Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier: lKOtpc7FFgJtVbcDhnVWi4/PkfdsPMH7uItO/8kD0N0=
Subject key identifier: 34:45:D2:3D:F0:B3:A2:9D:1E:31:03:3E:18:92:CC:A6:97:DF:3E:F6
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 0196C539B0FABB820D0752AD0A3185E6531A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number: 1237
Signing time: Mon 12 May 2025 16:00:14 +0000
Manifest this update: Mon 12 May 2025 16:00:14 +0000
Manifest next update: Tue 13 May 2025 16:00:14 +0000
Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: iGtfL9mfHUZyaIxjggWbw+rz3WKtg5tAUFZ+CZ+CAB8=)
2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:b0:fa:bb:82:0d:07:52:ad:0a:31:85:e6:53:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: May 12 16:00:14 2025 GMT
Not After : May 13 16:00:14 2025 GMT
Subject: CN=3445d23df0b3a29d1e31033e1892cca697df3ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:5a:04:c2:00:68:c7:26:66:a6:dc:69:cb:
f9:a4:f8:6e:7c:58:21:a7:57:b1:ac:7a:77:01:20:
e9:1d:1e:64:a4:a0:c1:de:40:c2:f0:d7:16:fe:5d:
f7:2e:2f:eb:2c:bd:a4:c9:3d:7e:bf:46:38:f6:7e:
79:66:d4:44:b0:eb:94:cf:7d:39:8f:69:35:e3:b2:
3d:90:9e:47:56:dd:50:17:2e:aa:86:46:d3:88:e2:
87:a3:23:90:a8:89:9d:d9:2b:77:17:63:b0:38:9a:
17:f1:12:92:dd:bc:45:d4:aa:48:c5:81:94:4b:ca:
af:4a:3d:91:c0:e7:3a:4e:63:7c:24:a6:26:8e:32:
79:60:e8:f0:dc:21:c2:84:fd:41:74:9e:12:ba:48:
5c:c4:de:8e:08:2d:e7:40:58:67:73:78:c1:e7:79:
9c:99:f4:95:0a:61:ef:6f:a8:5a:5a:bb:68:f8:a1:
a9:03:78:50:74:4e:1b:05:12:5e:c8:60:d7:88:3d:
5d:05:e2:67:4e:65:61:5c:e5:8e:a8:c0:7b:98:5a:
96:94:41:eb:4d:bb:32:85:91:ec:0a:1a:d6:4f:fd:
42:21:d1:34:2e:9e:29:6d:80:c5:1d:81:53:91:88:
14:04:04:59:ee:9e:6e:4b:86:d6:e8:cf:b5:bb:1d:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:D2:3D:F0:B3:A2:9D:1E:31:03:3E:18:92:CC:A6:97:DF:3E:F6
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3b:60:b0:9e:ce:be:20:46:91:1e:47:0f:bc:12:32:1c:2f:
29:35:9a:8c:f9:9d:37:cb:37:8a:63:80:1c:e4:ac:53:24:fd:
b5:9f:90:00:94:d2:14:06:0b:cb:fa:ff:08:f8:ba:9e:e6:eb:
80:4b:ee:4d:d6:ef:45:06:70:0d:ac:a2:98:6d:20:38:7b:4c:
c5:3a:08:c8:a2:dd:e5:dc:90:db:f3:a7:af:b0:89:d6:05:ca:
e9:da:c4:ef:97:58:60:64:f3:22:95:2d:3d:34:8c:94:60:f0:
34:15:06:26:0c:48:4a:76:22:48:c4:fd:f8:b7:cf:1c:30:b3:
70:4c:86:fc:25:56:8a:4f:a7:1a:91:18:37:53:7f:32:0f:d3:
d3:d9:75:bf:ef:a6:e8:5d:55:98:57:14:59:30:84:c8:85:68:
05:b4:e4:c3:66:c6:1d:28:2d:a6:32:f9:38:ff:ff:e4:3f:a4:
40:22:e6:e8:31:d6:51:61:0d:31:68:47:66:57:17:9a:d3:96:
99:e1:00:e2:d1:79:ff:19:c0:ee:33:3d:98:5f:ce:9b:1e:57:
4a:02:e9:55:8c:71:45:ea:aa:65:ce:63:8d:e3:35:2d:cf:54:
4f:0b:28:70:1e:ff:41:90:62:c1:3f:11:bd:e5:46:bb:68:b6:
c8:a0:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:55:22 2025 by rpki-client