Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: 8Ts5oORj3/ztYVy6i0XIsmV/0P0a9Z1JHQEOmPUmvFc=
Subject key identifier: E0:88:36:B6:22:D4:8D:98:36:A8:1E:4B:40:37:02:A3:8B:95:5D:E1
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 01967D20DFF39E8D3500AD11D82F9CA2B9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 16:00:28 +0000
Manifest this update: Mon 28 Apr 2025 16:00:28 +0000
Manifest next update: Tue 29 Apr 2025 16:00:28 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: jTKKdtwFS36VVGQld9K4ORok+vqDNQASn/Lcz63NOls=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:df:f3:9e:8d:35:00:ad:11:d8:2f:9c:a2:b9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Apr 28 16:00:28 2025 GMT
Not After : Apr 29 16:00:28 2025 GMT
Subject: CN=e08836b622d48d9836a81e4b403702a38b955de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:1a:ad:b4:46:f0:3b:2a:b3:3c:8d:44:9e:
f4:d9:65:38:73:ae:50:1f:1e:5c:ff:94:30:6a:39:
14:78:3b:c8:cd:6c:05:64:cf:a2:4c:b6:3f:1b:87:
06:0e:63:c5:f4:bd:7f:7e:f1:79:24:91:52:2f:92:
95:42:2d:63:63:24:e7:75:8f:77:8b:a7:1e:49:a0:
c5:f8:1e:3e:5f:42:b2:8f:ad:2e:32:a8:5e:cb:8c:
08:09:bb:0c:7f:ed:3d:9d:1e:c3:17:24:0c:82:92:
2b:63:0f:cb:74:74:02:5a:dc:b6:29:30:db:e0:0c:
22:70:5e:80:78:86:36:b0:41:ad:e2:2e:7b:f6:50:
65:e3:67:bd:79:bd:35:eb:ac:96:4f:e4:4d:3e:39:
4e:6c:0d:95:fc:51:ac:8e:ee:51:34:89:80:9f:25:
15:74:40:84:58:35:3c:36:67:ae:58:ec:1b:4f:dd:
7d:b1:be:ab:50:66:85:05:4c:fe:78:67:b9:ea:cd:
0a:f8:ea:59:e7:d8:99:1d:f2:a4:47:e9:05:de:aa:
98:cb:53:67:65:e9:b4:61:41:58:57:18:92:5c:2d:
06:c6:f7:bb:50:6e:d5:7d:41:41:6b:c1:35:2b:ab:
0e:dc:50:f3:2b:3a:dd:f3:02:cc:63:0a:98:b1:d4:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:36:B6:22:D4:8D:98:36:A8:1E:4B:40:37:02:A3:8B:95:5D:E1
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:fe:6f:a4:66:c3:8a:94:48:fd:03:9c:6b:37:e0:45:9a:ab:
db:8a:29:15:89:3d:e8:45:e9:2a:fc:4d:1b:82:3d:0d:3b:93:
1a:99:52:01:88:d6:ed:98:b3:1d:82:0a:2f:7e:70:04:f6:32:
8f:52:6e:f6:f9:2f:25:91:9c:fc:83:63:d1:9f:09:4a:33:16:
cc:5d:96:d1:28:a8:da:70:d9:70:61:3e:cd:e9:77:06:6f:6d:
f6:3c:0f:43:76:f8:41:87:3a:d5:f4:4c:de:59:91:f3:cc:b0:
b3:ea:5b:b3:45:5a:3a:e2:7e:3c:88:a9:30:cb:f2:24:51:24:
68:93:66:f5:51:b8:eb:0d:ea:e9:41:e0:17:cc:5b:73:9e:12:
b5:64:e7:a3:b7:e8:94:89:17:97:52:1f:32:dc:8e:5e:ac:7c:
0f:54:cf:69:9b:fa:42:5d:dc:c6:65:c9:0d:3b:ac:d5:ac:6b:
a6:83:ac:28:61:2c:34:89:1b:6c:28:58:bc:50:46:71:3a:9f:
fd:5b:87:f1:05:fd:1f:31:d3:58:ba:85:b7:a7:3c:6f:6e:0e:
08:c6:ad:d7:fb:c4:10:71:91:9e:f1:3a:5b:4e:a3:9c:da:65:
00:4e:bd:4c:34:6b:8d:2a:ea:e2:fd:1c:2d:29:67:e8:e3:9b:
c3:a0:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:17:03 2025 by rpki-client