Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: r4lzxeWX4swe16rENDtXEaTnTX7ABhJsz6DIST6Wlnw=
Subject key identifier: E0:BE:EB:24:78:9E:B8:36:10:B3:C6:ED:38:4E:B8:51:00:CF:C0:83
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 0196C494F7A9C52D82CD088678104334EEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 13:00:19 +0000
Manifest this update: Mon 12 May 2025 13:00:19 +0000
Manifest next update: Tue 13 May 2025 13:00:19 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: oIznbfuTkxSMyiNTAVd35VG1mcnU7U5qX74M5ig+pNY=)
2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:94:f7:a9:c5:2d:82:cd:08:86:78:10:43:34:ee:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: May 12 13:00:19 2025 GMT
Not After : May 13 13:00:19 2025 GMT
Subject: CN=e0beeb24789eb83610b3c6ed384eb85100cfc083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:71:38:80:60:07:21:cc:d2:ca:3b:13:ac:
b0:cc:0c:af:65:5a:5c:dc:81:25:53:af:24:d0:b3:
d3:eb:25:51:45:f7:44:30:53:cc:45:bf:60:36:50:
d5:24:1d:23:e1:f2:95:af:bb:31:1b:4c:95:17:54:
10:2c:c8:65:72:65:26:6b:51:10:ae:cb:93:bd:73:
44:58:d1:62:48:23:00:25:c7:0a:47:70:c8:bc:63:
d9:ed:e8:50:10:c4:e7:48:6b:ae:61:45:e2:10:19:
28:02:d4:7b:4e:2d:60:d7:c8:7e:b8:8e:fd:2e:05:
d6:8b:72:ea:e7:24:b0:f1:49:00:39:91:d4:c3:62:
c0:bf:82:96:3a:d7:6a:42:a3:ed:dd:79:61:1f:dd:
ff:b4:fe:83:f9:38:b7:03:7d:00:d5:fc:fb:b8:9d:
5d:aa:17:bb:df:12:16:ca:5c:87:13:1e:5f:7e:60:
42:d9:66:f8:e8:1a:38:8c:c3:10:e1:0a:e1:41:66:
ca:6b:3d:0b:80:af:87:78:ed:23:ee:34:59:eb:98:
22:56:d3:5b:27:cc:10:28:19:87:14:a0:1a:43:5b:
28:b8:de:0b:dc:56:d7:0a:15:f1:55:28:14:7c:d5:
8d:8e:2a:ce:06:aa:b1:b7:22:58:e6:74:fa:b7:a8:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:EB:24:78:9E:B8:36:10:B3:C6:ED:38:4E:B8:51:00:CF:C0:83
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:ce:20:99:1e:fa:11:0d:25:88:cc:7d:04:05:36:9b:11:
26:67:fb:40:3f:cc:ae:bc:44:81:70:73:7e:33:a3:da:ad:07:
8e:e6:c9:8d:2e:ba:29:59:b0:5e:67:2f:98:d5:75:04:5d:cc:
54:24:88:c1:83:c8:27:cb:f4:d2:02:31:ff:0b:34:6c:82:66:
a1:0e:c4:f4:95:68:9c:2d:d6:46:98:35:23:9d:13:db:cc:78:
87:a8:fe:bc:5d:2c:bb:28:32:78:00:a1:86:85:3b:47:e7:62:
b8:01:6a:18:0e:9c:69:ba:fc:72:7b:7e:08:7d:58:25:48:ee:
22:06:fc:4c:4d:6d:be:17:9b:ed:01:de:2f:e3:49:3d:3f:4f:
df:fe:fa:35:d3:62:a2:44:bd:22:4a:e1:4d:92:7c:2a:e8:ad:
d1:5e:2d:30:2d:82:0f:d0:ba:4b:8a:16:dc:89:58:99:55:8a:
66:0c:61:46:74:1d:c4:1e:5e:3d:fe:13:86:4e:b9:59:8b:e0:
77:4f:96:74:ba:2d:a6:53:30:eb:71:8d:bc:a8:e0:f0:ac:64:
65:0a:cf:36:a1:ee:d0:38:f7:a7:98:34:78:06:48:f1:d8:96:
f4:1b:11:a1:d1:b8:0d:9d:10:0e:71:0d:f5:3a:d3:f6:cc:12:
2e:36:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:49:00 2025 by rpki-client