Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: gBocDlfVhLzleaHhq9jaS6SayPiGEj2b9Vx3ayJMMNg=
Subject key identifier: 81:57:71:EE:5D:B9:07:2B:B2:C9:83:AD:0A:B7:AB:E2:41:F4:BA:6B
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 0196C23951DA977109F6491E28741AFB574B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 02:00:58 +0000
Manifest this update: Mon 12 May 2025 02:00:58 +0000
Manifest next update: Tue 13 May 2025 02:00:58 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: tOfHK/W2JvMQzeKes8N7lYh/wiyILg4AKtaljCXBoG0=)
2: tX7pIK0_Y0DkC_cQB792D8KfMpI.roa (hash: 6bt98IzDmAFpK9cQatBo1xPLFut1eb0d15KmkgIc6Y0=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:51:da:97:71:09:f6:49:1e:28:74:1a:fb:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: May 12 02:00:58 2025 GMT
Not After : May 13 02:00:58 2025 GMT
Subject: CN=815771ee5db9072bb2c983ad0ab7abe241f4ba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:04:8c:ba:93:4e:35:15:96:f3:32:65:e0:
ce:df:93:bc:7a:7b:34:a2:a1:14:98:75:6c:10:76:
da:44:a6:4d:8c:36:5d:33:41:15:c1:87:22:b1:03:
22:16:ed:60:ac:8f:a1:19:0c:fe:0a:63:8a:2e:62:
71:85:ca:9e:d0:cf:da:de:ce:c2:2c:1c:ee:cf:5b:
07:a4:6b:ea:63:55:96:6e:6a:d9:35:a0:21:ec:57:
2e:a4:18:36:7e:ba:8d:d2:84:3a:a1:18:1b:c0:a4:
41:de:b9:51:b0:5f:49:db:19:44:83:ec:b7:22:64:
60:c9:03:8c:f8:53:b6:4d:36:ef:c9:54:c1:ca:7b:
26:38:0f:18:f8:51:a5:76:7f:2c:09:dc:75:42:b1:
45:a8:6e:66:54:5f:ce:b2:8e:52:d5:f4:bf:9c:16:
0a:43:e2:fa:87:14:1a:96:fb:0f:5e:93:f3:d7:28:
1c:9b:dd:43:bf:85:d0:1b:73:0e:7d:ff:74:4c:12:
af:ca:b7:8b:39:1c:bd:a7:b4:d2:0d:43:dc:3e:88:
5e:eb:fc:56:3c:4b:df:88:3f:86:83:cb:f7:0a:8b:
a3:c6:02:9d:75:0f:1c:2c:26:a6:18:4d:de:e0:04:
7a:97:0d:5c:a9:a0:61:79:cd:35:d3:de:38:07:54:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:57:71:EE:5D:B9:07:2B:B2:C9:83:AD:0A:B7:AB:E2:41:F4:BA:6B
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:d5:c4:c6:c7:60:d2:26:81:02:83:41:f6:92:4a:53:d9:
fb:bf:4b:fe:f3:4a:47:93:1e:05:4f:b0:ec:8c:26:cb:8b:22:
5f:63:38:32:30:a7:3d:d9:3b:4e:99:9c:ae:46:6d:86:8a:44:
c6:f6:db:6b:6b:6b:30:2f:2a:e2:85:19:54:4b:a2:6c:09:3d:
e0:d6:b9:5a:0d:ed:58:39:c8:f8:00:26:df:4d:b2:ad:8f:47:
0e:fe:66:c6:59:49:4d:9b:e3:62:ca:e1:a2:55:21:3a:35:a5:
d8:a4:ec:58:b7:12:ee:21:98:a7:24:d3:9a:4a:a0:cb:fa:f6:
d0:4f:69:7f:43:9d:b7:4c:f6:b5:09:52:d1:7e:50:44:e4:d2:
7c:f9:5f:e3:73:39:3c:16:a4:e7:4a:67:d6:62:ab:d2:43:5a:
f3:38:cb:33:12:3b:3e:96:46:d1:0f:0a:e2:2d:3f:83:c4:87:
f3:ea:9f:25:b7:8a:7d:90:15:75:57:64:53:db:a1:ef:60:f0:
93:e8:79:e2:bc:1f:83:29:b5:df:eb:59:8d:bc:36:73:8e:65:
80:53:2e:61:f1:1e:ae:f4:be:e3:61:49:30:c4:b2:0c:fa:01:
f8:6b:1c:82:09:1b:34:e8:b6:4b:43:fd:4e:79:4b:23:ce:e5:
89:ed:49:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOVHal3EJ9kkeKHQa+1dLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1
YjVkN2IwHhcNMjUwNTEyMDIwMDU4WhcNMjUwNTEzMDIwMDU4WjAzMTEwLwYDVQQD
Eyg4MTU3NzFlZTVkYjkwNzJiYjJjOTgzYWQwYWI3YWJlMjQxZjRiYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhsEjLqTTjUVlvMyZeDO35O8ens0
oqEUmHVsEHbaRKZNjDZdM0EVwYcisQMiFu1grI+hGQz+CmOKLmJxhcqe0M/a3s7C
LBzuz1sHpGvqY1WWbmrZNaAh7FcupBg2frqN0oQ6oRgbwKRB3rlRsF9J2xlEg+y3
ImRgyQOM+FO2TTbvyVTBynsmOA8Y+FGldn8sCdx1QrFFqG5mVF/Oso5S1fS/nBYK
Q+L6hxQalvsPXpPz1ygcm91Dv4XQG3MOff90TBKvyreLORy9p7TSDUPcPohe6/xW
PEvfiD+Gg8v3CoujxgKddQ8cLCamGE3e4AR6lw1cqaBhec010944B1QR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFXce5duQcrssmDrQq3q+JB9LprMB8GA1UdIwQY
MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct
NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy
LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITfVxMbH
YNImgQKDQfaSSlPZ+79L/vNKR5MeBU+w7Iwmy4siX2M4MjCnPdk7TpmcrkZthopE
xvbba2trMC8q4oUZVEuibAk94Na5Wg3tWDnI+AAm302yrY9HDv5mxllJTZvjYsrh
olUhOjWl2KTsWLcS7iGYpyTTmkqgy/r20E9pf0Odt0z2tQlS0X5QROTSfPlf43M5
PBak50pn1mKr0kNa8zjLMxI7PpZG0Q8K4i0/g8SH8+qfJbeKfZAVdVdkU9uh72Dw
k+h54rwfgym13+tZjbw2c45lgFMuYfEervS+42FJMMSyDPoB+GscggkbNOi2S0P9
TnlLI87lie1JcQ==
-----END CERTIFICATE-----
Generated at Mon May 12 08:18:31 2025 by rpki-client