Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier: 4rGP5fCbs5PmUjc37hfx73Za/x86w/EbLL5icivs9oY=
Subject key identifier: 46:4A:BA:F8:B1:5D:7B:9E:84:9F:FD:39:F0:35:E2:08:9B:7B:89:78
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 01968E4B565F8713DF4CB1ACEA529634CE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number: 05B5
Signing time: Fri 02 May 2025 00:00:24 +0000
Manifest this update: Fri 02 May 2025 00:00:24 +0000
Manifest next update: Sat 03 May 2025 00:00:24 +0000
Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: eYJAChdPgydYynrJvoLDKvES2tC/6qI3bvdXleqfDsE=)
2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:56:5f:87:13:df:4c:b1:ac:ea:52:96:34:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: May 2 00:00:24 2025 GMT
Not After : May 3 00:00:24 2025 GMT
Subject: CN=464abaf8b15d7b9e849ffd39f035e2089b7b8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:1f:ff:13:57:22:c0:83:87:38:9b:eb:75:
49:e7:05:d5:ac:99:53:a1:dc:51:fe:16:43:2c:57:
1e:78:93:ef:a4:81:a6:3b:7b:2e:b9:7a:fa:a2:36:
5a:78:41:06:2f:3e:d6:9e:0a:d8:1f:d2:78:0b:20:
fb:53:97:29:f0:65:39:a4:65:af:89:82:66:c1:50:
8d:50:64:e0:10:99:0d:19:38:8a:90:76:d1:03:5e:
1f:c3:88:4b:9e:d6:eb:4b:0c:47:db:47:fd:29:d5:
21:89:30:58:26:fe:2e:db:6f:f5:b2:3c:79:d7:09:
97:46:ee:6f:b5:ce:cf:d5:be:d1:65:3f:14:47:04:
b4:c0:75:04:05:a4:93:13:bd:09:4d:2d:c7:30:55:
12:47:e8:28:7c:97:78:6b:aa:88:50:11:2d:e1:dd:
ef:80:d4:80:5a:a4:29:a1:49:90:2d:06:53:14:a9:
b1:68:52:14:00:af:d5:6f:6a:27:b0:20:6e:87:7d:
f2:d3:58:b1:cb:2a:75:87:4d:9d:14:af:8e:6b:46:
3d:a3:dd:f4:16:9c:fa:8e:d5:c2:45:fd:90:14:05:
47:94:3b:df:07:ec:db:f5:84:ed:84:26:83:e5:43:
f5:ca:d6:8c:36:d8:f6:30:d1:2e:51:5c:41:d8:b5:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:BA:F8:B1:5D:7B:9E:84:9F:FD:39:F0:35:E2:08:9B:7B:89:78
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:61:c1:12:f7:ee:bf:32:da:43:6f:d3:90:cd:97:55:82:c1:
81:de:b0:9c:eb:ee:24:a4:cb:b0:db:8f:8a:d4:79:39:2e:90:
8b:6f:a6:c7:c3:2a:f5:65:58:d7:82:69:92:6c:ae:a1:b6:62:
d5:6a:7d:d6:b0:b8:2d:d6:c3:9f:55:5a:15:56:50:05:53:51:
7e:a4:14:a7:06:00:30:14:70:7f:ec:f6:c3:bd:c7:0a:6f:0a:
0d:4b:aa:52:67:94:75:ec:53:da:bc:a2:73:33:cb:bc:82:fe:
97:50:e3:9f:30:f9:48:42:90:1b:2f:74:81:59:a2:5f:fd:11:
d4:3a:9e:17:9e:45:05:7f:63:87:0a:24:f7:41:7a:dc:b2:28:
d4:52:61:e6:7b:ac:e1:9e:6c:8f:c0:27:48:1c:ae:1d:a2:0c:
14:0f:3c:df:e5:6d:d5:87:51:7c:65:8e:d1:ed:a1:1a:6f:5f:
28:29:c2:d3:cb:a8:26:b9:15:09:26:a7:52:ea:5f:b7:d3:46:
5e:54:c7:fa:84:fd:8e:c1:e1:7b:fb:28:91:da:5a:58:d5:06:
4d:43:5a:53:03:fe:ac:dc:15:20:9f:39:b1:c2:7b:3e:ee:4a:
4e:7d:4d:b7:13:81:2b:ad:53:8c:0a:cf:f3:9b:87:34:fd:5f:
5b:ea:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:54:39 2025 by rpki-client