Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: GhjzUfQLDKhbE3zkNu1OC8oJVKGIWJHYSBJ26qGV5Fo=
Subject key identifier: 0B:19:C0:E0:BC:A4:D3:16:70:55:62:3A:2A:C8:5F:94:73:82:40:EB
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019676E7E8E918621D3343467D47E51CEABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 11:00:32 +0000
Manifest this update: Sun 27 Apr 2025 11:00:32 +0000
Manifest next update: Mon 28 Apr 2025 11:00:32 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: zQ4zJS2wRScTf6Rf4lI+DQvaDKj62Z3G0zf99kwaGXs=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e8:e9:18:62:1d:33:43:46:7d:47:e5:1c:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Apr 27 11:00:32 2025 GMT
Not After : Apr 28 11:00:32 2025 GMT
Subject: CN=0b19c0e0bca4d3167055623a2ac85f94738240eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:80:17:11:7f:cf:90:32:26:17:67:c8:d4:
3c:94:b8:cb:79:9c:69:8f:c4:da:03:f6:4e:76:51:
ba:17:c5:59:fc:81:f8:f8:2f:6e:79:c8:78:14:7e:
44:59:91:11:f8:e8:27:4f:5b:24:b1:0b:2b:ae:c4:
68:1f:6d:23:99:c9:e1:73:f0:87:53:d2:3f:4c:f2:
7d:3b:20:b0:f0:6a:63:00:52:5f:8d:64:39:50:21:
4e:3e:54:3a:1a:af:da:04:0c:50:3a:76:8b:8c:9c:
54:26:47:e5:41:32:3b:66:fd:8b:4b:10:b9:40:22:
20:2b:52:c2:a5:c2:0a:9e:28:68:1f:d1:55:e9:80:
a8:f3:61:81:74:13:dd:ee:28:10:c3:d8:da:ea:dc:
87:62:df:a3:3a:2b:57:91:14:f1:0e:97:25:6d:3a:
a1:38:14:b0:97:18:17:0c:bf:fb:53:83:26:24:10:
1b:50:8b:53:bf:0d:27:dd:85:bf:be:08:73:7c:3d:
ce:58:f1:51:ce:ea:ca:93:63:44:79:85:10:75:e3:
5c:e4:91:c8:42:41:b5:c3:a7:e7:10:b3:83:cb:17:
17:59:7d:48:95:c8:66:cc:67:c6:05:9f:89:3b:2c:
bf:8f:37:a7:b8:c5:1c:7a:93:25:75:94:ae:c0:f8:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:C0:E0:BC:A4:D3:16:70:55:62:3A:2A:C8:5F:94:73:82:40:EB
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:43:9b:8b:04:81:79:31:22:0f:bb:86:66:12:51:92:69:
08:65:e0:a9:6d:ca:fa:bb:39:e8:b6:b0:36:6a:12:9f:4f:6d:
4e:19:69:e5:66:74:69:f2:01:ae:bb:d1:c9:4e:9c:78:d4:4a:
45:56:4f:2b:52:4f:bc:ba:6b:49:e7:4f:5e:e1:d5:a5:99:5e:
d1:a2:e9:16:70:d3:21:ad:55:30:35:16:af:e5:6f:8c:dc:50:
2b:60:e8:dc:08:1a:f2:f5:87:21:ef:85:47:70:fa:8e:2b:73:
33:1d:3e:da:a8:1c:b0:ac:09:b4:9f:bc:57:1d:51:aa:88:df:
46:21:53:c9:2f:a0:3c:ff:01:46:9c:20:e8:d6:6c:43:12:ac:
d1:51:c6:24:2f:ff:3a:3e:98:80:ae:19:47:72:6d:a4:c6:b4:
ad:44:2d:f1:b6:d8:4a:97:c3:e2:4a:98:dd:0d:6b:b1:a9:68:
89:c9:90:b2:05:d7:42:a9:8a:54:bc:cc:b1:4c:38:eb:8d:cb:
a7:eb:54:6f:3f:ac:56:41:e7:ca:d2:1b:17:d8:04:00:22:e2:
f5:e9:7f:4a:f7:be:0a:6d:90:10:c9:5f:e5:05:20:71:6e:f8:
e3:c4:e6:c5:28:66:38:df:08:b2:bd:6d:5e:05:7b:7d:c9:f5:
a0:8c:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:52 2025 by rpki-client