Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: lusIcXtvnYhL0VVGwvYhXSZOJc1it5MnhVit1WSLx4Q=
Subject key identifier: E9:F2:54:70:F6:8C:CB:51:78:90:2B:2A:BC:FF:44:CA:C7:BB:D5:1C
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 0196C3B95520C3D5C77054F27F216F0715FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 118E
Signing time: Mon 12 May 2025 09:00:25 +0000
Manifest this update: Mon 12 May 2025 09:00:25 +0000
Manifest next update: Tue 13 May 2025 09:00:25 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: fF1zTgo+9P8HYbPmhbN2M4ywJdI0irrXADR63B0FfUk=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:55:20:c3:d5:c7:70:54:f2:7f:21:6f:07:15:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: May 12 09:00:25 2025 GMT
Not After : May 13 09:00:25 2025 GMT
Subject: CN=e9f25470f68ccb5178902b2abcff44cac7bbd51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:fc:23:1b:e0:b3:b1:bf:0c:f9:cf:c4:b2:
5b:d2:a5:1a:75:d1:f5:49:60:49:f6:e7:84:62:3f:
e9:bb:9f:9f:40:cd:32:b4:e6:d2:ba:e0:68:f8:16:
a5:6c:11:1a:68:52:3e:a2:ec:e3:a4:a3:a7:f5:48:
2e:0d:28:b5:bb:77:8c:f8:c4:4d:ea:27:3e:a9:60:
4c:5c:6f:06:44:d0:f1:e2:81:30:44:f9:50:3e:d5:
f0:c0:0e:d2:10:d5:a1:dc:45:30:d0:19:ca:43:07:
ed:d0:37:a6:4c:dd:ee:90:34:61:ca:dd:62:2f:47:
c0:a3:f1:cb:36:8e:df:c8:9c:5c:b7:40:9e:85:99:
51:df:d6:1c:78:e4:75:5c:c2:c0:f4:00:96:a7:aa:
4a:19:5f:02:33:34:a6:0f:54:b6:2e:8b:e7:f2:8d:
3b:26:5b:93:c0:23:18:0f:00:3b:44:6e:1f:a2:a4:
f4:4c:97:d2:4c:f5:f5:97:c3:79:1d:0d:ca:25:89:
29:83:88:cd:d9:19:a5:18:a6:f7:12:50:02:17:14:
d6:4f:e3:ad:3c:38:f4:6a:60:c0:fd:39:84:61:90:
50:fd:1b:f9:ea:61:18:29:81:8f:e6:97:b7:87:cc:
ae:6f:c8:86:c3:57:a3:83:50:73:5b:64:60:dd:bd:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:54:70:F6:8C:CB:51:78:90:2B:2A:BC:FF:44:CA:C7:BB:D5:1C
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:93:34:b0:c4:75:ba:2d:17:b9:93:2a:50:c4:19:11:eb:11:
f2:64:ab:ba:d2:30:9f:ef:0f:e8:4c:59:30:18:9e:79:79:67:
ce:17:0c:41:83:8c:23:f7:0c:3f:e0:5f:38:aa:7a:d0:16:86:
6b:66:6f:b2:1d:04:9b:38:1c:55:18:46:f5:8b:c6:ed:63:4a:
6d:b8:d4:08:7c:eb:38:55:7e:02:05:61:7c:87:2a:8e:5b:76:
04:d3:30:75:3f:da:df:d5:24:00:77:1d:eb:ea:c1:a2:10:69:
54:fb:70:6c:8a:47:19:da:ac:d5:b1:01:1c:f1:ce:40:fe:c3:
2a:82:ec:58:78:9c:c5:a5:2c:b1:47:b1:5d:50:d2:e7:43:4b:
21:fe:2c:72:76:d4:4a:cc:e1:09:64:34:a5:98:b6:48:5f:0e:
7a:15:fa:4c:f3:b7:ca:7c:0a:fa:72:4d:ab:fb:89:49:86:68:
e7:1e:04:18:21:89:da:b6:4d:a8:fa:b8:80:44:d0:26:e9:6b:
b2:06:10:cc:7c:ab:01:2b:e9:1d:2e:05:cf:d2:2f:42:51:9b:
f9:95:7e:ba:fb:2c:7c:60:2f:35:5c:50:e6:b4:3a:02:49:89:
d8:6f:ee:7e:95:39:9b:1d:02:af:de:93:36:15:a0:8e:c3:f8:
1f:8e:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:24:33 2025 by rpki-client