Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: etSFT8coprxE4/2nsOHHINJWDU0ExJJ5ejC5uCaTxMA=
Subject key identifier: 9F:44:D7:EC:44:A1:45:26:8F:5B:03:91:77:4A:BB:1B:7E:63:34:23
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 0196A1D25AC97411129E4F8A8D32F3D75F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 19:00:39 +0000
Manifest this update: Mon 05 May 2025 19:00:39 +0000
Manifest next update: Tue 06 May 2025 19:00:39 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: jncm98cqa86qzAbwSxduJe2Nv/Gsd2jIhjCL2CBmOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:5a:c9:74:11:12:9e:4f:8a:8d:32:f3:d7:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: May 5 19:00:39 2025 GMT
Not After : May 6 19:00:39 2025 GMT
Subject: CN=9f44d7ec44a145268f5b0391774abb1b7e633423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:72:44:b2:19:7e:10:03:bb:65:05:cc:b4:
36:86:80:fd:cb:50:e6:0a:0c:1a:42:15:44:4c:d4:
3a:52:60:76:e9:bd:45:4f:3e:57:75:00:19:f5:52:
3c:7c:08:e3:34:31:62:df:9f:03:58:d1:c8:b1:2d:
36:f7:5d:94:ed:91:f8:24:da:f4:f1:cd:c2:60:74:
17:5b:91:7d:7e:15:e1:71:b6:f3:fb:dc:ff:b6:a3:
f4:23:cd:a6:64:23:bf:cf:11:17:a1:c7:d1:c6:a8:
1f:bc:9b:39:0d:15:fc:9e:da:da:54:df:b9:4c:83:
f8:b1:1f:c2:01:94:35:3e:4c:0d:c1:65:4f:8e:f3:
2b:7b:e7:11:71:08:7f:a8:84:8b:77:4a:e0:a4:41:
21:6a:b8:7c:52:e2:c7:d9:dc:84:32:91:16:42:b6:
63:92:02:3d:e3:6a:fe:c7:b8:3a:70:c4:73:f2:b5:
d3:8a:cb:3a:d7:0a:01:49:f4:26:6e:c4:05:d3:3f:
4a:6b:6e:85:0f:d5:57:59:a8:d1:36:ef:a9:e2:4c:
d4:ed:6b:61:f2:05:0f:d3:74:b1:6e:83:4c:5d:af:
81:18:13:99:83:9a:a1:ab:bb:82:ea:8d:3b:d4:6a:
bd:e8:a8:b6:a3:54:66:f8:67:a4:d0:e0:cd:97:1a:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:D7:EC:44:A1:45:26:8F:5B:03:91:77:4A:BB:1B:7E:63:34:23
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:90:61:d1:d1:68:cc:c0:6a:5d:9e:0d:d0:78:4b:cd:10:
c4:6e:8d:9c:91:c0:e6:60:0f:c9:71:82:4e:dc:ae:32:88:64:
d1:78:91:b6:45:e6:0c:79:0d:e4:88:e4:9e:b3:50:e0:2d:40:
5f:36:1d:d1:4f:3e:de:a9:fd:30:18:e1:be:00:3a:85:b8:70:
cf:de:d5:73:ee:70:87:16:57:19:14:f1:55:e8:61:fb:b9:8f:
36:af:70:5d:e8:48:36:5e:59:84:39:b2:68:d5:ad:e5:cb:68:
4f:cb:a8:eb:78:f2:33:7a:90:aa:35:7d:62:1c:29:4a:71:e5:
c1:09:40:e8:ad:fc:c9:8f:10:03:ca:37:25:28:53:34:cf:59:
55:ec:dc:63:40:ae:4a:f4:7b:78:da:4f:a8:9f:d4:31:59:ac:
1e:73:49:40:ec:0f:c2:e4:71:67:af:54:21:b6:53:c6:c7:71:
9e:ea:5d:32:40:80:df:64:0a:65:f4:c9:76:78:5e:00:b4:20:
d5:e1:fd:70:67:c8:96:30:ba:a8:6e:63:22:d4:47:22:c6:84:
23:10:d2:47:4a:37:6e:ef:3c:e8:7f:72:e7:e5:64:1a:28:bb:
30:ca:00:f9:c3:8c:4c:95:e6:95:e1:9a:eb:53:88:91:93:4e:
d5:c2:da:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0lrJdBESnk+KjTLz118SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Y2ZhMGU0NDhhYmUzMGQyNmIwNjY1YTljMjk0ZDI5Yzk3
YjdlYmYwHhcNMjUwNTA1MTkwMDM5WhcNMjUwNTA2MTkwMDM5WjAzMTEwLwYDVQQD
Eyg5ZjQ0ZDdlYzQ0YTE0NTI2OGY1YjAzOTE3NzRhYmIxYjdlNjMzNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhRyRLIZfhADu2UFzLQ2hoD9y1Dm
CgwaQhVETNQ6UmB26b1FTz5XdQAZ9VI8fAjjNDFi358DWNHIsS02912U7ZH4JNr0
8c3CYHQXW5F9fhXhcbbz+9z/tqP0I82mZCO/zxEXocfRxqgfvJs5DRX8ntraVN+5
TIP4sR/CAZQ1PkwNwWVPjvMre+cRcQh/qISLd0rgpEEharh8UuLH2dyEMpEWQrZj
kgI942r+x7g6cMRz8rXTiss61woBSfQmbsQF0z9Ka26FD9VXWajRNu+p4kzU7Wth
8gUP03SxboNMXa+BGBOZg5qhq7uC6o071Gq96Ki2o1Rm+Gek0ODNlxppfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9E1+xEoUUmj1sDkXdKuxt+YzQjMB8GA1UdIwQY
MBaAFNnPoORIq+MNJrBmWpwpTSnJe36/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDIt
NWRmZGQyNTlkZDFiLzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDItNWRmZGQyNTlkZDFi
LzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMWQYdHR
aMzAal2eDdB4S80QxG6NnJHA5mAPyXGCTtyuMohk0XiRtkXmDHkN5IjknrNQ4C1A
XzYd0U8+3qn9MBjhvgA6hbhwz97Vc+5whxZXGRTxVehh+7mPNq9wXehINl5ZhDmy
aNWt5ctoT8uo63jyM3qQqjV9YhwpSnHlwQlA6K38yY8QA8o3JShTNM9ZVezcY0Cu
SvR7eNpPqJ/UMVmsHnNJQOwPwuRxZ69UIbZTxsdxnupdMkCA32QKZfTJdnheALQg
1eH9cGfIljC6qG5jItRHIsaEIxDSR0o3bu886H9y5+VkGii7MMoA+cOMTJXmleGa
61OIkZNO1cLayw==
-----END CERTIFICATE-----
Generated at Mon May 5 21:43:52 2025 by rpki-client