Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: SmMp3BArtFIOkYhA7rCHNu2AK/dnKt7T5A6oZEOuTok=
Subject key identifier: 52:60:DD:18:F7:7E:BB:2D:D9:8F:81:84:F6:D1:D0:FF:38:68:B7:64
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 0196A12D6AB37271378090204D003019D48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 16:00:30 +0000
Manifest this update: Mon 05 May 2025 16:00:30 +0000
Manifest next update: Tue 06 May 2025 16:00:30 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: uX1aL7OjteP25MdjdcYpkln3LEPsRLzkObDcqcjABLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:6a:b3:72:71:37:80:90:20:4d:00:30:19:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: May 5 16:00:30 2025 GMT
Not After : May 6 16:00:30 2025 GMT
Subject: CN=5260dd18f77ebb2dd98f8184f6d1d0ff3868b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:9b:08:4c:1a:ae:6b:35:3c:80:c5:0c:68:
d2:3a:ac:d6:97:8b:ab:4c:08:4f:2c:ad:d6:30:51:
e5:85:2e:c9:a0:84:0d:98:82:1d:d8:cf:b3:35:91:
6a:a4:28:74:da:e6:f2:e3:50:7a:b1:f4:c7:23:22:
e4:96:06:5d:b9:43:d1:36:f6:7f:b0:2e:73:19:ca:
b3:d6:24:b4:02:df:47:3d:87:9e:3e:4d:91:78:39:
7e:9b:f5:97:41:9b:14:6c:c3:5c:d6:80:ea:6f:e0:
cd:67:6d:2f:7c:21:30:ea:a9:70:7d:60:fb:9a:70:
31:7e:e8:1f:b9:61:90:13:e1:34:47:f4:d2:df:6f:
80:1a:05:65:7f:2f:98:1f:f0:38:b7:92:6b:9e:fb:
54:2a:4a:54:07:84:eb:e6:03:05:3b:7c:f4:0c:f4:
9d:8b:d0:d6:e5:87:e6:c0:98:62:fe:33:d6:fa:cf:
6a:81:35:23:fd:e4:f7:cb:24:e5:84:f0:5a:90:50:
26:36:84:41:47:85:63:a6:57:fd:2a:35:22:60:3f:
f7:ff:f4:3e:94:82:5e:02:8d:4d:bc:87:fd:16:08:
fa:d9:84:f9:7c:0b:43:9c:5b:dc:80:db:19:04:1a:
c3:cd:8e:a4:b1:84:11:29:3f:c3:15:9f:b9:70:64:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:DD:18:F7:7E:BB:2D:D9:8F:81:84:F6:D1:D0:FF:38:68:B7:64
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:24:8f:d5:1e:ce:eb:d9:39:f3:7c:ad:77:b1:81:90:f1:06:
48:7c:8a:38:a8:53:af:47:9f:f6:7a:c3:33:ce:82:a0:fc:a0:
c0:04:2f:cb:b2:a5:92:35:99:74:f8:09:8d:bb:d8:b4:20:0c:
9f:c8:f4:3e:d1:25:f6:0a:28:3c:66:83:61:52:3e:c4:4c:44:
ed:fe:cd:ea:3d:2e:8e:eb:e2:a1:df:92:0e:2d:fc:8c:73:45:
83:82:23:3a:29:cf:99:59:c2:45:5f:f8:69:8c:f7:a9:e5:be:
fb:40:2d:1c:b4:49:94:04:4f:a8:da:f8:bc:99:31:ea:c1:cc:
26:3a:3f:7f:fd:21:03:dc:ab:f9:18:05:77:4e:c9:11:13:2a:
ea:0b:5f:3d:ca:f9:cd:02:fd:16:5d:e9:f4:7f:6c:b5:0f:a6:
2a:ba:76:75:0c:2d:21:87:35:2a:18:d0:85:b0:4e:47:42:52:
44:3e:9c:21:a0:62:11:ac:3c:7c:f4:34:6b:d0:37:47:28:c4:
b6:58:e1:e1:0c:5e:15:62:cb:20:29:08:1e:f5:4e:74:c1:f7:
72:0f:04:fd:56:cc:3f:42:18:8e:93:44:42:40:01:f3:35:17:
d7:7a:52:d5:75:1b:c5:31:22:b8:a3:b9:c3:de:f9:56:56:1d:
cf:68:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:20:18 2025 by rpki-client