Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: pfHo5NN4hgGHiuG+cilGyIAfILSxH7ip0TAfhVsuCr8=
Subject key identifier: 45:CC:20:11:C6:16:81:2D:C3:DB:3A:A9:2D:E3:C5:B9:74:3F:8A:96
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 0196C53AB42ACA6F1138A6F044562594D4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 16:01:20 +0000
Manifest this update: Mon 12 May 2025 16:01:20 +0000
Manifest next update: Tue 13 May 2025 16:01:20 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: Vjr0sRrwrVkIZKbIfOFQQDXoiERTK+He0mVnHktaFU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:b4:2a:ca:6f:11:38:a6:f0:44:56:25:94:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: May 12 16:01:20 2025 GMT
Not After : May 13 16:01:20 2025 GMT
Subject: CN=45cc2011c616812dc3db3aa92de3c5b9743f8a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:d0:35:19:06:73:39:35:98:9b:f9:eb:8e:
8f:98:83:d4:29:2d:a7:b5:c2:23:c5:92:cd:32:10:
1a:b6:b8:8b:79:9e:06:c4:cb:fd:95:0a:71:4d:f9:
03:f6:2c:0f:ae:2d:8d:95:12:c3:18:c3:fc:33:c8:
75:0e:11:81:22:46:4a:5b:33:e7:a8:7d:95:81:f1:
75:01:2f:5b:e8:3f:ef:72:39:e3:07:f7:04:ee:a0:
82:f9:7d:c7:19:07:ce:90:5e:d8:a1:86:2e:9b:be:
17:61:87:d7:d9:17:69:2a:33:18:cf:fe:8f:96:74:
49:0e:e7:4a:fa:d1:2f:b9:f7:b1:a7:65:68:eb:9a:
ca:a5:56:58:e3:04:2e:47:a5:52:72:9f:d7:15:d0:
85:13:96:ff:eb:b7:10:e8:ca:8e:fa:ac:b4:ca:32:
97:73:49:c8:30:44:21:98:72:2c:0f:a7:59:50:fc:
1b:ec:2f:29:10:62:18:b1:68:3b:2a:d7:58:67:9d:
60:bc:a3:ca:82:09:f7:97:9d:84:ed:73:aa:64:90:
43:34:75:cc:4c:66:b0:70:a4:07:4f:25:aa:38:2d:
e1:d9:68:a3:8f:68:ae:11:3a:3e:ed:12:b5:85:8e:
81:ab:e3:36:60:32:23:93:91:8c:f2:09:d4:91:13:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:20:11:C6:16:81:2D:C3:DB:3A:A9:2D:E3:C5:B9:74:3F:8A:96
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4b:a8:30:f8:8c:af:30:94:3b:81:00:b5:5c:9a:a8:7b:b9:
d3:26:66:0e:da:e8:69:cc:58:98:f7:70:03:f8:a4:b8:ab:38:
18:99:c8:42:7e:94:a1:c8:ba:3e:01:f9:37:0f:d4:e7:08:5f:
87:5e:de:e1:33:4a:e3:e1:08:0c:09:b3:99:7a:32:82:de:a7:
c4:f4:29:6b:96:0e:5b:67:a4:d6:44:2c:f5:e4:c5:e7:2b:89:
4a:80:8d:3b:21:84:23:a0:fc:c5:47:9a:08:dd:93:8b:2a:1d:
66:95:dd:35:41:3a:5e:dc:13:d3:29:42:60:c0:4a:09:a8:a5:
59:95:19:d1:d4:39:c4:86:8e:71:cb:77:e1:3a:b0:c6:27:c7:
0b:6b:44:0a:54:ff:43:d5:94:82:76:6e:48:ea:df:d5:02:ae:
a7:c6:46:39:14:1f:43:4c:0e:f0:e1:b2:e0:ed:34:7a:b0:9b:
7c:0b:99:c9:b0:0b:fd:89:18:1a:e2:65:34:3e:a7:d7:fb:e6:
fa:be:37:35:03:b6:60:8e:b0:58:f5:99:a6:a8:64:a0:80:27:
a8:dd:4f:d6:34:32:65:a0:9d:9a:7c:9c:59:78:a7:c8:43:c9:
d3:50:9a:60:2a:88:22:c8:12:b5:07:df:c3:98:fe:97:b5:06:
a3:c3:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:10:25 2025 by rpki-client