Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: UnEbcJ5yLELZS3suMsWKCqG3bHi7Mi/BYXHPNsyaj7U=
Subject key identifier: 5A:FB:20:66:BA:85:22:30:29:66:51:D5:11:B3:3B:B9:A0:3F:72:F6
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 0196A0F6582ADAE2BE4C5E59E38B6D287560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 15:00:21 +0000
Manifest this update: Mon 05 May 2025 15:00:21 +0000
Manifest next update: Tue 06 May 2025 15:00:21 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: lRXEwoQHdGfkimg7e/ztfDwbTkLLMQng6TbAFVh9j9E=)
2: fsmjJGHVGMdtbxt5zTmroIJ61d8.roa (hash: ekmZpLPLY3VD8IwMlJiRaCQQJFiTrijdYs2CPHyN2+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:58:2a:da:e2:be:4c:5e:59:e3:8b:6d:28:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: May 5 15:00:21 2025 GMT
Not After : May 6 15:00:21 2025 GMT
Subject: CN=5afb2066ba852230296651d511b33bb9a03f72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:6c:fa:3f:f5:cd:4e:6a:9e:a3:d4:14:8a:
82:1c:43:0d:c7:18:27:25:ee:61:cb:4e:42:2c:af:
9b:cc:9c:6a:eb:db:39:04:4a:a1:94:06:f5:f8:e0:
d1:7a:c3:e4:55:29:4c:1e:51:c1:cf:5d:29:be:51:
bb:9c:a2:a9:8c:76:ff:d0:ad:9c:51:84:7d:d8:3e:
92:80:c8:ac:a0:0b:d8:c8:ad:63:0d:35:27:a1:e7:
ed:db:5a:67:cb:d8:c8:27:18:f4:87:7f:ea:a4:cf:
c3:05:3a:16:db:2e:7d:a1:32:c1:06:05:6c:e7:20:
9d:8f:4d:75:2d:da:8c:64:64:22:79:a3:59:5c:29:
32:01:ac:89:cb:6f:d9:02:6e:87:e0:6c:9e:fe:74:
22:ef:80:88:58:20:8f:6f:e8:07:aa:f5:ca:11:1a:
67:c6:ef:97:38:4a:10:d6:8b:7c:42:c6:29:b4:04:
0a:3a:8c:e6:52:85:a3:57:64:1b:c4:93:13:29:2f:
93:bf:41:e9:7e:dc:a6:e2:dd:5d:3a:1f:aa:81:23:
b1:5b:4c:95:e6:7a:89:37:90:90:39:3c:55:cb:3d:
a6:c0:31:44:31:d9:d9:e3:93:80:6b:f5:5e:ac:75:
84:fd:69:30:69:7a:4f:19:d4:72:8f:2a:a0:91:2c:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:20:66:BA:85:22:30:29:66:51:D5:11:B3:3B:B9:A0:3F:72:F6
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:09:80:b9:fe:2f:9a:c5:a3:de:2f:7b:ae:4e:75:6a:03:de:
19:97:28:d9:02:4b:be:d2:99:7b:19:71:d9:83:a7:14:d8:92:
22:25:51:78:59:52:18:b1:89:9b:0d:21:f7:7d:5f:23:91:cd:
56:85:ea:b2:82:9f:61:48:b2:19:cd:1d:14:d6:d8:ba:01:00:
7f:71:f3:5e:18:9e:66:e5:dd:7b:8c:55:40:55:c9:c9:f2:a7:
4d:bc:cd:ef:34:10:88:11:97:5f:76:24:48:cc:5f:9f:43:d5:
2d:dc:0e:24:34:97:a0:99:27:73:69:01:07:67:0a:50:52:04:
b3:39:83:cf:74:69:96:61:9e:8f:23:7d:d2:b8:aa:38:43:28:
70:39:d1:69:d7:45:0c:41:f0:0a:8f:cd:c2:63:93:05:e9:fc:
9c:59:5e:45:7c:1c:25:87:3c:1c:2d:32:6f:f2:ff:8f:68:ae:
c1:60:a1:9d:8f:93:45:f5:0f:68:e8:d3:2d:46:e8:8e:9e:98:
65:37:10:88:bb:de:3c:54:c1:f5:08:d8:f4:11:b6:df:3f:72:
28:04:06:2e:ef:2d:4f:db:0d:27:98:24:3e:78:c2:ca:5d:57:
2a:69:9a:44:29:d5:d0:db:ee:62:24:9f:9d:b6:53:72:81:b2:
9e:19:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:11:48 2025 by rpki-client