Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: S9a9HaGcLc2lzb1Da1n3g8ws4716fvzOFzaRKJF/Jxo=
Subject key identifier: C3:2E:5D:4F:6B:14:8D:76:AD:D1:63:D1:BB:19:9E:F8:80:0D:0B:96
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 0196BDEE5BB3E6587AF84AB907B8062EDE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0693
Signing time: Sun 11 May 2025 06:00:36 +0000
Manifest this update: Sun 11 May 2025 06:00:36 +0000
Manifest next update: Mon 12 May 2025 06:00:36 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: GQ7CcSXyBpB49N8BrTGBqykL+iK89U/003gmJ0glS2s=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:5b:b3:e6:58:7a:f8:4a:b9:07:b8:06:2e:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: May 11 06:00:36 2025 GMT
Not After : May 12 06:00:36 2025 GMT
Subject: CN=c32e5d4f6b148d76add163d1bb199ef8800d0b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:5f:3a:92:3c:6a:53:8e:1a:35:3e:e0:bd:
85:ce:0a:0a:9e:09:48:ab:ee:76:be:0b:e2:90:3c:
78:86:77:ae:03:dc:b8:c8:91:9c:0e:b6:ab:95:63:
07:2d:0e:ab:91:f9:1c:2f:37:f7:fe:c6:f0:d5:56:
e7:4a:8d:d1:07:47:a1:c2:ff:79:1b:69:90:53:25:
21:1f:08:7e:7e:a6:27:fe:79:f6:df:95:e4:90:6d:
b0:01:7d:6f:8a:fb:95:fc:a1:55:9a:fc:13:aa:44:
df:95:42:25:50:be:48:68:62:b2:57:b4:6f:14:c2:
9c:54:74:05:59:2d:bf:94:24:3e:4d:3e:66:38:fb:
8a:f7:f9:b3:1e:39:c0:61:52:eb:f6:d7:e6:b7:6c:
89:d7:9b:03:6e:31:56:d6:93:43:68:bb:e3:da:da:
d7:e8:6c:82:0c:9b:67:a6:a9:10:15:1d:5c:a5:95:
5e:88:ff:32:a8:fa:62:9a:00:62:b5:8e:cf:a7:83:
41:52:72:4c:73:9b:db:14:ee:fa:74:ef:4b:a2:e8:
15:41:b8:85:d3:c4:c9:df:32:d4:3d:6b:3f:5b:ec:
27:6e:8b:4e:9d:93:c6:03:00:2b:bb:87:ca:f2:f3:
ff:19:34:3a:56:ec:a0:a1:b8:d9:96:ad:cf:02:7e:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:5D:4F:6B:14:8D:76:AD:D1:63:D1:BB:19:9E:F8:80:0D:0B:96
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:54:9b:95:7e:9b:73:f0:6f:36:25:b7:ea:37:b6:bd:49:
e2:d0:54:1b:2a:08:41:65:cf:41:b6:68:82:93:f2:b2:3f:25:
03:4e:4f:9e:89:0c:83:db:71:ab:17:1c:45:5a:df:ee:98:bd:
09:ae:66:33:cc:ac:b8:61:ac:ea:ee:93:5e:5c:d9:d3:2f:ec:
c2:28:96:74:57:54:8c:ef:7f:ae:1b:c3:94:ba:68:f5:63:6a:
e3:96:99:fa:b3:cb:c8:18:45:8f:b7:08:89:26:c1:b8:cb:bc:
dc:4c:a1:9b:c7:c8:5f:ce:77:45:fd:18:22:30:de:0d:8d:3d:
94:7a:a8:b4:06:43:32:54:c8:46:05:fb:30:3b:12:fc:6b:54:
29:fc:dd:ff:8e:e2:b7:3c:6c:02:ef:99:7f:74:b8:67:e1:4a:
dd:29:e2:48:06:c3:fd:9e:ba:c2:c5:af:01:5b:27:71:d3:4f:
db:49:cd:07:da:8f:22:27:7e:ca:3b:6e:dc:dc:1e:cf:7b:80:
84:69:61:d4:22:22:0c:a7:ac:16:30:41:3c:2b:de:47:0f:92:
8c:a1:d2:cc:44:66:f7:21:05:85:ea:85:f6:3b:07:da:b1:39:
a2:6b:45:cf:54:88:62:6b:e5:54:4b:2a:70:a2:55:e2:c8:6d:
cc:53:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:52:47 2025 by rpki-client