Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: fH05Iaj4ra/a30XfpB/nWKXa7I34jsK7FDRxEReBUs0=
Subject key identifier: A7:28:3E:B3:E9:C8:3E:B1:92:6C:65:8D:37:FA:3E:D2:9A:1C:0A:B1
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 0196AB0BF953C7DBF349FAF7514BD4BEA9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 152E
Signing time: Wed 07 May 2025 14:00:10 +0000
Manifest this update: Wed 07 May 2025 14:00:10 +0000
Manifest next update: Thu 08 May 2025 14:00:10 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: GahmkdDozbjK8rrxyefhhWuzupRYprUZVKAQNjpr08Q=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0b:f9:53:c7:db:f3:49:fa:f7:51:4b:d4:be:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: May 7 14:00:10 2025 GMT
Not After : May 8 14:00:10 2025 GMT
Subject: CN=a7283eb3e9c83eb1926c658d37fa3ed29a1c0ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:ba:80:3a:85:d0:37:9f:5b:85:6f:f4:53:
8f:7b:70:55:64:1a:cf:67:e4:69:a6:02:1a:ef:59:
81:9f:61:c5:10:bc:1d:cc:9a:1f:f0:35:23:b1:05:
1a:99:c6:73:18:f4:9d:7c:9b:23:6a:df:9e:05:6d:
78:18:86:fd:68:b4:50:de:5d:d6:93:b0:27:f7:69:
a5:b1:38:60:5c:86:ae:81:69:0c:43:be:7c:86:5e:
83:3e:11:b0:91:b4:3e:a3:d8:85:5a:a0:3e:1c:aa:
75:1f:db:41:76:70:ad:81:ac:84:8b:23:a2:3c:a5:
90:74:c5:88:6d:57:00:c6:99:e2:d5:9f:27:93:80:
bc:3f:b9:46:d4:f9:50:4d:3d:4b:04:2b:d0:75:e5:
ab:f0:1a:62:b1:56:3f:e0:c8:30:a1:e5:47:23:d7:
86:b7:ee:65:dc:03:4e:db:91:b0:8b:2b:7a:00:70:
57:3a:06:48:ec:40:23:72:c4:6e:2a:1f:0c:9d:44:
f3:a5:ea:86:f3:9d:c5:e7:b4:6a:73:a1:44:95:0b:
d1:34:25:a1:87:6e:c3:f7:61:8f:0c:77:5e:51:23:
d3:22:8d:e0:5c:1f:2f:dc:90:db:42:b7:fe:8e:70:
c3:3c:54:0e:01:58:07:1b:dc:bc:1e:e0:04:9a:51:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:3E:B3:E9:C8:3E:B1:92:6C:65:8D:37:FA:3E:D2:9A:1C:0A:B1
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:93:76:b6:96:7e:71:90:81:9c:66:e5:d6:80:7e:fc:c9:
a5:95:27:ab:b6:ef:75:0b:86:d2:81:2f:7e:f2:b4:57:91:63:
03:c1:2f:d4:1f:a0:1c:ea:e1:be:8a:13:d4:58:00:56:49:04:
d9:ee:eb:78:43:8c:c4:69:48:7b:6f:24:63:98:82:63:98:95:
91:ee:3c:74:14:39:64:d1:e5:d4:a7:0d:14:cf:4e:f9:85:b2:
ad:2e:aa:cf:ba:64:e0:d6:61:aa:05:70:7e:92:5b:a7:2a:94:
a8:da:3a:c0:72:71:b9:f6:c1:66:f4:64:ee:4d:17:49:71:b1:
c5:e1:72:d0:bd:4d:25:5d:2f:1a:ef:14:da:8e:61:81:41:e6:
22:14:43:f7:4b:03:32:61:ee:a2:a5:cf:cf:a4:59:8c:96:b4:
5f:13:e4:9f:e6:4e:c2:14:26:ee:0d:42:8d:0d:8a:05:e3:a4:
fe:4f:d5:ad:c7:5c:b0:d2:7b:7c:0f:b7:5a:c5:1e:3e:c3:58:
cd:48:c2:0e:55:ce:22:fa:4a:bc:f4:44:40:de:d1:c3:0b:45:
16:f1:73:02:71:de:85:6e:17:f3:3c:00:0e:b0:4f:89:07:41:
32:92:b6:dd:aa:f4:c1:90:22:c6:e2:97:46:17:78:47:e0:34:
26:3c:61:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarC/lTx9vzSfr3UUvUvqneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm
NjFhMjEwHhcNMjUwNTA3MTQwMDEwWhcNMjUwNTA4MTQwMDEwWjAzMTEwLwYDVQQD
EyhhNzI4M2ViM2U5YzgzZWIxOTI2YzY1OGQzN2ZhM2VkMjlhMWMwYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmu6gDqF0DefW4Vv9FOPe3BVZBrP
Z+RppgIa71mBn2HFELwdzJof8DUjsQUamcZzGPSdfJsjat+eBW14GIb9aLRQ3l3W
k7An92mlsThgXIaugWkMQ758hl6DPhGwkbQ+o9iFWqA+HKp1H9tBdnCtgayEiyOi
PKWQdMWIbVcAxpni1Z8nk4C8P7lG1PlQTT1LBCvQdeWr8BpisVY/4MgwoeVHI9eG
t+5l3ANO25Gwiyt6AHBXOgZI7EAjcsRuKh8MnUTzpeqG853F57Rqc6FElQvRNCWh
h27D92GPDHdeUSPTIo3gXB8v3JDbQrf+jnDDPFQOAVgHG9y8HuAEmlEgUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcoPrPpyD6xkmxljTf6PtKaHAqxMB8GA1UdIwQY
MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt
ZGFiOWY4YmE4ZmI2LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2
LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqGTdraW
fnGQgZxm5daAfvzJpZUnq7bvdQuG0oEvfvK0V5FjA8Ev1B+gHOrhvooT1FgAVkkE
2e7reEOMxGlIe28kY5iCY5iVke48dBQ5ZNHl1KcNFM9O+YWyrS6qz7pk4NZhqgVw
fpJbpyqUqNo6wHJxufbBZvRk7k0XSXGxxeFy0L1NJV0vGu8U2o5hgUHmIhRD90sD
MmHuoqXPz6RZjJa0XxPkn+ZOwhQm7g1CjQ2KBeOk/k/VrcdcsNJ7fA+3WsUePsNY
zUjCDlXOIvpKvPREQN7RwwtFFvFzAnHehW4X8zwADrBPiQdBMpK23ar0wZAixuKX
Rhd4R+A0JjxhNg==
-----END CERTIFICATE-----
Generated at Wed May 7 22:07:46 2025 by rpki-client