Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.mft (raw, json)
Hash identifier: 5lcAtlQ0I+eTG5hiPk81qdisemA8fe5wZTMD9AJwIBs=
Subject key identifier: C5:B9:B2:86:14:37:98:18:1F:A9:99:06:9C:49:A3:84:97:44:84:FB
Authority key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Certificate issuer: /CN=da296bd0031d6dada6c73073608f3d11e445ce44
Certificate serial: 0196BF6F27865F6702FEF04649AEE0A07371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
Manifest number: 0377
Signing time: Sun 11 May 2025 13:00:54 +0000
Manifest this update: Sun 11 May 2025 13:00:54 +0000
Manifest next update: Mon 12 May 2025 13:00:54 +0000
Files and hashes: 1: 2ilr0AMdba2mxzBzYI89EeRFzkQ.crl (hash: mZfD7UDgPVMV6QJssXUuRZQQmrWCTgBohDmcv4RIeVQ=)
2: xbFh-XL0EOh1euSo-ddC7jaGUKM.roa (hash: 8IT/bBcEgFQE8EaggOanI6nAulFvf6rnXMDUQLI1njI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:27:86:5f:67:02:fe:f0:46:49:ae:e0:a0:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Validity
Not Before: May 11 13:00:54 2025 GMT
Not After : May 12 13:00:54 2025 GMT
Subject: CN=c5b9b286143798181fa999069c49a384974484fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:d1:a6:dc:46:bd:95:87:fc:b3:13:cb:b0:
a6:d3:86:63:83:ca:e6:ef:78:44:63:97:a5:3b:d0:
70:59:bf:05:23:3a:38:8e:00:bb:6b:5c:00:f8:4d:
b4:8e:66:1f:d7:5c:8b:8e:ba:5b:2f:c2:f8:fb:c5:
30:59:e2:22:91:65:24:eb:f9:68:78:c4:c4:51:9e:
4e:4c:99:8b:aa:68:2b:9b:90:4d:dc:e2:83:8a:b4:
9b:db:bd:b8:1a:2b:c8:19:6d:2e:b6:b1:c2:19:77:
4c:b9:00:45:2a:76:cc:a7:17:4b:df:b5:83:bd:58:
af:cd:0d:ab:5e:e5:31:e8:69:a2:58:20:0e:4c:89:
9d:44:d8:2c:33:11:20:17:85:fb:ad:59:fa:c6:9f:
39:ff:da:cf:73:20:a5:81:01:da:4a:e1:65:5f:ac:
59:e8:b0:58:ce:9f:fc:50:b6:a8:c9:f5:d4:8e:6e:
40:ee:30:6b:0d:85:98:8d:f5:30:71:51:30:56:45:
86:5b:e7:9b:d1:8e:1e:72:ce:f1:ac:03:58:80:cb:
42:13:a0:35:18:d4:57:33:6c:fe:15:32:83:62:f0:
bd:6f:f5:3f:14:fc:2a:5a:5a:dd:7f:78:ce:55:81:
86:d5:1f:39:72:7a:b4:74:35:b1:2b:a3:52:6d:10:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:B2:86:14:37:98:18:1F:A9:99:06:9C:49:A3:84:97:44:84:FB
X509v3 Authority Key Identifier:
keyid:DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d6:5d:a6:85:f7:88:89:f0:e3:11:29:5c:f1:be:e5:fb:51:
31:aa:d5:34:ab:1a:66:bf:2c:ae:84:67:d8:c7:45:8c:40:9c:
a0:bd:4c:42:81:0e:7f:d2:45:98:6a:0a:02:ba:68:6f:4a:7d:
68:8f:ae:9a:c5:e4:db:61:88:91:ad:5f:7a:37:ce:c4:e7:a0:
5c:d6:f2:c6:0b:62:4f:61:f8:0e:17:4e:8e:15:81:1e:7b:28:
60:43:e2:57:bd:ec:fa:3d:a8:d0:84:92:17:bc:a2:1e:02:c1:
f6:63:45:c3:6d:2c:d7:7c:76:0b:16:4e:f7:46:38:43:5a:da:
aa:1f:9d:de:23:24:23:7d:13:6b:42:c3:20:ce:33:bf:bc:a3:
3c:0a:2b:23:58:3d:f2:cf:5c:da:9c:7e:b6:1a:23:e4:2f:60:
b3:06:bb:e2:37:85:08:16:46:d8:a9:06:c9:85:de:95:5d:21:
df:7c:d1:5b:93:7e:20:59:70:44:da:ad:b4:c7:48:2b:b7:68:
0b:90:0a:3a:ab:a2:52:58:d0:f0:ba:20:fb:d2:3b:89:bd:20:
74:31:56:96:4c:e6:fd:b6:ea:8d:91:39:2b:3b:df:6f:16:6d:
d0:33:a6:da:38:be:a2:bf:74:56:9b:f0:73:54:ec:19:d2:c7:
3e:59:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:36 2025 by rpki-client