Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: BPzVof25Pd912NKwx/8pNojovRv/ZxE6Gm1r3FtUjeU=
Subject key identifier: A8:69:9D:C3:54:C7:DE:62:0A:2C:3B:F6:A4:B1:72:F6:00:CE:22:7D
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 0196D13E5F0DC8AA1B56195376190E734E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 153A
Signing time: Thu 15 May 2025 00:00:47 +0000
Manifest this update: Thu 15 May 2025 00:00:47 +0000
Manifest next update: Fri 16 May 2025 00:00:47 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: zBYOHgYy6JeOQZdImq1ZVPbtUU7RG+IE5+jQ92thoHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:5f:0d:c8:aa:1b:56:19:53:76:19:0e:73:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: May 15 00:00:47 2025 GMT
Not After : May 16 00:00:47 2025 GMT
Subject: CN=a8699dc354c7de620a2c3bf6a4b172f600ce227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:ae:05:6c:00:ef:71:c3:f9:58:86:56:bd:
88:ae:25:1e:df:cc:1b:d9:47:b9:93:5f:54:77:39:
53:99:ba:d6:65:5e:67:c8:92:b1:a9:42:09:85:0a:
8c:89:2b:a3:11:60:f3:66:89:fc:58:03:57:cb:f4:
92:4a:00:8e:c0:47:cf:7d:41:c2:ff:4c:24:6b:53:
6c:3f:23:cd:74:20:1b:2d:85:31:ed:94:9e:db:53:
80:7b:bd:94:6d:df:d9:7d:ea:46:e2:a8:35:ea:d4:
45:15:50:e6:ad:93:48:38:33:24:ca:4a:a0:78:44:
5a:b3:43:cc:87:47:84:0f:c3:e3:e7:05:7a:c4:82:
ba:01:02:ce:b9:4a:eb:71:82:03:4b:4e:fc:7c:f7:
ff:6b:0c:6d:d9:b1:df:f7:70:0f:d7:8a:69:9a:98:
a5:db:1c:b6:30:bf:aa:e2:8e:b0:c7:14:7f:bf:5e:
de:6d:fc:29:d0:af:ac:2a:47:9b:e3:3d:ad:a9:d6:
fd:66:b6:d1:8d:14:e9:fa:29:5c:7b:bb:6c:96:43:
4a:84:f4:a2:e2:a5:67:dd:36:f7:aa:48:28:05:65:
e5:12:51:02:b2:e9:32:61:26:07:47:19:75:10:b3:
e3:39:e8:7f:1a:23:37:ae:d7:51:da:b2:27:55:51:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:9D:C3:54:C7:DE:62:0A:2C:3B:F6:A4:B1:72:F6:00:CE:22:7D
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:0d:fb:87:93:eb:a8:44:58:34:1f:25:e6:9b:c7:9d:59:
a8:b9:5b:24:ca:7a:f8:20:6c:75:b9:24:00:5b:9f:5d:74:85:
9a:26:8e:b3:77:8d:ad:2c:ae:00:f8:a6:4b:b9:d8:82:f6:14:
49:29:d4:bc:ba:89:24:63:dc:0c:ea:e8:53:42:59:01:e9:36:
ab:74:18:45:ef:7a:9b:bb:97:ea:ae:bf:7a:b1:97:32:64:bc:
aa:7d:85:89:e2:fe:a0:80:4c:51:48:f7:67:13:05:77:0b:99:
cf:f8:5d:87:6f:e8:4c:d9:54:c7:49:4a:cc:9d:ae:56:ac:56:
d2:19:5b:01:08:ed:35:82:fa:65:61:51:be:4e:41:24:dc:c5:
03:2b:df:af:5a:42:08:e9:b9:94:3b:f8:92:61:7d:1f:a4:42:
bb:54:3d:87:77:2f:66:40:54:24:29:58:f8:0a:f8:67:be:ca:
04:08:44:6c:d5:40:9c:11:3e:a3:96:e4:22:66:e6:a7:a1:2e:
46:5b:6d:23:b9:b7:94:1b:0e:15:22:12:16:c6:82:9e:34:f4:
5b:6d:12:e7:c0:3b:11:d8:70:c7:8a:ce:f0:7c:ed:d1:91:29:
6d:d8:54:a4:34:26:0d:d0:af:ad:ff:65:fe:f9:6c:f2:e3:c3:
32:92:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:13:23 2025 by rpki-client