Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
File: 2L2bhs89vBD7aV_xTYu1ShMHsqU.mft (raw, json)
Hash identifier: Lua0zxL7+zdJGfFJGgC4BiPcJxRUKjSD5Fbgeni5u5E=
Subject key identifier: 79:72:8F:B6:96:3E:AB:21:00:5E:1E:E4:72:E6:A0:66:F3:A6:38:D2
Authority key identifier: D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
Certificate issuer: /CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Certificate serial: 0196A6545FFC59AC11ADF96CC9E67C2A8F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
Manifest number: 0C88
Signing time: Tue 06 May 2025 16:01:09 +0000
Manifest this update: Tue 06 May 2025 16:01:09 +0000
Manifest next update: Wed 07 May 2025 16:01:09 +0000
Files and hashes: 1: 2L2bhs89vBD7aV_xTYu1ShMHsqU.crl (hash: bxCsRob0+Q2LRVPnl6G/NsGxbe0d/z3bqwDEiDoJwkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:5f:fc:59:ac:11:ad:f9:6c:c9:e6:7c:2a:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Validity
Not Before: May 6 16:01:09 2025 GMT
Not After : May 7 16:01:09 2025 GMT
Subject: CN=79728fb6963eab21005e1ee472e6a066f3a638d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:7d:d7:a8:58:72:66:1a:7b:34:7e:46:1f:
b0:ec:92:11:1b:72:c0:9b:9a:5f:ae:2f:47:07:5b:
32:17:5a:72:44:bb:66:85:35:57:84:fd:23:1e:b8:
95:51:43:eb:49:dd:38:68:41:ca:be:fc:5f:0f:20:
f1:86:b1:f2:4f:98:7a:28:57:6f:c2:91:84:d4:87:
b1:05:d2:0d:7a:ca:68:d2:2c:66:7b:7b:a9:6c:7c:
9e:88:22:82:3c:59:74:95:06:e6:9c:c4:18:4c:54:
07:27:36:16:ae:37:39:db:9d:c7:ad:2b:0d:54:6d:
e2:b0:d8:ea:80:93:af:52:8f:30:3c:86:af:88:07:
07:f0:1e:87:59:77:d9:32:00:ab:be:53:41:89:0a:
f0:66:72:b7:ed:13:e3:2c:f6:fb:d6:51:ca:ca:c4:
4b:b2:6a:d8:c9:38:03:5d:6f:09:68:f3:a1:20:55:
21:2b:6d:03:0c:cf:c2:cb:b5:69:81:1d:e8:03:91:
80:b7:a2:a8:bb:4d:25:f3:a0:2f:1a:af:06:09:b9:
50:1c:9e:94:e7:c6:b9:40:e9:a2:4d:cc:24:45:e8:
e0:99:ab:94:7d:78:a7:a9:a6:0f:50:c7:7e:e1:96:
b2:24:03:91:b4:1a:4b:1f:33:42:aa:e3:97:4b:0c:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:8F:B6:96:3E:AB:21:00:5E:1E:E4:72:E6:A0:66:F3:A6:38:D2
X509v3 Authority Key Identifier:
keyid:D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:cf:f5:66:f8:8b:aa:2b:35:38:58:7e:47:28:24:99:09:
d6:19:17:81:1b:02:87:0a:99:8f:9d:b1:fd:13:7f:06:10:54:
9d:ff:8c:d1:a1:e8:45:6b:92:71:5b:7a:7a:54:8a:84:86:b0:
02:91:80:70:b3:5e:ed:fa:16:50:6c:4e:27:0f:3c:eb:ba:ab:
8b:2c:fd:2b:f7:85:72:4f:a1:9e:49:09:7a:8a:2e:fe:2b:c9:
8e:a9:ec:cf:35:11:5e:8e:a3:aa:74:9d:5c:43:3a:16:d1:9e:
21:27:3a:52:79:53:80:14:ee:60:fb:ea:27:e9:ea:dd:56:6f:
bc:c7:cf:83:a6:55:ff:f4:53:1c:81:cd:0c:e6:03:8d:04:46:
a6:fb:ac:d5:bf:58:1b:76:f5:e5:60:ed:08:b6:a5:6a:31:22:
3a:e2:c7:25:17:a9:fb:3d:5b:77:51:65:61:ff:b1:11:89:32:
e9:6c:71:7d:4f:5e:2e:67:c5:be:60:95:6f:3e:3b:14:db:56:
53:40:cd:71:a6:08:ef:6b:98:51:50:21:1d:09:65:2b:eb:2e:
da:93:c9:0b:da:63:c5:5a:68:ff:17:8e:95:ab:90:a8:47:c6:
20:09:5f:53:1d:8b:ab:a3:b9:ba:66:ad:b8:ba:a8:50:f2:55:
4c:85:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:53:52 2025 by rpki-client