Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
File: 2L2bhs89vBD7aV_xTYu1ShMHsqU.mft (raw, json)
Hash identifier: vVLVLSwQFbObMl++NCOXBHh662E/BqM4EG/GteU/IAg=
Subject key identifier: 42:29:0E:6A:59:15:9F:DC:F7:20:E1:2D:01:25:E0:FC:52:53:9F:6F
Authority key identifier: D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
Certificate issuer: /CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Certificate serial: 01967DC5AB4BD8FDC715E542E60947C2F019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
Manifest number: 0C73
Signing time: Mon 28 Apr 2025 19:00:28 +0000
Manifest this update: Mon 28 Apr 2025 19:00:28 +0000
Manifest next update: Tue 29 Apr 2025 19:00:28 +0000
Files and hashes: 1: 2L2bhs89vBD7aV_xTYu1ShMHsqU.crl (hash: 6YqVhRcgltg2PtoxcLsSZ2FMarnTjVn/O3qJFTtpLzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ab:4b:d8:fd:c7:15:e5:42:e6:09:47:c2:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Validity
Not Before: Apr 28 19:00:28 2025 GMT
Not After : Apr 29 19:00:28 2025 GMT
Subject: CN=42290e6a59159fdcf720e12d0125e0fc52539f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:c5:11:eb:39:c0:bd:f8:22:6a:47:9f:65:
a5:6e:61:51:80:47:5b:fc:66:79:fc:8a:4c:da:0f:
49:de:18:38:33:af:da:67:df:46:2b:b0:86:b8:6a:
1d:a1:a8:01:2d:72:a7:83:72:62:50:c4:8d:ef:bc:
dc:9b:f5:88:8b:6b:c6:bb:04:c7:fa:f9:11:22:dd:
37:c1:f9:60:82:c2:70:17:4c:a7:c7:99:7e:a9:78:
0b:a3:7f:9d:52:e6:25:12:88:45:11:01:09:cb:80:
2d:15:ff:80:6e:7b:53:42:9c:2b:ab:6b:35:8e:3f:
ef:22:68:5d:53:f8:95:e4:c5:9b:07:78:56:70:23:
8b:a9:58:06:23:27:92:4e:52:65:a9:2b:c8:d6:54:
84:d8:f8:ee:30:e1:d4:b1:19:f9:c3:35:60:08:71:
2d:9b:a9:97:e8:c5:37:0b:57:e6:92:d8:82:14:a3:
14:6e:7a:81:b4:8c:14:83:15:61:2e:46:0c:00:19:
11:97:e6:e3:00:f4:80:d9:92:2f:b8:14:d4:54:ec:
10:6d:9f:18:a6:a0:73:89:f1:e0:bc:3e:fe:5d:7f:
39:a2:1f:97:b3:85:c8:f6:85:c3:49:38:b4:ff:c9:
d5:d0:49:40:97:60:43:6b:20:ba:db:9d:7c:e6:bc:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:0E:6A:59:15:9F:DC:F7:20:E1:2D:01:25:E0:FC:52:53:9F:6F
X509v3 Authority Key Identifier:
keyid:D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3d:42:5d:51:59:e7:ef:33:44:e5:6f:bd:95:bd:f3:11:44:
0d:51:b3:77:8c:48:59:0a:44:40:e9:2f:8b:7d:b9:b0:1e:7c:
f2:33:e1:b4:ef:18:f7:56:74:12:97:ec:f3:ce:3d:02:5d:6d:
9a:ce:e7:5a:c8:48:f2:56:6d:4d:44:43:78:60:38:95:31:aa:
dd:12:d7:78:d5:d3:71:e2:b0:3c:41:97:c3:27:9b:39:ed:8c:
d6:8a:cf:18:f8:f8:ee:a4:c7:fb:e0:68:23:35:f7:8a:9b:89:
00:5f:3f:bb:06:a9:ee:22:65:19:c5:95:83:9f:15:ec:10:e8:
b5:27:4d:24:7f:ae:54:a8:68:63:c2:b6:a5:69:43:dc:b4:cc:
3b:df:0a:c3:6b:53:41:c9:96:eb:77:45:0f:7b:c8:c3:8c:1a:
1a:39:c3:ef:bc:95:0a:fb:f4:de:5d:a6:87:a8:b8:53:32:1f:
22:f8:66:5a:e7:7d:7e:50:34:a5:fc:13:c1:57:be:3d:ac:e4:
c2:cc:80:82:e2:ac:d4:59:70:18:cb:df:4d:93:04:17:18:25:
89:c1:86:9d:08:ba:05:28:4c:5a:09:7e:66:b7:d4:2f:03:b2:
21:58:22:ca:58:1c:30:a4:66:f2:fb:f4:de:e7:b9:5f:6b:70:
34:f9:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:32 2025 by rpki-client