Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: fD1+Idk+xWi/XBfc6rEMkeR2Zze56F4jicsJbLFBD+4=
Subject key identifier: 57:C5:74:D1:77:B3:0B:A3:E3:1B:A3:6C:E5:D0:42:D6:6E:EF:9D:36
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0196C0EF60234D8E66C313B627959461ECC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 153E
Signing time: Sun 11 May 2025 20:00:35 +0000
Manifest this update: Sun 11 May 2025 20:00:35 +0000
Manifest next update: Mon 12 May 2025 20:00:35 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: 4cPE9AbEitjp9XerROdCKCxq+yntn41QlhOV7Xze8kg=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:60:23:4d:8e:66:c3:13:b6:27:95:94:61:ec:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: May 11 20:00:35 2025 GMT
Not After : May 12 20:00:35 2025 GMT
Subject: CN=57c574d177b30ba3e31ba36ce5d042d66eef9d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:95:f7:37:b7:2c:55:0d:9a:ab:13:bc:d6:d5:
a8:8a:08:bf:af:e6:18:b0:4a:68:59:77:db:4d:be:
40:b6:db:d9:01:5a:ec:71:00:37:c5:6c:9f:2d:7f:
73:95:a2:60:b0:e2:6b:e3:5c:81:ac:3a:e6:0e:72:
a8:b9:6a:35:18:be:ca:fd:da:7b:f3:de:7f:b6:61:
56:49:ae:e5:e8:61:fb:12:ce:63:25:56:96:f9:b0:
70:64:09:cf:c3:a9:da:23:cb:2d:82:7c:c4:53:14:
71:ce:a3:08:ea:5b:d0:47:13:41:61:18:99:eb:e7:
38:30:19:8a:c1:ed:ac:da:78:77:3d:e1:9c:63:37:
8a:16:5f:be:a5:ae:85:77:b3:0a:75:68:89:1d:57:
5e:8f:17:b7:15:bf:6a:e1:09:89:1b:ec:77:1e:e2:
b8:10:04:94:ba:8f:70:a3:7b:1d:68:51:50:2a:63:
8b:15:9c:a0:2a:20:57:d3:bb:97:8c:05:b4:25:b5:
41:9e:af:1f:a0:87:b8:47:8e:af:e7:92:72:85:cc:
ac:93:d2:55:c8:39:2c:1f:5d:9b:d8:d2:a8:f8:24:
1d:11:f5:4c:a5:bb:ca:54:38:23:6a:8f:99:bc:40:
29:7f:bd:93:8d:8c:29:7d:06:a5:ec:b5:89:ce:68:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:74:D1:77:B3:0B:A3:E3:1B:A3:6C:E5:D0:42:D6:6E:EF:9D:36
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:b5:85:ba:f9:5f:e8:87:39:99:20:a5:ec:43:b3:5a:fe:
e5:cd:fe:b8:31:81:c4:ce:61:17:54:c3:1b:4b:fd:83:0f:8b:
20:e4:e4:c5:25:e6:35:97:32:d2:b4:2a:f4:11:ed:75:17:a7:
4f:ab:51:aa:1c:eb:03:01:53:42:93:bd:ab:72:99:5d:2c:3e:
85:9d:81:21:e0:c0:cc:7e:ee:ac:f4:6b:98:53:0c:ab:5d:51:
18:63:3b:bc:aa:73:fb:1a:ed:94:c1:92:15:d3:4e:b8:e9:14:
d0:ce:d2:d5:5b:cf:98:9f:61:78:df:d4:e9:0d:18:7b:9b:ac:
08:fb:d0:c7:b9:8a:29:d4:c8:25:c6:33:e4:ac:76:98:fa:c2:
f3:30:7f:59:7f:f4:eb:e9:5a:8c:d7:24:36:73:91:96:f0:19:
72:81:f3:3f:e9:3b:12:52:ad:82:60:e2:85:8d:93:f6:d0:c5:
2b:0f:8f:b2:0b:3d:fb:ad:62:6c:b1:d8:98:fa:ee:0a:32:f0:
3a:c9:68:2c:4c:84:b7:3b:05:17:be:11:80:86:c9:da:88:e8:
4e:41:bc:d2:19:cb:52:53:85:ef:fa:59:2d:b8:b6:b9:8b:69:
b2:04:d0:cc:a0:c5:36:87:7f:11:1e:f5:1b:3d:16:f3:4a:15:
0e:13:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:07 2025 by rpki-client