Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: +mbY+GP81EOm8DJQ2ULD8h9Jz1BxEYVrE4z4FHFqxwk=
Subject key identifier: 45:54:2B:CF:74:03:08:97:3E:4E:93:B0:EE:CE:41:89:0B:8C:F3:C5
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 01969E9B15C0DD1748B650A936C810976B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 04:01:25 +0000
Manifest this update: Mon 05 May 2025 04:01:25 +0000
Manifest next update: Tue 06 May 2025 04:01:25 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: eSPolAKJBKnrRMlorR7amlg+ZBk6UXbsz7F0vbZvY3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:15:c0:dd:17:48:b6:50:a9:36:c8:10:97:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: May 5 04:01:25 2025 GMT
Not After : May 6 04:01:25 2025 GMT
Subject: CN=45542bcf740308973e4e93b0eece41890b8cf3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:5e:3a:47:74:14:df:6d:af:28:cc:28:59:
21:0b:2a:ba:fb:b4:79:67:ec:ac:12:52:47:f1:6c:
ef:c0:36:49:71:6c:9b:26:a1:39:59:2e:59:33:72:
9d:40:ee:94:83:09:d5:cb:5b:b5:28:c8:66:2e:69:
1f:2b:c7:0e:8d:32:98:b3:ea:a4:53:82:f4:45:cb:
a6:44:a6:80:69:73:0c:88:96:8d:0b:f0:79:18:73:
e2:90:4e:04:62:ed:0c:a1:c3:10:4d:9d:6b:5d:11:
14:25:8a:e9:a5:93:6b:02:21:93:8d:2c:fa:b8:c8:
42:73:05:3f:5f:8a:42:5b:32:4a:70:3d:4f:22:5d:
ba:22:a9:7c:13:f0:c8:21:85:2b:6a:0d:25:0f:b6:
72:13:cf:a5:a5:89:bd:17:38:fc:d9:dc:47:50:36:
3a:5e:34:b8:8e:55:51:b4:07:80:3d:ed:d7:d2:1b:
51:8d:23:85:a6:55:92:34:ca:ec:98:78:03:1a:00:
5f:e4:db:6f:0e:cd:ec:2a:7a:70:8a:50:f8:f9:87:
c4:63:bd:1f:da:05:1f:68:e7:ed:fd:62:37:7c:3c:
76:cc:73:9a:19:2f:f2:17:e5:67:de:c5:39:6d:0f:
2b:25:6b:62:2b:de:05:52:a0:ac:4c:67:68:23:9c:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:2B:CF:74:03:08:97:3E:4E:93:B0:EE:CE:41:89:0B:8C:F3:C5
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7d:b7:bc:32:c6:00:4b:51:bf:26:fd:4a:2e:92:27:fb:4c:
72:6f:4b:fc:54:e9:0b:db:15:83:cb:8a:d4:71:54:51:6c:45:
22:2b:8c:df:5f:c8:b2:8e:08:3f:e8:32:a9:b9:dd:90:84:91:
db:c4:07:e4:4c:cd:fb:23:7f:bf:37:2c:c5:6b:3b:95:84:74:
54:23:f5:65:27:9c:d6:33:40:ea:26:12:56:90:b2:11:ce:d3:
02:8b:02:e2:95:8e:af:e9:f6:b9:9d:d9:8e:8c:3b:54:82:a6:
85:79:18:4c:b2:c3:b5:a3:b7:c0:51:1a:4d:b5:11:57:81:57:
ad:c9:2a:90:de:61:64:86:84:a8:7d:5c:55:5a:75:9a:77:af:
f0:25:d6:58:95:14:33:54:56:29:cd:c8:13:35:0e:97:ab:b1:
20:d7:6a:99:4f:bd:cc:f2:10:c1:ff:b0:14:6e:2e:14:d0:d3:
1b:3a:f2:5a:1e:10:7e:0a:a2:54:fc:4d:ec:99:2d:e1:3a:21:
e3:5e:25:b8:17:f3:50:bf:d3:78:7b:a9:76:60:79:0d:f4:de:
04:89:7f:20:c5:89:91:07:cd:12:0a:8c:61:b5:f5:4f:fa:49:
0f:a3:d8:8e:2b:05:80:93:d9:44:11:f9:3d:04:de:27:82:a0:
3e:04:05:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemxXA3RdItlCpNsgQl2s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDcyYjAzM2ZmNmZhMzhiZjIzNjEzOWFjZGI3N2E3YTBh
MDQ3YTMwHhcNMjUwNTA1MDQwMTI1WhcNMjUwNTA2MDQwMTI1WjAzMTEwLwYDVQQD
Eyg0NTU0MmJjZjc0MDMwODk3M2U0ZTkzYjBlZWNlNDE4OTBiOGNmM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OxeOkd0FN9tryjMKFkhCyq6+7R5
Z+ysElJH8WzvwDZJcWybJqE5WS5ZM3KdQO6UgwnVy1u1KMhmLmkfK8cOjTKYs+qk
U4L0RcumRKaAaXMMiJaNC/B5GHPikE4EYu0MocMQTZ1rXREUJYrppZNrAiGTjSz6
uMhCcwU/X4pCWzJKcD1PIl26Iql8E/DIIYUrag0lD7ZyE8+lpYm9Fzj82dxHUDY6
XjS4jlVRtAeAPe3X0htRjSOFplWSNMrsmHgDGgBf5NtvDs3sKnpwilD4+YfEY70f
2gUfaOft/WI3fDx2zHOaGS/yF+Vn3sU5bQ8rJWtiK94FUqCsTGdoI5x0SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVUK890AwiXPk6TsO7OQYkLjPPFMB8GA1UdIwQY
MBaAFNnXKwM/9vo4vyNhOazbd6egoEejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYt
ZjgyMWE1YTVjZjZhLzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYtZjgyMWE1YTVjZjZh
LzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP323vDLG
AEtRvyb9Si6SJ/tMcm9L/FTpC9sVg8uK1HFUUWxFIiuM31/Iso4IP+gyqbndkISR
28QH5EzN+yN/vzcsxWs7lYR0VCP1ZSec1jNA6iYSVpCyEc7TAosC4pWOr+n2uZ3Z
jow7VIKmhXkYTLLDtaO3wFEaTbURV4FXrckqkN5hZIaEqH1cVVp1mnev8CXWWJUU
M1RWKc3IEzUOl6uxINdqmU+9zPIQwf+wFG4uFNDTGzryWh4QfgqiVPxN7Jkt4Toh
414luBfzUL/TeHupdmB5DfTeBIl/IMWJkQfNEgqMYbX1T/pJD6PYjisFgJPZRBH5
PQTeJ4KgPgQFiw==
-----END CERTIFICATE-----
Generated at Mon May 5 06:06:29 2025 by rpki-client