Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: Msqj81EIxrPs3e3yh9zGm3KTUQ8VRNzJv0A6xMZZ4E0=
Subject key identifier: BE:F1:D2:F6:96:DF:CD:B2:64:52:3E:C6:6A:7D:1D:E3:19:1C:A8:3E
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 0196C2023DF800EEBF57F8DB30B1C3386087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 065B
Signing time: Mon 12 May 2025 01:00:48 +0000
Manifest this update: Mon 12 May 2025 01:00:48 +0000
Manifest next update: Tue 13 May 2025 01:00:48 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: Zo8dvdF0pVNcU0JGEHsAmS1QVrqlhi+qgRnGxCeQEIg=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:3d:f8:00:ee:bf:57:f8:db:30:b1:c3:38:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: May 12 01:00:48 2025 GMT
Not After : May 13 01:00:48 2025 GMT
Subject: CN=bef1d2f696dfcdb264523ec66a7d1de3191ca83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:be:cc:d0:e1:d6:dd:46:4a:bf:53:f7:4a:
03:c5:00:46:95:12:38:b0:3d:77:39:07:62:c2:ef:
6c:be:da:a0:d2:90:ae:dd:9b:84:95:33:1e:dc:61:
94:3d:ba:71:5c:a3:64:3d:09:9a:5b:84:40:b4:59:
53:4f:9f:0c:69:12:b3:2b:48:33:c1:c9:76:41:ca:
c7:84:4f:13:73:d1:dc:fe:5e:38:8b:c7:31:e8:2e:
12:a9:82:24:f0:63:54:2c:5a:a8:e1:d6:b4:c3:d0:
c5:c6:36:9f:a3:8a:c2:84:58:5d:10:4a:6c:aa:93:
5f:d1:4b:13:f7:7d:e5:2a:76:5e:d8:75:5c:ac:a6:
19:0b:68:ec:de:0c:1f:46:3b:7c:17:17:1c:22:91:
fa:d2:18:43:03:f1:5f:a1:40:bb:7b:66:a4:3d:f6:
14:ea:89:22:f7:f1:5d:2b:37:44:cc:78:a8:dc:95:
eb:58:14:55:39:50:35:50:07:92:2b:bf:00:a2:ce:
d7:91:5b:3d:09:0c:82:e3:73:36:ed:22:d7:52:d8:
77:a9:9e:0a:2e:2a:71:9f:d4:0b:06:7c:ef:48:ca:
58:5b:62:f1:cc:04:5a:de:ea:ca:e2:7b:56:04:de:
95:8f:d2:d4:16:14:73:ac:be:42:71:61:04:7c:c4:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F1:D2:F6:96:DF:CD:B2:64:52:3E:C6:6A:7D:1D:E3:19:1C:A8:3E
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:3c:71:a5:b8:be:89:b7:57:9c:cf:7d:06:59:dd:d0:56:
a2:23:d6:14:2f:68:cc:f4:80:a4:73:42:5b:c8:c2:d2:17:c2:
fe:d8:45:df:c1:17:d6:00:89:c2:63:a6:fc:45:f7:eb:f2:b9:
e6:1d:05:da:c0:a6:be:93:9e:3b:a1:bc:82:ce:00:cc:a3:ef:
6c:7d:c6:4f:21:20:5a:5e:5d:8d:2f:15:3c:0c:54:63:13:41:
76:05:ab:1b:59:ab:b1:74:7e:34:7b:43:6c:5f:78:f6:f9:57:
18:b5:30:05:eb:08:64:e0:c8:c9:52:d3:13:3f:41:a4:05:64:
1f:b8:f5:bc:92:7d:38:d4:48:62:60:f5:8c:5a:69:4d:49:23:
26:d3:39:22:ab:8c:7a:35:f6:03:51:d0:63:85:cf:ea:05:6f:
92:51:75:3b:6a:10:2a:64:eb:1e:ae:f5:80:37:10:a4:56:a1:
5e:98:ec:c1:78:c2:b5:f9:16:d2:7c:a7:90:fb:3c:95:87:42:
ef:5b:96:9c:1b:f5:21:3d:bd:3b:d5:8a:2b:07:61:23:a6:0a:
d7:ab:32:1d:f9:a5:7b:13:f8:86:74:2f:d5:8b:af:6a:d1:80:
43:16:09:51:e5:df:ea:1e:df:25:08:dd:eb:db:2f:6d:93:0b:
3b:3b:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:49 2025 by rpki-client