Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: mBp5JBwCt9j2c3jqbvR31cldTNMCP7BovIpQciJ/UwQ=
Subject key identifier: 57:70:68:E4:22:9E:61:87:9A:0A:37:72:57:A3:A9:32:BB:B8:4B:8E
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0196AB434B919BA8108D463DEC5D8E77B0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 05D6
Signing time: Wed 07 May 2025 15:00:36 +0000
Manifest this update: Wed 07 May 2025 15:00:36 +0000
Manifest next update: Thu 08 May 2025 15:00:36 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: DDKRbpq3WPxBCzMm+cie+XK5hxJV6ra4uC1ZicGPrYY=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:4b:91:9b:a8:10:8d:46:3d:ec:5d:8e:77:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: May 7 15:00:36 2025 GMT
Not After : May 8 15:00:36 2025 GMT
Subject: CN=577068e4229e61879a0a377257a3a932bbb84b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:f8:ca:0c:a8:16:02:1f:36:fc:44:a7:e2:
6b:02:78:34:ad:49:03:c4:bd:2f:af:34:3c:b0:8c:
1f:19:5c:ce:e2:53:94:64:30:a0:72:ee:72:b6:0a:
65:86:97:c5:9d:cd:eb:25:28:03:1f:d6:21:12:8d:
79:26:06:06:14:56:63:79:a6:ad:3b:2c:9f:0a:57:
e4:79:fc:a7:6b:27:6d:1b:66:d5:33:88:0c:c0:04:
48:3c:ce:c0:5b:69:e8:c0:56:1e:c3:8f:aa:27:a4:
0e:f5:74:a8:ef:f1:8d:07:fd:d2:4d:f8:78:c6:ee:
8b:e2:93:8a:5a:8b:1a:94:59:cd:58:b3:ca:b5:1b:
96:e3:58:b2:1e:8a:fd:e5:7b:eb:f2:66:41:36:03:
a4:18:fb:29:5d:ab:56:0f:5b:6b:f0:1f:50:99:f4:
7d:a9:15:fa:46:79:65:a6:8d:8f:a5:7b:74:43:d2:
50:ba:93:a4:2d:e6:1c:48:85:a2:72:ff:c2:8e:e5:
bd:22:c6:f3:95:24:36:ab:12:00:97:7e:8f:45:3d:
6d:3c:ba:44:8f:0b:4e:ad:61:67:f7:4a:2a:65:25:
28:21:57:56:df:77:10:1d:70:2d:de:98:9b:cd:ba:
3a:d5:d3:6f:df:11:fe:83:6f:19:f6:c4:62:f0:3d:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:70:68:E4:22:9E:61:87:9A:0A:37:72:57:A3:A9:32:BB:B8:4B:8E
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e8:32:f4:de:67:e9:e1:1a:a4:ce:41:0b:c9:2e:85:56:28:
93:49:81:9a:13:22:8b:bd:53:b3:f2:9a:60:a8:95:4c:6b:e8:
79:c8:a6:b6:ab:b9:dd:8b:46:04:ac:ec:e3:17:ec:c8:02:3d:
96:cf:0b:d6:f7:d0:dc:2a:d7:60:f4:27:64:4f:ee:7a:93:48:
1d:a8:80:d8:08:17:09:9a:f3:3d:e8:71:4d:5c:7c:be:5a:38:
81:83:e2:95:a2:70:79:c9:0d:0b:d9:17:9f:47:0d:07:40:db:
25:0e:7d:6b:b0:25:5a:1f:6d:d4:b6:a3:ee:b3:76:d5:54:be:
d2:c1:c2:9d:e7:28:4c:31:d5:b1:d8:53:f6:ea:ad:a9:15:49:
8c:76:20:b1:29:50:fa:78:d7:bc:1a:34:4f:46:c6:f7:7b:e9:
14:ab:48:64:45:47:62:4b:9a:06:f6:8e:cc:ca:53:ef:ce:0f:
f5:9f:eb:27:b7:85:d3:4a:00:bb:67:4a:78:41:8f:2d:92:40:
bb:82:cb:7e:5e:4b:c1:9b:5c:b6:38:d7:1f:b9:a2:88:7d:01:
2d:16:f2:32:b3:ab:e1:a3:00:8e:8d:85:d6:78:35:97:53:d1:
5f:8f:9b:3f:39:a0:31:fd:71:0e:85:41:06:80:6d:a1:96:c4:
db:c5:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:14:19 2025 by rpki-client