:27:64:07:93:23:1e:38:b1:19:
ed:c9:bf:44:41:06:45:05:80:eb:ad:37:ee:b1:70:7c:49:c7:
ef:b2:2c:28:3c:64:62:25:68:94:7f:ec:5c:6f:1b:78:ba:b6:
11:dd:52:d4:f0:23:d4:96:1b:ea:94:ab:61:0c:45:1f:f9:14:
7e:e8:4e:2b:c5:d7:26:f3:ba:b9:ac:c7:97:b4:e0:cc:23:d2:
64:2e:11:4e:53:e1:02:b2:c9:6e:cf:24:4f:31:c4:6e:d2:46:
3f:25:ef:03:ab:c5:23:2a:f1:7e:98:93:eb:1a:a4:63:5f:7d:
38:68:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:18:00 2025 by rpki-client