Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: uvZoYq+TTI7peWbuBhHnkrOpY+drR72U0KpU9nJZATU=
Subject key identifier: 07:9D:BA:D5:12:BF:1F:7F:BE:C7:B5:3F:EB:49:80:7B:93:9C:7A:0D
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01969ED13946F4DE2DB08AB323083DFFF202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 152C
Signing time: Mon 05 May 2025 05:00:33 +0000
Manifest this update: Mon 05 May 2025 05:00:33 +0000
Manifest next update: Tue 06 May 2025 05:00:33 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: d/8wX5u9Q9TdRe2S3AK5jsI15LCgxjEyn318N55OtaY=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:39:46:f4:de:2d:b0:8a:b3:23:08:3d:ff:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: May 5 05:00:33 2025 GMT
Not After : May 6 05:00:33 2025 GMT
Subject: CN=079dbad512bf1f7fbec7b53feb49807b939c7a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:94:1c:23:fa:c4:ea:ef:00:69:dc:0c:ae:
f4:a3:79:68:c5:3f:19:7b:92:d4:78:e8:ac:20:e0:
15:e1:90:f2:df:0d:40:20:05:bc:ac:22:5c:d6:54:
77:49:8e:8d:95:3e:cc:3b:60:48:f2:a5:01:4c:5b:
5c:2b:8b:6c:6b:2e:a9:9c:39:69:d1:71:cf:fe:ef:
da:77:ff:15:de:b8:de:06:b6:2e:de:89:85:d0:09:
6e:c6:ed:8b:f6:cd:1e:f4:e0:99:79:6f:18:68:c5:
8e:4a:57:18:5c:55:67:f2:eb:94:c8:8a:92:cb:cd:
28:2b:2f:76:05:b8:e2:e5:0e:61:87:31:97:3f:46:
8b:8c:ba:41:53:c3:d2:cb:b9:9b:b7:b5:f9:f6:a8:
15:01:88:e9:3b:13:a3:77:7c:1e:9e:b8:2d:9a:8c:
ae:d5:cc:a4:d5:71:ab:c6:19:bd:e2:e6:54:6d:c2:
06:af:86:c0:c8:6d:06:2d:ec:25:69:24:fe:a3:0f:
41:90:8f:da:5d:9e:96:06:42:58:b8:d8:48:9c:87:
39:30:7a:a0:ec:6b:fc:13:8d:c2:12:cf:7e:5a:7d:
28:11:6e:b6:69:9f:5c:6c:74:fa:0d:f1:ce:57:13:
d6:04:d3:ca:72:c7:b7:39:e3:a8:6f:27:e9:4e:24:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9D:BA:D5:12:BF:1F:7F:BE:C7:B5:3F:EB:49:80:7B:93:9C:7A:0D
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:c9:7f:d6:ce:e7:cd:cb:77:16:7f:f9:7f:98:06:7e:ca:
12:f6:b4:12:fd:95:75:55:a6:ab:7f:61:bf:4b:31:1e:f1:d5:
f5:2e:19:c1:03:7b:1e:b4:7e:76:21:f6:49:74:a1:58:08:64:
69:52:8a:20:52:4e:ac:f1:0c:c7:32:01:6b:6d:1f:47:ee:33:
a0:63:a3:ae:c0:8e:8c:a3:4d:d3:99:9f:40:2e:ef:4b:ca:7e:
0a:20:8c:a5:0f:fc:29:d2:93:ca:44:87:49:f1:9b:23:83:c4:
30:1c:b2:e1:ba:b7:97:35:23:f6:8a:2a:4b:3a:56:59:58:06:
cf:75:68:f4:6e:bd:a1:40:e5:e4:ed:de:dd:4a:0d:3f:8a:43:
fd:a3:73:1e:9e:13:9b:41:5b:96:b2:11:5a:f5:3b:ad:44:ce:
c8:91:32:52:33:34:bd:b0:49:b1:30:7f:dc:b1:ce:fd:0c:a9:
0d:03:3b:fe:77:4f:00:b4:7f:6b:e3:6a:1d:7b:b7:96:2e:e7:
ce:41:93:a0:bd:a5:b7:1f:f6:8f:9f:7b:3f:a3:37:98:c4:f3:
68:7b:0b:ca:68:fd:98:89:22:d4:fd:88:65:e7:d6:6d:af:02:
e8:20:13:f2:a6:e7:98:44:c9:62:62:cd:18:21:0f:fd:5c:13:
bc:4b:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:02:51 2025 by rpki-client