Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier: c/i4wFlgnASog+EVoDApWQAn7YnPl350746rbJq4OBU=
Subject key identifier: 11:4A:96:4F:B2:B4:15:82:AF:87:9D:DD:EB:9A:23:E3:36:37:A7:92
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer: /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial: 0196C0EF104D2B514F7D94CF1AAC46505E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 20:00:14 +0000
Manifest this update: Sun 11 May 2025 20:00:14 +0000
Manifest next update: Mon 12 May 2025 20:00:14 +0000
Files and hashes: 1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: 47uI779phinJ61hATV8l8bKhxS9aYlHrrho8BrOwmYo=)
2: aVrm11uPiyldKPviAWZVNw7mX_s.roa (hash: +aUpO78+V+9JLiQkkmCO8C80eoccRFxUM2jJ9r7mFkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:10:4d:2b:51:4f:7d:94:cf:1a:ac:46:50:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Validity
Not Before: May 11 20:00:14 2025 GMT
Not After : May 12 20:00:14 2025 GMT
Subject: CN=114a964fb2b41582af879dddeb9a23e33637a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:9f:0d:cb:5e:70:c2:8c:a7:87:41:97:5c:
bb:7a:37:0a:f3:78:cb:d3:1f:f1:f6:51:a0:bb:26:
bd:8f:6a:4d:12:a7:08:9f:62:e3:8e:8b:91:9b:51:
fd:aa:f2:e4:54:3a:92:64:f3:f7:82:f8:2e:e9:18:
a0:4e:db:f8:03:a3:bf:72:e3:cd:e5:f8:26:44:11:
1e:e4:df:bf:55:d7:8e:d1:8a:37:db:1c:8e:79:57:
08:dd:f2:be:41:ac:45:80:70:bc:7a:ed:7a:0f:87:
f4:14:84:36:17:4e:28:58:79:4b:22:2c:e6:e7:cf:
81:f7:14:df:0a:68:4e:f6:51:27:a6:dd:bb:e0:52:
4a:4c:af:37:5b:b8:f7:54:b8:32:73:9d:5d:50:16:
14:7a:06:ae:5f:93:9b:1b:f0:4b:38:d5:2f:43:0b:
24:99:ab:2f:ec:5d:e3:c5:ed:d5:7f:d3:fa:29:b2:
12:cf:9d:57:9d:a2:9e:aa:74:04:a5:03:88:e0:6b:
2a:97:e3:26:22:c0:03:cf:59:81:15:cb:a2:0e:9b:
81:ba:00:43:95:47:e0:6e:0e:29:4f:40:0d:60:0f:
b6:21:35:2c:4a:78:9d:c3:99:2a:01:ea:8d:1d:8d:
d4:e2:f8:f8:d2:31:d3:87:b4:4b:92:12:cd:f5:72:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:96:4F:B2:B4:15:82:AF:87:9D:DD:EB:9A:23:E3:36:37:A7:92
X509v3 Authority Key Identifier:
keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:66:f7:97:47:3a:5e:05:c6:bc:ab:59:46:fd:f7:05:0d:
e6:cd:7d:d6:e0:f1:09:f7:a1:45:35:66:f9:8b:17:12:3f:10:
45:31:c4:d1:c0:bb:4d:0a:28:31:9b:ad:55:f1:07:6c:f4:cb:
b3:76:77:55:c9:d8:ed:ff:1d:96:ed:fa:f7:73:fe:b2:9d:35:
a3:be:3a:2c:18:04:26:d1:20:17:57:cd:8e:b5:ef:a8:c4:16:
0b:a2:4d:fa:3b:5f:b1:17:97:41:a3:2d:9c:78:2a:37:04:2f:
e3:5a:4f:6d:6f:75:3a:7f:82:d9:0f:5f:f6:1f:da:61:67:d8:
6e:e8:1c:df:33:c5:23:62:f2:86:42:8b:ec:1a:83:84:6d:e5:
a9:11:d3:91:8a:43:62:2f:54:28:0e:27:7b:86:21:ce:3b:a7:
e2:0f:1d:b0:4f:9b:eb:78:79:46:77:0f:c7:86:09:db:e9:8e:
82:71:a0:22:4a:ec:5b:c8:05:ce:d7:3d:98:c1:f5:2c:3d:97:
f3:ee:d1:a2:6c:01:6b:dd:0c:95:89:8e:94:46:2f:3d:bb:e4:
b1:11:72:b8:ed:bc:37:52:e0:86:89:ab:1c:5e:83:9a:d9:25:
f0:4a:7d:97:f0:db:7b:64:ab:f5:00:c9:26:7c:03:01:b2:02:
77:27:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:23:45 2025 by rpki-client