Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: U/wmvvZ/cv76xUFDSXdKTt2Yeo9f9q85Mb/cH4rH9Zs=
Subject key identifier: 65:28:59:3D:A1:79:3B:FA:FD:BC:E7:EA:2F:51:C6:A7:4F:67:E0:16
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0196BF00CD2435ABB7E557BD7064A400A5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 11:00:22 +0000
Manifest this update: Sun 11 May 2025 11:00:22 +0000
Manifest next update: Mon 12 May 2025 11:00:22 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: QeePsvfcOVhj3zrs3q8LVlOE+zfmJxgQF3QxmssAoak=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:cd:24:35:ab:b7:e5:57:bd:70:64:a4:00:a5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: May 11 11:00:22 2025 GMT
Not After : May 12 11:00:22 2025 GMT
Subject: CN=6528593da1793bfafdbce7ea2f51c6a74f67e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:da:f8:f0:49:ff:db:e2:8d:5d:d2:2e:4e:
95:9b:51:b9:3d:98:42:6b:c5:9f:4e:36:d8:14:74:
4b:d4:a4:3b:d4:ba:a1:f7:c6:b9:7e:bd:44:a7:7c:
3d:e2:39:74:05:b1:87:4b:90:5b:16:65:8c:0d:c2:
93:ca:fa:f3:88:91:eb:cf:50:3d:97:30:65:de:ef:
36:78:5e:e3:53:92:8a:e9:3a:7c:38:9b:53:d9:85:
25:cb:e5:a8:94:fa:8e:9a:4b:b8:93:10:51:54:43:
d5:59:df:62:17:37:eb:90:49:63:41:da:28:ee:4b:
26:3e:9e:8a:9d:65:b5:1c:8c:41:ea:cb:d4:74:52:
c5:ef:88:2a:fa:0c:a9:15:f9:e0:11:0a:0f:9c:d3:
3a:bb:17:f6:0d:0b:a0:b2:d5:df:17:db:0a:da:02:
18:14:f6:20:72:7f:f4:15:5f:cb:d6:da:74:bd:1f:
ac:4d:3e:2b:ff:c3:ce:1a:8e:a5:f0:d0:78:6b:25:
ed:68:3b:b7:c4:9a:69:00:39:a6:c8:5f:d1:b4:47:
98:20:f2:27:61:d5:7d:40:cb:10:27:c6:57:ae:99:
02:8b:4a:99:ca:6a:9d:1f:64:af:92:1c:0b:fd:5e:
ed:97:60:8c:f8:4d:a4:05:cc:44:b9:bf:82:86:57:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:59:3D:A1:79:3B:FA:FD:BC:E7:EA:2F:51:C6:A7:4F:67:E0:16
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b9:dd:9e:b4:ff:59:9e:0d:e7:54:96:2a:0f:a8:b3:30:49:
39:cb:37:d0:42:c5:f4:fe:95:2e:8c:0b:f8:93:a5:d5:72:9b:
6d:c4:7d:55:ee:4d:fb:e3:81:16:64:e5:24:ed:07:a1:12:c6:
af:dd:e4:3d:0a:45:99:31:2e:c1:47:1e:7a:25:62:00:10:17:
f1:42:14:10:71:60:0a:95:b3:2a:ee:c3:51:cf:99:e3:a8:1b:
45:5b:64:59:e2:5f:6f:97:b3:9e:6c:73:53:45:7f:8b:a3:64:
7d:2b:5d:61:12:9e:5a:8d:1b:de:71:d1:d3:1a:ab:38:97:90:
c1:06:50:bf:47:88:63:4f:07:1e:1a:3e:46:36:71:ba:77:b1:
98:79:a4:f3:db:91:28:df:f9:bb:f1:e0:1e:3e:b9:20:ac:cb:
7c:e3:8e:09:0e:ed:49:95:de:15:17:c5:66:85:01:da:4c:19:
ba:5e:c6:c2:26:21:ef:23:60:9a:18:c9:76:7d:d6:8a:2c:26:
d1:a3:34:92:3f:29:40:5a:71:68:11:8c:eb:24:27:7d:00:e0:
95:8c:e3:12:fd:bf:4a:87:dd:ee:41:96:2f:d9:76:b5:d3:a5:
b4:30:85:67:d1:11:a5:68:70:96:98:b9:73:69:44:c5:b8:d1:
7f:ad:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:47:47 2025 by rpki-client